00000000000000000000000000aa08000800ff000000080007004e23000008000600240e000008000500faffffff3800030008000500ac1414aa08000800ff000000080003000400000008000500ac1414bb14000600fe80000000000000000000000000000a"], 0x2}, 0x1}, 0x0) 10:16:53 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=@dstopts={0x0, 0x0, [], [@pad1={0x0, 0x1}]}, 0x10) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) accept(r0, &(0x7f0000000180)=@nfc, &(0x7f00000000c0)=0x80) 10:16:53 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) munlock(&(0x7f0000715000/0x3000)=nil, 0x3000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xfffffffffffffffc) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000140)="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", 0x1000) mremap(&(0x7f000044b000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f000023f000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 10:16:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) accept$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@getspdinfo={0x1c4, 0x25, 0x4, 0x70bd2d, 0x25dfdbfd, 0x10000, [@encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in=@broadcast=0xffffffff}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2a, 0x2}}, @algo_auth={0x12c, 0x1, {{'rmd128\x00'}, 0x708, "a20c5984f752279963bcf50126d97439857971b586bd070b31339eb43228201a9dad2567a07c3fbdcae686f845fcc2c16287ebf264f7621880e911fe4740d2bec25df4e127a4d8ab6a467877f42cc75f1e288455f5f7d2a1c3bc8f4fa8f3c4da5963deaaf5e2ce4855b939c69c8bfdc4ecc7802426b024299ad29d5e8fb1663d6366c3e8185b73cebb664a987f8cbfc0f61551c0e4045ee680f5fef61be44f9576ba0d6e458c06ac2323ac500c3f3d417fa751e36d6ba888894381ff96a54011221f57eb238e289684e395d2559c0d0384d216f94c3f194a90425d9ffb9c6db45f"}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0xa}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd28, 0x70bd28, 0x70bd27, 0x70bd25, 0x2, [0x9, 0x3f, 0x7, 0xffffffffffffff67]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$inet6_mtu(r1, 0x29, 0x32, &(0x7f0000000000), 0x1d) 10:16:53 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0x5, 0x3, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000300)=""/83) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) 10:16:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000600)={0xb0, 0xffffffffffffffff, 0x7, [{{0x4, 0x3, 0x1, 0x1b7, 0xfffffffffffffff7, 0x1ff, {0x2, 0x9a0000000, 0xfb, 0x2, 0x6e, 0xf7, 0xffffffff7fffffff, 0x100, 0x7ff, 0xb8, 0x4, r2, r3, 0x1, 0x100000001}}, {0x2, 0x20200000000, 0x7, 0x3ff, 'vmnet1]'}}]}, 0xb0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000500)={'nat\x00', 0xc7, "3fa15024b1e08abf3c75da2ab2db13a42cb986aaa54f57e1ef1cee21c5b3708a45574c21fd7148c9e5d6aaec6cc92c8d6602c8227cb6ab6d4d2dc958dca47b53f841623fc7efc12c72090ee10d54f06aadac95619a48e08bad22f3562ae9e4d791098b61948ddc7ece6631600c1e1d7350e27611e65e31fc8b8cc04e37067a3a798a0234e51b3bdc17ee1c0d0cfa371a7f96c89a8de57f7e2d7a88c3bb0a618d3489c68cd0a89a42d27cd4cd9519bc0f144a265ea7979fa110522f29eb4d16732702887fc1c2f1"}, &(0x7f0000000100)=0xeb) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) [ 191.101847] BTRFS error (device loop5): open_ctree failed 10:16:53 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x804) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x4}, 0x1c) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="76325aed29efc4b8797a6bd0e39ceb6f9f4b4e6c73bd5c332cd03c66b01d781bcd24ae3d157701f8fcd17531c5dda4d5854ae450954b948dc4d18e380f104759f99d05bdb76450c963266b87f75fb20a1684c818"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_alloc(0x0, 0x3) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'broute\x00'}, &(0x7f0000000140)=0x78) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x3) pkey_free(0xffffffffffffffff) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0x0, 0xffffffeffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 10:16:53 executing program 2: mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x3a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 10:16:53 executing program 2: mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x3a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 10:16:53 executing program 2: mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x3a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) [ 191.397974] BTRFS error (device loop5): superblock checksum mismatch 10:16:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) read(r0, &(0x7f0000000080)=""/123, 0x7b) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2c0800, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x10}) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x10000000}) shutdown(r0, 0x0) 10:16:53 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x1ffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="0a34361f96a3115d6d1b00858760f6ad", 0x10}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000236c26a48d9b3d00000"], 0x10, 0x4}, 0x20}], 0x1, 0x40000) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=""/117, &(0x7f00000000c0)=0x75) 10:16:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31207663616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d6ec8a5d9c83ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@loopback, @loopback, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) socket$inet6(0xa, 0x3, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663", @ANYBLOB="00062bbd7000fcdbdf251000000020000100080001000a0000000c0007001000000032000000080004004e21000008000400040000000c0003000800010001000000580003001400020076657468305f746f5f6272696467650008000500000000011400060000000000000000000000ffffe000000214000600fe8000000000000000000000000000aa08000800ff000000080007004e23000008000600240e000008000500faffffff3800030008000500ac1414aa08000800ff000000080003000400000008000500ac1414bb14000600fe80000000000000000000000000000a"], 0x2}, 0x1}, 0x0) [ 191.523416] BTRFS error (device loop5): open_ctree failed [ 191.554853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41878 sclass=netlink_route_socket pig=13904 comm=syz-executor2 [ 191.634795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41878 sclass=netlink_route_socket pig=13904 comm=syz-executor2 [ 191.749678] binder: 13833:13918 got reply transaction with no transaction stack [ 191.770491] binder: 13833:13918 transaction failed 29201/-71, size 0-0 line 2921 [ 191.879917] binder_alloc: binder_alloc_mmap_handler: 13833 20001000-20004000 already mapped failed -16 [ 191.891803] binder: BINDER_SET_CONTEXT_MGR already set [ 191.891889] binder: 13833:13926 transaction failed 29189/-22, size 0-0 line 3013 [ 191.904736] binder: 13833:13918 ioctl 40046207 0 returned -16 [ 191.910706] binder: 13833:13918 ERROR: BC_REGISTER_LOOPER called without request [ 191.910709] binder: undelivered TRANSACTION_ERROR: 29189 [ 191.924436] binder: undelivered TRANSACTION_ERROR: 29201 10:16:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:16:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31207663616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d6ec8a5d9c83ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@loopback, @loopback, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) socket$inet6(0xa, 0x3, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663", @ANYBLOB="00062bbd7000fcdbdf251000000020000100080001000a0000000c0007001000000032000000080004004e21000008000400040000000c0003000800010001000000580003001400020076657468305f746f5f6272696467650008000500000000011400060000000000000000000000ffffe000000214000600fe8000000000000000000000000000aa08000800ff000000080007004e23000008000600240e000008000500faffffff3800030008000500ac1414aa08000800ff000000080003000400000008000500ac1414bb14000600fe80000000000000000000000000000a"], 0x2}, 0x1}, 0x0) 10:16:54 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x401}, {0xa, 0x4e24, 0x1}, 0xfff, [0x8, 0x1f, 0x5, 0x6, 0x6, 0x7, 0x8, 0x1b]}, 0x5c) prctl$setname(0xf, &(0x7f0000000000)='wlan1+#\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6) 10:16:54 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x80, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000200)=0x35dc5961) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() ioctl(r1, 0xb7cd, &(0x7f0000000180)="c1261c50b919c174a47090a6e0c4e7265308c0001f4dc891dab63cc8a6a85af5e84737695fbc3a790d733bba0f70fa1bd137c7be19bf4fc4687fe20be135091a55d581ea41ec51e0081141b814eb7e2f2454ef0ad6c4c7da934a7edbf79e4eaba7e0c1b934") fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, r2) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 10:16:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=@dstopts={0x0, 0x0, [], [@pad1={0x0, 0x1}]}, 0x10) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) accept(r0, &(0x7f0000000180)=@nfc, &(0x7f00000000c0)=0x80) 10:16:54 executing program 1: userfaultfd(0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x4031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000004c0)) r1 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/113, 0x71) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000280)='./file0\x00', 0x2) 10:16:54 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x804) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x4}, 0x1c) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="76325aed29efc4b8797a6bd0e39ceb6f9f4b4e6c73bd5c332cd03c66b01d781bcd24ae3d157701f8fcd17531c5dda4d5854ae450954b948dc4d18e380f104759f99d05bdb76450c963266b87f75fb20a1684c818"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_alloc(0x0, 0x3) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'broute\x00'}, &(0x7f0000000140)=0x78) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x3) pkey_free(0xffffffffffffffff) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0x0, 0xffffffeffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 10:16:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000380)="2292f63580b32fd057a1e7b9d973e480930138e36c65e3f099776122d5b50dd1db297b906472374e768c684bb41c4e76bd8ec89157ca4347e945ec8efc427e11905c8bda7a9990d1c48130064db39fdbbbbbbca382cd8d8bec5a5f049af725fae11ffc1958940d7cf1591eb7767ebf50f40318d9c48a473f6dd42b3f4dabd8cab0716ff20f1c6ff3b36fd9f0ed0f9e92587c9a2a580f5a", 0x97, 0xc000, &(0x7f0000000440)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x8d1, 0x7ff, 0x0, 0x8000, 0x0, 0x2, 0x20800, 0x9, 0x8, 0x3, 0x7fff, 0xffffffffffffffff, 0x7, 0x1, 0x1, 0xda6, 0x81, 0x7, 0x0, 0x10001, 0x5, 0x1, 0x1, 0x4, 0x0, 0x7, 0xff, 0x36f9, 0x5, 0x3ff, 0x8, 0x2, 0x10000, 0x7ff, 0x79b, 0x3, 0x0, 0x6, 0x1, @perf_config_ext={0x400, 0x6}, 0x0, 0x5, 0xfff, 0x7, 0x2, 0x3, 0x184f}, r5, 0x7, 0xffffffffffffffff, 0x2) lseek(r4, 0x0, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x78) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0x0, 0x1, {{0xffffffffffffff01, 0x6, 0xcc, 0xffffffff, 0x8001, 0x1, 0x8000, 0x5}}}, 0x60) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r4, r6, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r6, 0x0) sendto$inet(r1, &(0x7f0000000500), 0xfffffffffffffcec, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getitimer(0x1, &(0x7f0000000100)) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 10:16:54 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x401}, {0xa, 0x4e24, 0x1}, 0xfff, [0x8, 0x1f, 0x5, 0x6, 0x6, 0x7, 0x8, 0x1b]}, 0x5c) prctl$setname(0xf, &(0x7f0000000000)='wlan1+#\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6) [ 191.930039] binder: undelivered TRANSACTION_ERROR: 29189 [ 191.963537] binder: 13937:13941 ERROR: BC_REGISTER_LOOPER called without request 10:16:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x190db89, 0x688, 0x1000, 0xa7}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/178) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)="3e24fff75b87bb2c08073d16e5342587abc14cb288502228a572a422de99188d9d9c2f54e4265019bf18d1f8ae468806d3570e97a7a6b5602b31ef83a72fc25d6894635430d33257912339bddf3a4defb67937bf0f0541206ffc504504e4483a520deffda672531a1f47b033739c19e3a496cf7fb80dcda6ef616275a405b8a332196b0bdca80f982d2402032cb7da7483f3048396e1a41ed6bbd14917356d734dd5aaa9faa7f271b30f0284", 0xac}, {&(0x7f0000000400)="8b79f812736388662a196dda2c549533a7d277d877a0eecbb25ec2bf010445f2ea3ca4e77907ccfd09ec0fe8608a00a4e9af25b3fe92f7eb23a99de4727fd5753378db9fc59972ea8ef3c1218fb43f7f3a05d2522b1e8fe9c2158338ac1725e3c047d1a0562d4e14a1ef32cae0c7fe3acc17ed9a87e18cf28d32afab75a54bebddd042823cf8abc9361ef6592a6690dc3d63ab5b017ada1a49f47c36c75b8232083997aa9a950375c99550d82d6d992091a91090119267658762dbbfefb3c289779b65a3787c4ee5124811a9f27d816bec82fad11ace58bf8e1bd301c62e5301b0424b4b1d62b644df2bea5d0abddc7de21a99fb", 0xf4}], 0x2, 0x0, 0x0, 0x40000}, 0xc5) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x121000, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) fstatfs(r0, &(0x7f0000000180)=""/191) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment={0x7d, 0x0, 0x5f1, 0x4, 0x0, 0x100, 0x68}, 0xffffffffffffff68) [ 192.011097] binder: release 13937:13941 transaction 415 out, still active [ 192.045874] binder: undelivered TRANSACTION_COMPLETE [ 192.077905] binder: 13937:13941 transaction failed 29189/0, size 0-0 line 2945 [ 192.104672] binder: send failed reply for transaction 415, target dead 10:16:54 executing program 2: r0 = inotify_init1(0x80800) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x2000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x800000000000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100000000000000001e0033730040b40200000000000000002c008000000000e6ff00000000002c00000000000000f7ff00"]) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) stat(&(0x7f0000006880)='./file0\x00', &(0x7f00000068c0)) getsockname$packet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x205) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x1ed) fcntl$setstatus(r5, 0x4, 0x42000) accept$packet(r2, &(0x7f0000000200), &(0x7f0000000400)=0x14) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/validatetrans\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c}) write$P9_RREADDIR(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000050000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7201006e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c007fbd3580f806c6fc3853e4667cc8694d98f6940ee07eec655f8897d21788902dcb49d9214f9ae3ca1ef247998741a3b57b2e44cd3954c6eb9bf8fe53ad7aa742867dd023bc91719895e77b4b35fba76966c178e916423c0bf26f5ad0dda43282399f888968dfb30640c7e95b56a40fd65a"]) umount2(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x3f) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup2(r1, r8) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x2) 10:16:54 executing program 1: userfaultfd(0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x4031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000004c0)) r1 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/113, 0x71) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000280)='./file0\x00', 0x2) [ 192.138055] binder_alloc: binder_alloc_mmap_handler: 13937 20001000-20004000 already mapped failed -16 [ 192.159017] binder: BINDER_SET_CONTEXT_MGR already set [ 192.159028] binder: 13937:13941 ioctl 40046207 0 returned -16 [ 192.238168] binder_alloc: 13937: binder_alloc_buf, no vma 10:16:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000380)="2292f63580b32fd057a1e7b9d973e480930138e36c65e3f099776122d5b50dd1db297b906472374e768c684bb41c4e76bd8ec89157ca4347e945ec8efc427e11905c8bda7a9990d1c48130064db39fdbbbbbbca382cd8d8bec5a5f049af725fae11ffc1958940d7cf1591eb7767ebf50f40318d9c48a473f6dd42b3f4dabd8cab0716ff20f1c6ff3b36fd9f0ed0f9e92587c9a2a580f5a", 0x97, 0xc000, &(0x7f0000000440)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x8d1, 0x7ff, 0x0, 0x8000, 0x0, 0x2, 0x20800, 0x9, 0x8, 0x3, 0x7fff, 0xffffffffffffffff, 0x7, 0x1, 0x1, 0xda6, 0x81, 0x7, 0x0, 0x10001, 0x5, 0x1, 0x1, 0x4, 0x0, 0x7, 0xff, 0x36f9, 0x5, 0x3ff, 0x8, 0x2, 0x10000, 0x7ff, 0x79b, 0x3, 0x0, 0x6, 0x1, @perf_config_ext={0x400, 0x6}, 0x0, 0x5, 0xfff, 0x7, 0x2, 0x3, 0x184f}, r5, 0x7, 0xffffffffffffffff, 0x2) lseek(r4, 0x0, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x78) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0x0, 0x1, {{0xffffffffffffff01, 0x6, 0xcc, 0xffffffff, 0x8001, 0x1, 0x8000, 0x5}}}, 0x60) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r4, r6, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r6, 0x0) sendto$inet(r1, &(0x7f0000000500), 0xfffffffffffffcec, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getitimer(0x1, &(0x7f0000000100)) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 10:16:54 executing program 0: userfaultfd(0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x4031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000004c0)) r1 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/113, 0x71) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000280)='./file0\x00', 0x2) 10:16:54 executing program 5: userfaultfd(0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x4031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000004c0)) r1 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/113, 0x71) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000280)='./file0\x00', 0x2) [ 192.259117] binder: 13937:13941 ERROR: BC_REGISTER_LOOPER called without request [ 192.259131] binder: 13937:13941 ioctl c0306201 20000240 returned -11 [ 192.262841] binder: undelivered TRANSACTION_ERROR: 29190 [ 192.300313] FAT-fs (loop2): bogus number of reserved sectors [ 192.300331] FAT-fs (loop2): Can't find a valid FAT filesystem [ 192.420422] binder: 13937:13963 transaction failed 29189/-3, size 0-0 line 3136 10:16:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.eve\x00\x00s\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x20, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r4}, 0x2c}]}}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:16:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) r2 = socket$inet6(0xa, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2}, 0x10) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x10000, 0x6) 10:16:54 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/91) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac1414bb424a1087d87e722c6a000000ac1414aa00000000ac1414bbe0000002e0000002000000007f0000015d14140bf4ffff05e0000001311ac9ffad298304579a6948e71d6ac810120b24aa8d4910006e3eb23ab218dc8ada8af45c3ec60ff8583478ca6f7721c3f16f80b2bf3200b71f7b46624554a5d6287f515bb08724ca399a9b617072f6f6efbd6398bacb9ad257f4ad61a0b485609bfd5e19e9bb7e897d049c70c3cf3730c8179cb776a9c925045c6ad97a5e4a6f350bd402cd31c4fdb1299f25ca39d0b3c460c3210496d783d5717a9f29927c44b8aabd9f4a7d97b8"], 0x38) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x14c) r5 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) mount$9p_xen(&(0x7f0000000180)='/selinux/status\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='9p\x00', 0x8000, &(0x7f0000000500)={'trans=xen,', {[{@access_uid={'access', 0x3d, r5}, 0x2c}, {@dfltuid={'dfltuid', 0x3d, r6}, 0x2c}, {@access_user='access=user', 0x2c}, {@fscache='fscache', 0x2c}, {@mmap='mmap', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@version_L='version=9p2000.L', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@posixacl='posixacl', 0x2c}]}}) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$P9_RCREATE(r4, &(0x7f0000000280)={0x18, 0x73}, 0x18) dup2(r1, r3) 10:16:54 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) setresuid(r1, r2, r3) unshare(0x8020000) [ 192.451264] binder: undelivered TRANSACTION_ERROR: 29189 10:16:54 executing program 3: r0 = socket$inet6(0xa, 0x800000000080003, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setreuid(0x0, 0x0) prctl$intptr(0x8, 0x1) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x4, @empty, 0x20}, {0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1, [0x0, 0x2, 0x2, 0xffffffffffff7fff, 0x8, 0xfffffffffffffff9, 0x0, 0x3]}, 0x5c) [ 192.521281] binder: 13984:13985 ERROR: BC_REGISTER_LOOPER called without request [ 192.540313] binder: release 13984:13985 transaction 419 out, still active [ 192.555016] binder: undelivered TRANSACTION_COMPLETE 10:16:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000100)=""/94) 10:16:55 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='oom_score\x00') setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0xfff, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, {0xa, 0x4e20, 0x8d1e, @remote={0xfe, 0x80, [], 0xbb}, 0x80000000}, 0x9, [0x19, 0x0, 0xafa, 0x9, 0x7fffffff, 0x0, 0xc9, 0x1]}, 0x5c) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3ff0000}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x80000000000004c, &(0x7f0000b54ffc)=0x1000000, 0x4) [ 192.569066] binder: 13984:13985 transaction failed 29189/0, size 0-0 line 2945 [ 192.577663] 9pnet: Insufficient options for proto=fd [ 192.586073] binder: send failed reply for transaction 419, target dead 10:16:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2e7) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c0000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000fc6c0000000000000000000000000000000b0000000000000000004000000000000000000000000000000000000000000000000000000000"], 0x78) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80881, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) write$cgroup_pid(r1, &(0x7f00000001c0)=r2, 0x12) ioprio_set$pid(0x2, r2, 0x80000000) 10:16:55 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000300)='/dev/keychord\x00', 0x2000, 0x0) r1 = accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffdac, 0x80001) prctl$intptr(0x37, 0x10000) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/232, 0xe8}], 0x1, 0x0, 0x0, 0x3f}, 0x3}], 0x1, 0x1, &(0x7f0000000280)={0x0, 0x1c9c380}) r2 = socket(0x10, 0x83000000003, 0x0) signalfd(r2, &(0x7f00000002c0), 0x8) write(r2, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000000000072d907000f510007140028", 0x22) [ 192.623315] binder: BINDER_SET_CONTEXT_MGR already set [ 192.631464] binder: 13984:13995 ioctl 40046207 0 returned -16 [ 192.644348] binder: 13984:13995 ERROR: BC_REGISTER_LOOPER called without request [ 192.645251] binder_alloc: 13984: binder_alloc_buf, no vma [ 192.645268] binder: 13984:13985 transaction failed 29189/-3, size 0-0 line 3136 [ 192.674982] binder: undelivered TRANSACTION_ERROR: 29189 [ 192.690267] FAT-fs (loop2): bogus number of reserved sectors 10:16:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x400, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x1, 0xd14}}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x408) mmap(&(0x7f0000729000/0x1000)=nil, 0x1000, 0x0, 0x8000000000004011, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) 10:16:55 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newneigh={0x3c, 0x1c, 0x8, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x0, 0x80, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r2}, @NDA_MASTER={0x8, 0x9, 0x100000000}, @NDA_VNI={0x8, 0x7, 0x914}, @NDA_PROBES={0x8, 0x4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) r3 = socket$inet6(0xa, 0x7, 0x7) getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000501000)=""/95, &(0x7f0000000000)=0x5f) [ 192.690299] FAT-fs (loop2): Can't find a valid FAT filesystem [ 192.711141] binder: 13984:14001 got reply transaction with no transaction stack [ 192.711151] binder: 13984:14001 transaction failed 29201/-71, size 0-0 line 2921 [ 192.725619] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 192.725718] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. 10:16:55 executing program 2: r0 = inotify_init1(0x80800) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x2000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x800000000000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100000000000000001e0033730040b40200000000000000002c008000000000e6ff00000000002c00000000000000f7ff00"]) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) stat(&(0x7f0000006880)='./file0\x00', &(0x7f00000068c0)) getsockname$packet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x205) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x1ed) fcntl$setstatus(r5, 0x4, 0x42000) accept$packet(r2, &(0x7f0000000200), &(0x7f0000000400)=0x14) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/validatetrans\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c}) write$P9_RREADDIR(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000050000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7201006e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c007fbd3580f806c6fc3853e4667cc8694d98f6940ee07eec655f8897d21788902dcb49d9214f9ae3ca1ef247998741a3b57b2e44cd3954c6eb9bf8fe53ad7aa742867dd023bc91719895e77b4b35fba76966c178e916423c0bf26f5ad0dda43282399f888968dfb30640c7e95b56a40fd65a"]) umount2(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x3f) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup2(r1, r8) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x2) 10:16:55 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x121000, 0x106) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x3, 0x0, 0x800, 0x3, 0x8}}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x4}, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, @in=@dev={0xac, 0x14, 0x14}, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x32}, 0x0, @in6}]}, @mark={0xc, 0x15}]}, 0x178}, 0x1}, 0x48000) 10:16:55 executing program 4: r0 = inotify_init1(0x80800) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x2000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x800000000000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100000000000000001e0033730040b40200000000000000002c008000000000e6ff00000000002c00000000000000f7ff00"]) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) stat(&(0x7f0000006880)='./file0\x00', &(0x7f00000068c0)) getsockname$packet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x205) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x1ed) fcntl$setstatus(r5, 0x4, 0x42000) accept$packet(r2, &(0x7f0000000200), &(0x7f0000000400)=0x14) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/validatetrans\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c}) write$P9_RREADDIR(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000050000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7201006e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c007fbd3580f806c6fc3853e4667cc8694d98f6940ee07eec655f8897d21788902dcb49d9214f9ae3ca1ef247998741a3b57b2e44cd3954c6eb9bf8fe53ad7aa742867dd023bc91719895e77b4b35fba76966c178e916423c0bf26f5ad0dda43282399f888968dfb30640c7e95b56a40fd65a"]) umount2(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x3f) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup2(r1, r8) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x2) 10:16:55 executing program 3: r0 = inotify_init1(0x80800) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x2000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x800000000000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100000000000000001e0033730040b40200000000000000002c008000000000e6ff00000000002c00000000000000f7ff00"]) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) stat(&(0x7f0000006880)='./file0\x00', &(0x7f00000068c0)) getsockname$packet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x205) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x1ed) fcntl$setstatus(r5, 0x4, 0x42000) accept$packet(r2, &(0x7f0000000200), &(0x7f0000000400)=0x14) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/validatetrans\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c}) write$P9_RREADDIR(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000050000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7201006e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c007fbd3580f806c6fc3853e4667cc8694d98f6940ee07eec655f8897d21788902dcb49d9214f9ae3ca1ef247998741a3b57b2e44cd3954c6eb9bf8fe53ad7aa742867dd023bc91719895e77b4b35fba76966c178e916423c0bf26f5ad0dda43282399f888968dfb30640c7e95b56a40fd65a"]) umount2(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x3f) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup2(r1, r8) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x2) [ 192.737944] 9pnet: Insufficient options for proto=fd [ 192.739458] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 192.739491] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 192.802750] binder: undelivered TRANSACTION_ERROR: 29190 10:16:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x121200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x7fffffff, 0x7}, 0x1, 0x8, 0x5, {0x7, 0xff}, 0xffffffffffffff7d, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x100011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, r2, 0x2}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="000000e0ffffff00"], 0x0, 0x0, &(0x7f0000000480)}) write$P9_RLERRORu(r1, &(0x7f0000000100)={0x15, 0x7, 0x2, {{0x8, 'vmnet1lo'}, 0x5956}}, 0x15) 10:16:55 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.eve\x00\x00s\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x20, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r4}, 0x2c}]}}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 192.899196] binder: undelivered TRANSACTION_ERROR: 29201 [ 192.949413] binder: 14051:14053 ERROR: BC_REGISTER_LOOPER called without request [ 192.965190] binder: release 14052:14054 transaction 425 out, still active [ 192.977155] FAT-fs (loop4): bogus number of reserved sectors [ 192.988570] FAT-fs (loop2): bogus number of reserved sectors [ 192.988598] FAT-fs (loop2): Can't find a valid FAT filesystem [ 192.995480] binder: release 14051:14053 transaction 424 out, still active [ 192.995484] binder: undelivered TRANSACTION_COMPLETE [ 192.996012] binder: 14051:14053 transaction failed 29189/0, size 0-0 line 2945 [ 192.996058] binder: send failed reply for transaction 424, target dead [ 192.998513] binder: undelivered TRANSACTION_COMPLETE [ 193.010881] binder: undelivered TRANSACTION_ERROR: 29190 [ 193.010900] binder: send failed reply for transaction 425, target dead [ 193.010909] binder: send failed reply for transaction 427 to 14052:14054 [ 193.028846] FAT-fs (loop3): bogus number of reserved sectors [ 193.028864] FAT-fs (loop3): Can't find a valid FAT filesystem [ 193.030831] binder: undelivered TRANSACTION_COMPLETE [ 193.030838] binder: undelivered TRANSACTION_ERROR: 29189 [ 193.118509] FAT-fs (loop4): Can't find a valid FAT filesystem [ 193.130453] 9pnet: Insufficient options for proto=fd [ 193.153269] 9pnet: Insufficient options for proto=fd [ 193.226205] 9pnet: Insufficient options for proto=fd 10:16:56 executing program 0: r0 = socket(0x10, 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffffffffffffbd, 0x65fd) close(r0) 10:16:56 executing program 1: r0 = inotify_init1(0x80800) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x2000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x800000000000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100000000000000001e0033730040b40200000000000000002c008000000000e6ff00000000002c00000000000000f7ff00"]) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) stat(&(0x7f0000006880)='./file0\x00', &(0x7f00000068c0)) getsockname$packet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x205) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x1ed) fcntl$setstatus(r5, 0x4, 0x42000) accept$packet(r2, &(0x7f0000000200), &(0x7f0000000400)=0x14) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/validatetrans\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c}) write$P9_RREADDIR(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000050000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7201006e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c007fbd3580f806c6fc3853e4667cc8694d98f6940ee07eec655f8897d21788902dcb49d9214f9ae3ca1ef247998741a3b57b2e44cd3954c6eb9bf8fe53ad7aa742867dd023bc91719895e77b4b35fba76966c178e916423c0bf26f5ad0dda43282399f888968dfb30640c7e95b56a40fd65a"]) umount2(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x3f) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup2(r1, r8) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x2) 10:16:56 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000180), &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) setuid(r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x3, 0x9, 0x5}, {{0x0, 0x2710}, 0x218a, 0x1ff, 0x625b}, {{r2, r3/1000+10000}, 0x4, 0x9, 0x7}, {{}, 0x800, 0x8, 0x11}, {{}, 0x1, 0x4, 0x100000000}, {{r4, r5/1000+10000}, 0x9, 0x8, 0x7}], 0x90) 10:16:56 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003ac0)='/selinux/enforce\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000003980)=[{{&(0x7f0000000040)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/69, 0x45}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f00000014c0)=""/243, 0xf3}], 0x5, &(0x7f0000001640)=""/156, 0x9c, 0x800}, 0x4546a413}, {{&(0x7f0000001700)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/121, 0x79}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x4, &(0x7f0000003880)=""/212, 0xd4}, 0x5d64c1bc}], 0x2, 0x40, &(0x7f0000003a00)={r2, r3+10000000}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000003a40)=r4) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:16:56 executing program 2: clock_getres(0x7, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084905, &(0x7f0000000000)) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x103, 0x0) write$selinux_validatetrans(r1, &(0x7f0000000080)={'system_u:object_r:policy_config_t:s0', 0x20, 'system_u:object_r:shell_exec_t:s0', 0x20, 0x40, 0x20, '/usr/sbin/cupsd\x00'}, 0x6c) 10:16:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000e40)=@filter={'filter\x00', 0xe, 0x2, 0x15b, [0x0, 0x20000180, 0x200003c0, 0x200003f0], 0x0, &(0x7f0000000140), &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1d3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r2, 0x700, 0x70bd2d, 0x25dfdbfb, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x13}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xf2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffffc1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x49c7b6eb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xac}, 0x1}, 0x4000000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002980)={{{@in=@remote, @in6=@local}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000002a80)=0xe8) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe42, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 10:16:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="6521728585cdc7d7b8682b3eb0fb1d3dd591845e43497ec56b19af2996942350c5bc44d336a6ff56863126db0798a12af8e1a6d0c459c924da392d126abe5145668643ebe069deeeafee9944f6093a7e2d499200ca54ff1f5ea5db12395ec435", 0x60, 0xfffffffffffffffe) r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)) fallocate(r1, 0x0, 0x0, 0x80ce63) request_key(&(0x7f0000000440)="646e735f7265736f6c76657200eeb8f2bc436554fd7cbe8f3f6be0fb16aee7a7b23c182ceffbac35ef1750a570ac2fdc99215854a81617d10b3621afd11ccc71fddec8c48df4e983290b2a636ed6e91242bcef6d596b3e23dc5f2d804a9817bb88bc57def053fe6dc74966982e1300e5b8217628c72bda", &(0x7f0000000400)={0x73, 0x79, 0x7a}, &(0x7f0000000340)='\\%^self\x00', r0) connect(r1, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x70}, 0x80) signalfd4(r1, &(0x7f0000000280)={0x10000}, 0x8, 0x80800) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x14) 10:16:56 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000000000)={{0x0, 0x80000001}, 0x0, 0x0, 0x6ad, {0x0, 0x8ed}}) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) geteuid() read(r3, &(0x7f0000002900)=""/4096, 0xfffffffffffffdfd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x80080) sched_setaffinity(0x0, 0xfffffffffffffd8b, &(0x7f00000000c0)=0x9) sendfile(r1, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) 10:16:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) getsockopt$inet_int(r1, 0x0, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x8004510b, &(0x7f000084dfff)) 10:16:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x10001, 0x18b1ff) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa}, 0x1c) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x20000, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mlockall(0x5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) munlockall() socket$netlink(0x10, 0x3, 0x20000000c) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x1d6) [ 193.675948] binder: 14081:14086 ERROR: BC_REGISTER_LOOPER called without request 10:16:56 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)={0x101, 0x3, {0x2, 0x8000000000003, 0x6, 0x0, 0x3f}}) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000400)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)}], 0x800010, &(0x7f0000000240)=ANY=[]) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x14) ftruncate(r0, 0x1) lseek(r0, 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141044, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000002c0)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x4) 10:16:56 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x7fffffff) ioctl(r0, 0x200, &(0x7f00000000c0)="0220807e4e70b45974c1d5a99e035cc83d6d17") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0x46, [], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/70}, &(0x7f0000000280)=0x78) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @multicast1}, &(0x7f0000000040)=0x10) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000080)={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002}, 0xc) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) flock(r4, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x2000000000000007, &(0x7f0000013ff4)={@rand_addr, @rand_addr, @multicast1=0xe0000001}, 0x221) close(r5) dup3(r1, r3, 0x0) [ 193.720034] binder_alloc: 14081: binder_alloc_buf, no vma [ 193.749047] binder: 14081:14086 transaction failed 29189/-3, size 0-0 line 3136 [ 193.790126] binder: send failed reply for transaction 429 to 14081:14086 [ 193.820776] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 193.835691] binder_alloc: binder_alloc_mmap_handler: 14081 20001000-20004000 already mapped failed -16 10:16:56 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000180), &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) setuid(r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x3, 0x9, 0x5}, {{0x0, 0x2710}, 0x218a, 0x1ff, 0x625b}, {{r2, r3/1000+10000}, 0x4, 0x9, 0x7}, {{}, 0x800, 0x8, 0x11}, {{}, 0x1, 0x4, 0x100000000}, {{r4, r5/1000+10000}, 0x9, 0x8, 0x7}], 0x90) [ 193.864083] binder: BINDER_SET_CONTEXT_MGR already set [ 193.864092] binder: 14081:14086 ioctl 40046207 0 returned -16 10:16:56 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 193.945106] FAT-fs (loop1): bogus number of reserved sectors [ 193.957499] binder_alloc: 14081: binder_alloc_buf, no vma [ 193.957519] binder: 14081:14120 transaction failed 29189/-3, size 0-0 line 3136 [ 193.958681] binder: 14081:14086 ERROR: BC_REGISTER_LOOPER called without request [ 193.962556] binder: undelivered TRANSACTION_ERROR: 29189 [ 193.962584] binder: undelivered TRANSACTION_ERROR: 29190 [ 193.962669] binder: undelivered TRANSACTION_COMPLETE [ 193.962675] binder: undelivered TRANSACTION_ERROR: 29189 [ 193.997111] binder: 14122:14124 ERROR: BC_REGISTER_LOOPER called without request 10:16:56 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @local}, &(0x7f0000000040)=0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000300)={0x7, {{0x2, 0x4e20, @loopback=0x7f000001}}}, 0x88) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 193.997188] binder: release 14122:14124 transaction 433 out, still active [ 193.997192] binder: undelivered TRANSACTION_COMPLETE 10:16:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000180), &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) setuid(r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x3, 0x9, 0x5}, {{0x0, 0x2710}, 0x218a, 0x1ff, 0x625b}, {{r2, r3/1000+10000}, 0x4, 0x9, 0x7}, {{}, 0x800, 0x8, 0x11}, {{}, 0x1, 0x4, 0x100000000}, {{r4, r5/1000+10000}, 0x9, 0x8, 0x7}], 0x90) 10:16:56 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x20) clone(0x0, &(0x7f0000000180), &(0x7f0000000080), &(0x7f00000011c0), &(0x7f0000000280)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000013c0)='team\x00') getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) [ 193.998516] binder: 14122:14124 transaction failed 29189/0, size 0-0 line 2945 [ 193.998527] binder: send failed reply for transaction 433, target dead [ 194.000849] binder_alloc: binder_alloc_mmap_handler: 14122 20001000-20004000 already mapped failed -16 [ 194.002056] binder: BINDER_SET_CONTEXT_MGR already set [ 194.002064] binder: 14122:14124 ioctl 40046207 0 returned -16 [ 194.002114] binder_alloc: 14122: binder_alloc_buf, no vma [ 194.002132] binder: 14122:14125 transaction failed 29189/-3, size 0-0 line 3136 [ 194.003322] binder: 14122:14124 ERROR: BC_REGISTER_LOOPER called without request [ 194.003345] binder: undelivered TRANSACTION_ERROR: 29189 [ 194.018097] binder: 14122:14126 got reply transaction with no transaction stack [ 194.018107] binder: 14122:14126 transaction failed 29201/-71, size 0-0 line 2921 [ 194.120484] binder: undelivered TRANSACTION_ERROR: 29190 [ 194.125624] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.170647] binder: 14128:14130 ERROR: BC_REGISTER_LOOPER called without request [ 194.173559] binder: release 14128:14130 transaction 438 out, still active [ 194.173563] binder: undelivered TRANSACTION_COMPLETE [ 194.174604] binder: 14128:14130 transaction failed 29189/0, size 0-0 line 2945 [ 194.174610] binder: send failed reply for transaction 438, target dead [ 194.178064] binder_alloc: binder_alloc_mmap_handler: 14128 20001000-20004000 already mapped failed -16 [ 194.186594] binder: BINDER_SET_CONTEXT_MGR already set [ 194.186602] binder: 14128:14130 ioctl 40046207 0 returned -16 [ 194.186728] binder_alloc: 14128: binder_alloc_buf, no vma [ 194.186750] binder: 14128:14132 transaction failed 29189/-3, size 0-0 line 3136 [ 194.187924] binder: 14128:14130 ERROR: BC_REGISTER_LOOPER called without request 10:16:57 executing program 1: prctl$setmm(0x23, 0x403, &(0x7f0000ffc000/0x1000)=nil) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', r1}) prctl$setmm(0x23, 0x1, &(0x7f0000ffc000/0x1000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000240)) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x8000, 0x7fffffff) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 10:16:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x100}, {r1, 0x8240}, {r1, 0x10}, {r0, 0x4500}, {r0, 0x48}, {r1, 0x2000}], 0x6, &(0x7f0000000380)={r2, r3+30000000}, &(0x7f0000000440)={0x1f}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000040)="575241b6a923a13da6ddfb9ce440cec8c2e1a8cd7a46ef3de27a463d6959e99afa2f0d53500c34518b7f699a7c7d12557b03ade0c5dbc4074b85749f39449043329a3bb6852773bd79205a824134876a430d5d9ce5ac7d792b8e10a2b8") ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000300)=""/114) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:16:57 executing program 6: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r3) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) waitid(0x0, 0x0, &(0x7f0000000000), 0x8, &(0x7f0000000140)) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000003, 0x0) 10:16:57 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0x1, 0xb12d}}, 0x30) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x3fffc, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000140)=0x3) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x92, 0x78c, 0x2}) sendfile(r1, r2, &(0x7f0000000000), 0x2b428a52) [ 194.198536] binder: undelivered TRANSACTION_ERROR: 29189 [ 194.198561] binder: undelivered TRANSACTION_ERROR: 29190 [ 194.551842] 9pnet: Insufficient options for proto=fd [ 194.707381] FAT-fs (loop1): Can't find a valid FAT filesystem [ 194.720835] FAT-fs (loop0): Unrecognized mount option "" or missing value 10:16:57 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/autofs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002880), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndtimer(&(0x7f0000002980)='/dev/snd/timer\x00', 0x0, 0x0) pipe2(&(0x7f0000002a00), 0x0) eventfd(0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000003380)='/dev/zero\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000003440)='/dev/input/mice\x00', 0x0, 0x0) eventfd(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) signalfd4(0xffffffffffffffff, &(0x7f00000050c0), 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000005180), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000005200)='/dev/null\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000005240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000067c0)='/dev/vga_arbiter\x00', 0x0, 0x0) userfaultfd(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(&(0x7f0000006800), 0x0) inotify_init() openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000006e00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) eventfd(0x0) socket$packet(0x11, 0x3, 0x300) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000087c0)='/dev/urandom\x00', 0x0, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) openat$autofs(0xffffffffffffff9c, &(0x7f0000008840)='/dev/autofs\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000008980)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) pipe2(&(0x7f0000008a00), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000008a40)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000008b00)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 10:16:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="6521728585cdc7d7b8682b3eb0fb1d3dd591845e43497ec56b19af2996942350c5bc44d336a6ff56863126db0798a12af8e1a6d0c459c924da392d126abe5145668643ebe069deeeafee9944f6093a7e2d499200ca54ff1f5ea5db12395ec435", 0x60, 0xfffffffffffffffe) r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)) fallocate(r1, 0x0, 0x0, 0x80ce63) request_key(&(0x7f0000000440)="646e735f7265736f6c76657200eeb8f2bc436554fd7cbe8f3f6be0fb16aee7a7b23c182ceffbac35ef1750a570ac2fdc99215854a81617d10b3621afd11ccc71fddec8c48df4e983290b2a636ed6e91242bcef6d596b3e23dc5f2d804a9817bb88bc57def053fe6dc74966982e1300e5b8217628c72bda", &(0x7f0000000400)={0x73, 0x79, 0x7a}, &(0x7f0000000340)='\\%^self\x00', r0) connect(r1, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x70}, 0x80) signalfd4(r1, &(0x7f0000000280)={0x10000}, 0x8, 0x80800) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x14) 10:16:57 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e20}, 0xd4) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(r0, &(0x7f0000665ff4)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 10:16:57 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 10:16:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000140)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000e9b000), &(0x7f0000ce4000)) wait4(0x0, &(0x7f0000000080), 0x40000000, &(0x7f00000003c0)) 10:16:57 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) read(r0, &(0x7f0000000380)=""/4096, 0x1000) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040)="96", 0x1, 0x200, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4042200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x0, 0x70bd2a, 0x6470, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x52b2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd433}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 10:16:57 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0xfffffffffffffffd}}, 0xe8) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x1f, 0x1ff, 0x400, 0x4249}) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120000020000000400000000000000"], 0x10}, 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f00000003c0)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000080)=""/30, 0x1e}}, {{&(0x7f00000005c0)=@in6, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000740)=""/186, 0x69}}, {{&(0x7f0000000800), 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000001340)=""/4096, 0x1000}}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) 10:16:57 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ftruncate(0xffffffffffffffff, 0x280080) sendfile(r0, r0, &(0x7f0000d83ff8), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x17}}, 0xc) 10:16:57 executing program 6: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x80000000000e800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020401000200007400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x407, 0x2) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 10:16:57 executing program 5: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x210840, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x9, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22}, 0x40, 0x100000000, 0x1, 0x9, 0x7, &(0x7f0000000040)='ifb0\x00', 0x1, 0x9, 0xf75}) r1 = gettid() timer_create(0x2, &(0x7f0000af8000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000b86ffc)) prctl$seccomp(0x16, 0x1, &(0x7f00004ebff0)={0x0, &(0x7f0000185ff8)}) poll(&(0x7f0000587ff0), 0x0, 0x0) timer_settime(0x0, 0x20001, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 10:16:57 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) mq_unlink(&(0x7f00000019c0)='bdev\x00') ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000380)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0x4e21, 0x80000001, @empty, 0x80000000}, {0xa, 0x4e20, 0x7fff, @empty, 0x4}, 0x1, [0x0, 0x10001, 0xffffffffffffffff, 0x9b66, 0x74d8, 0x5, 0x7fffffff, 0x9]}, 0x5c) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r2, 0x6, &(0x7f0000000240)="dee69158a52974f1aff2584d85154f2b60668e9dfc8995d5940455b22ad4d7136fa68b668edb9d632d2c337829e0e7019d5e3740fb843000bc886398fba67756e743786a5828dc3e5716cedd8b001d6bdc58ce6316fe65eb5300cbc6ad4aed16cf861d69a85092050f6a199b4032a61f30b44f3d48057d96ab62be77c66f981baddc56d97c0ad7501729ca7f07") 10:16:57 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000a004e216900000000000000000000000000ffffe00000028c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ff0100000000000002000000fe8000000000000000000000000000bb55f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x7ffffffe) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x7b}, 0x7) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000340)) 10:16:57 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ftruncate(0xffffffffffffffff, 0x280080) sendfile(r0, r0, &(0x7f0000d83ff8), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x17}}, 0xc) [ 195.151126] audit: type=1404 audit(1532341017.557:2): enforcing=14212 old_enforcing=0 auid=4294967295 ses=4294967295 [ 195.560558] binder: 14164:14239 ERROR: BC_REGISTER_LOOPER called without request [ 195.577371] binder: release 14164:14239 transaction 442 out, still active [ 195.584402] binder: undelivered TRANSACTION_COMPLETE [ 195.595665] binder: 14164:14239 transaction failed 29189/0, size 0-0 line 2945 [ 195.603141] binder: send failed reply for transaction 442, target dead [ 195.715354] binder_alloc: binder_alloc_mmap_handler: 14164 20001000-20004000 already mapped failed -16 [ 195.728281] binder: BINDER_SET_CONTEXT_MGR already set [ 195.733680] binder: 14164:14239 ioctl 40046207 0 returned -16 [ 195.733764] binder_alloc: 14164: binder_alloc_buf, no vma [ 195.733783] binder: 14164:14241 transaction failed 29189/-3, size 0-0 line 3136 [ 195.737241] binder: 14164:14241 ERROR: BC_REGISTER_LOOPER called without request [ 195.755673] binder: 14164:14242 got reply transaction with no transaction stack [ 195.755682] binder: 14164:14242 transaction failed 29201/-71, size 0-0 line 2921 10:16:58 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:16:58 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000f80)=ANY=[]}, 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/214, 0xd6, 0x4, &(0x7f0000000200)={0x77359400}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x87a8, 0xfffffffffffffffe, "0f6433406c2cd5fb5dccf596637432a8f0d1f602980df9463c97fabeb3b87fbdf9cd5eb04afdc723de4bcb0ec12f491fc8314ea5841c3ef474097f3eb2fe5779b2b6e42b927d25019cd9e9aee85ae2d6"}, 0xd8) r0 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x40}, 0xffffffffffffffff}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x20) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000c00)) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000400)=0x3b7) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, &(0x7f000082ef0a)=""/246) r4 = dup2(r3, r2) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000240)={0x1, 0xa01, 0xffffffffffffd161, 0x0, 0xad, 0xfff}) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ppoll(&(0x7f00000002c0)=[{r2}], 0x39a, &(0x7f0000000300), &(0x7f0000000340), 0x8) sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) 10:16:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x88600, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r2) sendto$inet(r1, &(0x7f0000000300)="0c9d57e7ccb84ba80567650333116f76d9d8e29e1eafbc4f97a304c4b89d552d5f3bb78f0706ac166710", 0x2a, 0x4000040, &(0x7f0000000340)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) epoll_pwait(r3, &(0x7f0000000440)=[{}], 0x1, 0x5, &(0x7f0000000480)={0x4}, 0x8) listen(r3, 0x9975) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) signalfd(r3, &(0x7f0000000500)={0x8}, 0x8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000540)=r2) write(r3, &(0x7f0000000580)="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", 0x1000) write$FUSE_LSEEK(r3, &(0x7f0000001580)={0x18, 0x0, 0x4}, 0x18) write$binfmt_script(r0, &(0x7f00000015c0)={'#! ', './file0', [{0x20, 'dctcp\x00'}], 0xa, "a3d277dfbce0e36e8f1cf11f70b3c486b49d3e72a27c73b5736ae9b3bc58e3d90115de8bf548f84f1efea86057278458ff9f648fe70f3a5f701df7d95ad49b714c3b901f0f09e6a6e148398c61a94af8c80a31caefe29a106a5bdaf70efe0dd659d6adeda0653f8a3a19f09db287466a8442c5fa9caa2fab0aa72f27b1657b30ccddb6c828038121eb1168738090a63839ef6a2eb1b3ea4a84fce9541c"}, 0xaf) prctl$getname(0x10, &(0x7f0000001680)=""/249) ioctl(r3, 0x1, &(0x7f0000001780)="a562f8e95310561b1fe5bea56be3ccabc10d2fd903c728f368f5a0cd3badb2c18d5c6221f1e1d52e2f33f7070235181cce45a6701952274943bed593028e2923e176e784af29bc5fe8c85195f6b107336777e3d4166948d8da5c4ed1ac91eb395fc1bf128eca37b28c438d1f6e81063907095a57437996617c276be7d600ca19f3e626d2fce8aa2beda98ca571ac0fa61cc7e1b863657853e75b5e2fa0b1d99b4f10dd6292162f8b580375032fe53f2613d46ddb1afa1aaed1335f63cde1aff23eeca06d2c32") ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001880)) write$binfmt_misc(r3, &(0x7f00000018c0)={'syz0', "8fe2c8218cecd24e85cfec031b033da6cdc6bc423f8282350e46f290ee14e76e7deffb9341726d0c10dd221ffd73e88dbfaa087c5b09dccd04ef1041368033c42d848986a3e6db4a93dc7af06187422e2965ac77b744c6db75aa8cfbf2fd8b7f425ed3691b7fd01e0508b8e9cfae0a0bbf8488fdab9f2adc5205e1d200bec51313fc0c641d005179fb1ed97623f07f031275036913a47c069dbb9397c433af8fd79ef8dd932166c32c6d184899767ce5e1fc8e734f7cf09274702fa50acf7a81ffca7189ec263ba5e8f485a5f6326db53b38697d3f1e209ef5be"}, 0xde) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000019c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a40)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001c00)={&(0x7f0000001a00)={0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x13c, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xab}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x50}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x70000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x19}}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x91}, 0x10) r5 = syz_open_dev$usbmon(&(0x7f0000001c40)='/dev/usbmon#\x00', 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xe8, r4, 0x120, 0x70bd2a, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe46}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}]}]}, 0xe8}, 0x1}, 0x80) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/uinput\x00', 0x8000, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000001e80)={0x1, 0x6975}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001ec0)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001f00)) 10:16:58 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:16:58 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000a004e216900000000000000000000000000ffffe00000028c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ff0100000000000002000000fe8000000000000000000000000000bb55f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x7ffffffe) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x7b}, 0x7) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000340)) 10:16:58 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x12002, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) ioctl$RTC_PIE_OFF(r0, 0x7006) ppoll(&(0x7f00000000c0)=[{r0, 0x300}], 0x1, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x8) r1 = openat$cgroup_subtree(r0, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0xffffffffffffffff, 0x3, 0xcb, 0x3, 0x3c0f}, 0x400, 0x6}) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x2, 0x10000) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x1ff, {{0x2, 0x4e21, @multicast1=0xe0000001}}}, 0x88) getsockname(r0, &(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00', r3}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000440)={0xf3e, 0x9000000000000000, 0x38d, 0x23c800000000, 0x11b}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000480)) umount2(&(0x7f00000004c0)='./file0\x00', 0x9) ioctl$VT_DISALLOCATE(r0, 0x5608) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}, {0xa, 0x4e23, 0xfffffffffffffffc, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x9, [0x7f, 0x7f, 0x401, 0xffffffffffffff01, 0x1ff, 0x80000000, 0x101, 0x80]}, 0x5c) write$P9_RVERSION(r0, &(0x7f0000000580)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000005c0)={@multicast2=0xe0000002, @multicast2=0xe0000002, 0x1, 0x5, [@loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, @multicast2=0xe0000002, @multicast2=0xe0000002]}, 0x24) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000600)) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000640)={0x62, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x0, 'sed\x00', 0x20, 0xc695, 0x6b}, 0x2c) ioctl$int_out(r1, 0x0, &(0x7f0000000680)) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) fcntl$addseals(r1, 0x409, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(r4, r5, 0xc, &(0x7f00000006c0)={0x2f, 0x991e7dc, 0x80000000, 0x5f37b06f}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000700)="a1c948c0c535eb553c68377c831be1dda1100907496f866fd472e19b14bc596873058a8c99d075758a") ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000740)=0x80000000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/checkreqprot\x00', 0x400000, 0x0) 10:16:58 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x40, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000240)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200402}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002e0000002abd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="f7ff00000100060000000d0008000b6b0100000008000b000800000008000b001f00000008d2153b13b8a407"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) dup2(r0, r2) sendto$inet(r2, &(0x7f0000762fff), 0x3ac, 0xfffffffffffffffe, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) [ 195.889693] binder: BINDER_SET_CONTEXT_MGR already set [ 195.895272] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.905263] binder: 14253:14257 ioctl 40046207 0 returned -16 [ 195.915951] binder_alloc: 14164: binder_alloc_buf, no vma [ 195.929679] binder: 14253:14257 transaction failed 29189/-3, size 0-0 line 3136 10:16:58 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r2, &(0x7f00000000c0)='\x00', &(0x7f0000000140)={{}, {r3, r4/1000+10000}}, 0x100) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 10:16:58 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x2f) socket$inet6(0xa, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0xa, @in6, 0x0, 0x2, 0x0, 0x8464}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) [ 195.931313] audit: type=1404 audit(1532341018.337:3): enforcing=14250 old_enforcing=14212 auid=4294967295 ses=4294967295 [ 195.957689] binder: undelivered TRANSACTION_ERROR: 29201 10:16:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x14, 0x30, 0x300, 0x0, 0x0, "", [@generic="da"]}, 0x14}], 0x1}, 0x0) 10:16:58 executing program 4: unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r1, 0x41, 0x81, 0x5) fgetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000040)=""/30, 0x1e) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) 10:16:58 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x40, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000240)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200402}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002e0000002abd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="f7ff00000100060000000d0008000b6b0100000008000b000800000008000b001f00000008d2153b13b8a407"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) dup2(r0, r2) sendto$inet(r2, &(0x7f0000762fff), 0x3ac, 0xfffffffffffffffe, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) [ 195.997797] binder: 14253:14257 ERROR: BC_REGISTER_LOOPER called without request [ 196.031929] binder: undelivered TRANSACTION_ERROR: 29190 10:16:58 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x1, 0x70, 0x40, 0x3, 0x0, 0x200, 0x0, 0xfffffffffffffffe, 0x20, 0xc, 0x1, 0x3, 0x80000000, 0x8, 0xb06, 0x100000000, 0x5, 0x8, 0x1, 0x8001, 0x1, 0x5, 0x1ff, 0x3, 0x4, 0x7fffffff, 0x300000000, 0x4e3, 0x4, 0x45c4fc1d, 0x9, 0x2, 0x3ff, 0xb0, 0x8, 0x4, 0x5, 0x9, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x200, 0xe7, 0x8, 0x4, 0xfd1e, 0x0, 0x9}) sendfile(r0, r0, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xed) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000140)=""/242) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000280)='[.\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x68, 0xff, @scatter={0x0, 0x0, &(0x7f0000000340)}, &(0x7f0000000380)="46583cdea404c56541b505a777dbdfec1228a898b7764d10c57e927dfcb8d6284e36a700c075b718d907ff96a162e125577ec839dfc20eefc1362c0f85452c3518b5572dbea6f99ce7f4dfb8fd6b4afed3138f771fd1e61c49806cc2460699bc96c13409a378dbbe", &(0x7f0000000400)=""/152, 0xf0, 0x12, 0xffffffffffffffff, &(0x7f00000004c0)}) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r3, r4) add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) sendto$unix(r1, &(0x7f00000007c0)="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", 0xfe, 0x40c0, &(0x7f00000008c0)=@file={0x1, './file1\x00'}, 0x6e) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000940)={0x2, 0x3ff, 0x6, 0x4}) getxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@random={'user.', '[.\x00'}, &(0x7f0000000a00)=""/72, 0x48) r5 = fcntl$getown(r0, 0x9) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000b40)={&(0x7f0000000a80)=""/134, 0x86}) link(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file1\x00') ftruncate(r0, 0x5) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) truncate(&(0x7f0000000c00)='./file0\x00', 0x8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c40)={0x0, @broadcast, @loopback}, &(0x7f0000000c80)=0xc) syz_mount_image$vfat(&(0x7f0000000cc0)='vfat\x00', &(0x7f0000000d00)='./file0\x00', 0x0, 0x1, &(0x7f0000000d80)=[{&(0x7f0000000d40)="168dce03df3ad48e", 0x8, 0x8000}], 0x800, &(0x7f0000000dc0)={[{@uni_xlateno='uni_xlate=0', 0x2c}, {@utf8no='utf8=0', 0x2c}]}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000e00)={0x1, 0x2, 0x5, 0x0, 0x8}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000e40)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000e80)={0x4, 0x0, 0x100, 0x4, 0x7fff, 0x2}) r6 = memfd_create(&(0x7f0000000ec0)='keyring\x00', 0x1) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000f00)={'mangle\x00'}, &(0x7f0000000f80)=0x54) 10:16:58 executing program 0: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=']) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x103100, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f00000001c0)) 10:16:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigaction(0xe, &(0x7f0000000000)={0x2, {0x1f}, 0x40000000, 0x4}, 0x0, 0x8, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 10:16:58 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000f80)=ANY=[]}, 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/214, 0xd6, 0x4, &(0x7f0000000200)={0x77359400}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x87a8, 0xfffffffffffffffe, "0f6433406c2cd5fb5dccf596637432a8f0d1f602980df9463c97fabeb3b87fbdf9cd5eb04afdc723de4bcb0ec12f491fc8314ea5841c3ef474097f3eb2fe5779b2b6e42b927d25019cd9e9aee85ae2d6"}, 0xd8) r0 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x40}, 0xffffffffffffffff}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x20) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000c00)) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000400)=0x3b7) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, &(0x7f000082ef0a)=""/246) r4 = dup2(r3, r2) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000240)={0x1, 0xa01, 0xffffffffffffd161, 0x0, 0xad, 0xfff}) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ppoll(&(0x7f00000002c0)=[{r2}], 0x39a, &(0x7f0000000300), &(0x7f0000000340), 0x8) sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) [ 196.176631] FAT-fs (loop5): bogus number of reserved sectors [ 196.184941] FAT-fs (loop5): Can't find a valid FAT filesystem [ 196.231385] FAT-fs (loop5): bogus number of reserved sectors [ 196.242699] FAT-fs (loop5): Can't find a valid FAT filesystem [ 196.688855] binder: 14253:14320 got reply transaction with no transaction stack [ 196.696449] binder: 14253:14320 transaction failed 29201/-71, size 0-0 line 2921 [ 196.810144] binder_alloc: binder_alloc_mmap_handler: 14253 20001000-20004000 already mapped failed -16 [ 196.826473] binder_alloc: 14253: binder_alloc_buf, no vma [ 196.833760] binder: 14253:14322 ERROR: BC_REGISTER_LOOPER called without request [ 196.841733] binder: 14253:14325 got reply transaction with no transaction stack [ 196.841744] binder: 14253:14325 transaction failed 29201/-71, size 0-0 line 2921 [ 196.857659] binder: 14253:14320 transaction failed 29189/-3, size 0-0 line 3136 10:16:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 10:16:59 executing program 6: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000f80)=ANY=[]}, 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/214, 0xd6, 0x4, &(0x7f0000000200)={0x77359400}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x87a8, 0xfffffffffffffffe, "0f6433406c2cd5fb5dccf596637432a8f0d1f602980df9463c97fabeb3b87fbdf9cd5eb04afdc723de4bcb0ec12f491fc8314ea5841c3ef474097f3eb2fe5779b2b6e42b927d25019cd9e9aee85ae2d6"}, 0xd8) r0 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x40}, 0xffffffffffffffff}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x20) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000c00)) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000400)=0x3b7) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, &(0x7f000082ef0a)=""/246) r4 = dup2(r3, r2) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000240)={0x1, 0xa01, 0xffffffffffffd161, 0x0, 0xad, 0xfff}) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ppoll(&(0x7f00000002c0)=[{r2}], 0x39a, &(0x7f0000000300), &(0x7f0000000340), 0x8) sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) 10:16:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, &(0x7f0000001500)}) 10:16:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x5b964095) r1 = syz_open_pts(r0, 0xffffffffffffffff) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x0, 0x7}) 10:16:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/79, 0x4f}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x364, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0xd) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)) 10:16:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x80006100) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7fffff, 0x11, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) unshare(0x2000000) 10:16:59 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x694b}, 0x4) 10:16:59 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:16:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 196.943129] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.948646] binder: undelivered TRANSACTION_ERROR: 29189 [ 196.957194] binder: undelivered TRANSACTION_ERROR: 29201 10:16:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) [ 196.988837] binder: 14339:14341 transaction failed 29189/-22, size 0-0 line 3013 10:16:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/79, 0x4f}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x364, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0xd) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)) 10:16:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e27, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r0, 0x1) [ 196.988944] binder: 14339:14341 got reply transaction with no transaction stack [ 196.988951] binder: 14339:14341 transaction failed 29201/-71, size 0-0 line 2921 [ 196.989365] binder_alloc: binder_alloc_mmap_handler: 14339 20001000-20004000 already mapped failed -16 10:16:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x14}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) r1 = getgid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x4, &(0x7f0000000140)=[r1, r2, r3, r4]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") [ 196.996597] binder: BINDER_SET_CONTEXT_MGR already set [ 196.996605] binder: 14339:14341 ioctl 40046207 0 returned -16 [ 196.998285] binder: 14339:14342 transaction failed 29189/-22, size 0-0 line 3013 [ 196.999492] binder: 14339:14342 got reply transaction with no transaction stack 10:16:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/79, 0x4f}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x364, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0xd) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)) 10:16:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, &(0x7f0000001500)}) [ 196.999499] binder: 14339:14342 transaction failed 29201/-71, size 0-0 line 2921 [ 197.025101] binder: BINDER_SET_CONTEXT_MGR already set [ 197.025110] binder: 14345:14348 ioctl 40046207 0 returned -16 [ 197.025725] binder_alloc: 14339: binder_alloc_buf, no vma [ 197.025743] binder: 14345:14348 transaction failed 29189/-3, size 0-0 line 3136 [ 197.025927] binder: 14345:14348 ERROR: BC_REGISTER_LOOPER called without request [ 197.027273] binder: BINDER_SET_CONTEXT_MGR already set [ 197.027282] binder: 14328:14331 ioctl 40046207 0 returned -16 [ 197.027610] binder_alloc: 14339: binder_alloc_buf, no vma [ 197.027633] binder: 14328:14331 transaction failed 29189/-3, size 24-8 line 3136 [ 197.035997] binder: BINDER_SET_CONTEXT_MGR already set [ 197.036005] binder: 14349:14352 ioctl 40046207 0 returned -16 [ 197.036146] binder_alloc: 14339: binder_alloc_buf, no vma [ 197.036165] binder: 14349:14352 transaction failed 29189/-3, size 0-0 line 3136 10:16:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x24) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) shutdown(r1, 0x1) sendto$inet6(r1, &(0x7f0000adb000)="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", 0x7d0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000280)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000480)=""/106, 0x6a}], 0x2, &(0x7f0000000500)=""/2, 0x2}}, {{&(0x7f0000001e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002200), 0x0, &(0x7f0000000300)=""/79, 0x6}}], 0x1e6, 0x40000122, &(0x7f00000001c0)={0x77359400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)) [ 197.037426] binder: 14349:14352 ERROR: BC_REGISTER_LOOPER called without request [ 197.097291] binder_alloc: binder_alloc_mmap_handler: 14328 20001000-20004000 already mapped failed -16 [ 197.102027] binder: BINDER_SET_CONTEXT_MGR already set [ 197.102034] binder: 14328:14354 ioctl 40046207 0 returned -16 [ 197.109805] binder_alloc: 14339: binder_alloc_buf, no vma [ 197.109826] binder: 14328:14354 transaction failed 29189/-3, size 24-8 line 3136 [ 197.275521] binder: undelivered TRANSACTION_ERROR: 29189 [ 197.281153] binder: undelivered TRANSACTION_ERROR: 29189 [ 197.288507] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.294039] binder: BINDER_SET_CONTEXT_MGR already set [ 197.294051] binder: 14371:14372 ioctl 40046207 0 returned -16 [ 197.305675] binder_alloc: 14339: binder_alloc_buf, no vma [ 197.305695] binder: 14371:14372 transaction failed 29189/-3, size 24-8 line 3136 [ 197.319092] binder: undelivered TRANSACTION_ERROR: 29189 [ 197.324881] binder: undelivered TRANSACTION_ERROR: 29189 10:16:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) sendto$inet(r4, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) 10:16:59 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x8000, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x100) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2000000000000) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x132e6e8a, 0xa8, 0x6}) ioctl$LOOP_CLR_FD(r2, 0x4c01) 10:16:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, &(0x7f0000001500)}) [ 197.330565] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.336343] binder: undelivered TRANSACTION_ERROR: 29189 [ 197.352598] binder: undelivered TRANSACTION_ERROR: 29189 [ 197.414547] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 [ 197.491928] binder: release 14383:14386 transaction 462 out, still active [ 197.499094] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 [ 197.507469] binder: unexpected work type, 4, not freed [ 197.507472] binder: undelivered TRANSACTION_COMPLETE [ 197.507528] binder: send failed reply for transaction 462, target dead [ 197.810390] binder: 14345:14397 got reply transaction with no transaction stack [ 197.817960] binder: 14345:14397 transaction failed 29201/-71, size 0-0 line 2921 [ 197.836441] binder: 14349:14398 got reply transaction with no transaction stack [ 197.844056] binder: 14349:14398 transaction failed 29201/-71, size 0-0 line 2921 [ 197.930828] binder: undelivered TRANSACTION_ERROR: 29189 [ 197.939327] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.962601] binder_alloc: binder_alloc_mmap_handler: 14349 20001000-20004000 already mapped failed -16 10:17:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}, {@in=@broadcast=0xffffffff, 0x0, 0x6c}, @in6=@mcast2={0xff, 0x2, [], 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10:17:00 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/225) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000c86f88)={0x4, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000400, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x100000001, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x400000000) 10:17:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x24) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) shutdown(r1, 0x1) sendto$inet6(r1, &(0x7f0000adb000)="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", 0x7d0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000280)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000480)=""/106, 0x6a}], 0x2, &(0x7f0000000500)=""/2, 0x2}}, {{&(0x7f0000001e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002200), 0x0, &(0x7f0000000300)=""/79, 0x6}}], 0x1e6, 0x40000122, &(0x7f00000001c0)={0x77359400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)) 10:17:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, &(0x7f0000001500)}) 10:17:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) sendto$inet(r4, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) 10:17:00 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) chroot(&(0x7f0000000200)='./file0/file0\x00') connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) tkill(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/net\x00') setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000240)=0x7f, 0x4) 10:17:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b630000cfc0b92e10b4a062bf57fc4e9d7a756586ba017cc146a696d61ebce5d29f1ee70824a774296e090040000000000000000000000000"], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) timer_create(0x1, &(0x7f0000000580)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000480)="d530e637234bc2e7cb34ffe1b5ea446c143fcb45520ff58ad796a73ae0f2f7e4ecb5a6735b3e224384d7b5d7991ae3bda09e64b6e41ca6a934dd0e16b2fc91c13d7167ec81a051d32e0a3e4c40aea0c7585120227dd4be425f06c72cbe6409dcc75565d2a9c3a1e43b80ae74a7337bebcbc127b987025af239728de3aee88455f4e3890372d917a8e1f4f306854c525f642417025bb0ee51d3c7846bb8b217c6f217ce0bcde877d2074e9f0ffd9b57abfc6c7c127c643509f422fcad457e565c867413ec5f1083227921efabb4967982d4c3d5412002", &(0x7f00000000c0)="ccba021f"}}, &(0x7f00000005c0)) getsockopt$netlink(r2, 0x10e, 0x0, &(0x7f0000000300)=""/157, &(0x7f0000000440)=0x9d) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000040)='timers\x00') r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8800) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1263480000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) [ 197.978000] binder_alloc: 14349: binder_alloc_buf, no vma [ 197.981773] binder: 14349:14404 ERROR: BC_REGISTER_LOOPER called without request [ 197.991047] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.991084] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.002441] binder: 14349:14398 transaction failed 29189/-3, size 0-0 line 3136 [ 198.009933] binder: undelivered TRANSACTION_ERROR: 29189 10:17:00 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000008680)=[{{0x0, 0x0, &(0x7f0000005b80), 0x1, &(0x7f0000000080)}}, {{&(0x7f0000005f00)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xffffff92, &(0x7f0000000140), 0x1, &(0x7f0000000100), 0x0, 0x80000000000}, 0x3}], 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0x1, 0x639c, 0x5, 0x3, 0x10001}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 10:17:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x1f) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=0x4, 0x180) [ 198.057095] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 10:17:00 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000002340)=""/4096, 0x3b516871db1af476) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0xfa, 0x81, 0x0, 'queue1\x00', 0x9}) tee(r1, r0, 0x400ffffffff, 0x0) 10:17:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)}) [ 198.066182] binder: 14418:14422 unknown command 808464432 [ 198.066190] binder: 14418:14422 ioctl c0306201 20000180 returned -22 [ 198.066262] binder: 14418:14422 ERROR: BC_REGISTER_LOOPER called without request 10:17:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x1f) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=0x4, 0x180) 10:17:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) chroot(&(0x7f0000000200)='./file0/file0\x00') connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) tkill(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/net\x00') setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000240)=0x7f, 0x4) [ 198.088896] binder: BINDER_SET_CONTEXT_MGR already set [ 198.088906] binder: 14410:14414 ioctl 40046207 0 returned -16 [ 198.090769] binder: 14418:14422 unknown command 4743954 [ 198.090777] binder: 14418:14422 ioctl c0306201 200002c0 returned -22 [ 198.092907] binder_alloc: binder_alloc_mmap_handler: 14418 20001000-20004000 already mapped failed -16 [ 198.093258] binder: BINDER_SET_CONTEXT_MGR already set [ 198.093265] binder: 14418:14422 ioctl 40046207 0 returned -16 10:17:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) chroot(&(0x7f0000000200)='./file0/file0\x00') connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) tkill(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/net\x00') setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000240)=0x7f, 0x4) 10:17:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xffe7, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xf}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @fda={0x66646185, 0x2, 0x4, 0x39}], &(0x7f0000000140)=[0x40, 0x38, 0x48, 0x28, 0x18]}}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 198.098069] binder: 14418:14428 unknown command 808464432 [ 198.098079] binder: 14418:14428 ioctl c0306201 20000180 returned -22 [ 198.099298] binder: 14418:14422 ERROR: BC_REGISTER_LOOPER called without request 10:17:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) chroot(&(0x7f0000000200)='./file0/file0\x00') connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) tkill(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/net\x00') setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000240)=0x7f, 0x4) [ 198.120256] binder: 14418:14432 unknown command 4743954 [ 198.120265] binder: 14418:14432 ioctl c0306201 200002c0 returned -22 10:17:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xffe7, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xf}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @fda={0x66646185, 0x2, 0x4, 0x39}], &(0x7f0000000140)=[0x40, 0x38, 0x48, 0x28, 0x18]}}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="0200009e55080000"], 0x0, 0x0, &(0x7f0000000480)}) [ 198.121166] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 198.132415] binder: release 14410:14414 transaction 470 out, still active [ 198.132420] binder: unexpected work type, 4, not freed [ 198.132423] binder: undelivered TRANSACTION_COMPLETE [ 198.162450] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 198.197659] binder: BINDER_SET_CONTEXT_MGR already set [ 198.197669] binder: 14439:14441 ioctl 40046207 0 returned -16 [ 198.197989] binder_alloc: 14418: binder_alloc_buf, no vma [ 198.198053] binder: 14439:14441 transaction failed 29189/-3, size 24-8 line 3136 [ 198.220984] binder: release 14418:14422 transaction 470 in, still active [ 198.220990] binder: send failed reply for transaction 470, target dead [ 198.226798] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 198.231972] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.339613] binder: 14457:14458 got transaction to context manager from process owning it [ 198.339626] binder: 14457:14458 transaction failed 29201/-22, size 0-0 line 3004 [ 198.339723] binder: release 14457:14458 transaction 475 out, still active [ 198.339727] binder: undelivered TRANSACTION_COMPLETE [ 198.339810] binder: 14457:14458 got reply transaction with no transaction stack [ 198.339815] binder: 14457:14458 transaction failed 29201/-71, size 0-0 line 2921 [ 198.346832] binder_alloc: binder_alloc_mmap_handler: 14457 20001000-20004000 already mapped failed -16 [ 198.348009] binder: BINDER_SET_CONTEXT_MGR already set [ 198.348019] binder: 14457:14458 ioctl 40046207 0 returned -16 [ 198.348072] binder_alloc: 14457: binder_alloc_buf, no vma [ 198.348092] binder: 14457:14460 transaction failed 29189/-3, size 0-0 line 3136 [ 198.349273] binder_alloc: 14457: binder_alloc_buf, no vma [ 198.349290] binder: 14457:14458 transaction failed 29189/-3, size 0-0 line 3136 [ 198.349325] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.350728] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.350747] binder: send failed reply for transaction 475, target dead [ 198.412292] binder: release 14452:14456 transaction 481 out, still active [ 198.412297] binder: unexpected work type, 4, not freed [ 198.412299] binder: undelivered TRANSACTION_COMPLETE [ 198.416529] binder: send failed reply for transaction 481, target dead [ 198.438634] binder: 14466:14468 got transaction to context manager from process owning it [ 198.438661] binder: 14466:14468 transaction failed 29201/-22, size 0-0 line 3004 [ 198.438836] binder: release 14466:14468 transaction 485 out, still active [ 198.438839] binder: undelivered TRANSACTION_COMPLETE [ 198.438953] binder: 14466:14468 got reply transaction with no transaction stack [ 198.438960] binder: 14466:14468 transaction failed 29201/-71, size 0-0 line 2921 [ 198.447161] binder: BINDER_SET_CONTEXT_MGR already set [ 198.447168] binder: 14467:14469 ioctl 40046207 0 returned -16 [ 198.447350] binder: 14467:14469 ERROR: BC_REGISTER_LOOPER called without request [ 198.447621] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.447638] binder: send failed reply for transaction 485, target dead [ 198.447646] binder: send failed reply for transaction 488 to 14467:14469 10:17:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) sendto$inet(r4, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) 10:17:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000001ac0), &(0x7f0000000000)=0x382) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:17:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x1f) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=0x4, 0x180) 10:17:01 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 198.945209] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 198.960427] binder: release 14482:14489 transaction 490 out, still active [ 198.960432] binder: unexpected work type, 4, not freed [ 198.960435] binder: undelivered TRANSACTION_COMPLETE [ 198.964373] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 [ 198.967240] binder: send failed reply for transaction 490, target dead [ 199.032827] binder: release 14481:14484 transaction 494 out, still active [ 199.043329] binder: unexpected work type, 4, not freed [ 199.052190] binder: undelivered TRANSACTION_COMPLETE [ 199.057519] binder: send failed reply for transaction 494, target dead 10:17:01 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x31) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x2b, [], 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380)=""/43}, &(0x7f0000000440)=0x78) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000100)=""/1, 0x1, 0x10042, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x80}, 0x1c) 10:17:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:01 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0x1f, &(0x7f00000000c0)) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/context\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000440)={@loopback={0x0, 0x1}, 0x8, 0x2, 0x0, 0xc, 0x5, 0x0, 0x4fee}, 0x20) getpgrp(0xffffffffffffffff) mq_unlink(&(0x7f0000000480)='\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = getpgid(0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="4284835a40c0d4f571bc40482d44b49ed551d36c596ed0a08b784028ee341fcd1a46f0b9a91cc12b93af06344e1c027f1b61188631032c9ccfc5c375d1f1753a297a2fc728449e9552ad32a637fc6fe5fbc7c88a274ced60b007eeccb208e9cce6df6ddd505978e5ead9b5539e638afcfc1b67a7297b116776034de7903eae1621e26886fb7b999128fb3cd4ce5131dc9a4ee763aece94d264a65b37e46ba03245d5e93bcfc8f457580f5842eb689a08ffa6cb050e9231bdcaa6bc9082d1766174e939463e89bdca8ddf9fd2fa57b303e3c19fc58d96933edeec399a548c079e6a2a279160873e1a5548cd61a322a765820754e4", 0xf4}, {&(0x7f0000000380)="8d3e9ca80cc64dffc22dbdd1136544658d8d6ae291b23b0fb33e0c1bd643d87906fd674bad9ca9a978b242a0a6af1bff21f91158e7f95de6e7e5e8f0db2a4651a0398ec67fd2910915c0a1", 0x4b}], 0x2, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000200)='timers\x00') getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) flistxattr(r0, &(0x7f00000004c0)=""/4096, 0x1000) 10:17:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) sendto$inet(r4, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) 10:17:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d1ed7b2c", 0x25}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) fstatfs(r0, &(0x7f0000000940)=""/128) 10:17:01 executing program 3: gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x23, 0x0, @thr={&(0x7f00000000c0)="41b0c779d698c75b22aa61c5368044b6bac059bc46d496c9491ba9195f69b97405587752f8c0ee0403b0bc0fc0c7c9717c5e595d95f45846e7be5f41fc8c866830c4f8177dedae124f167b5b53de397d79a275ed9643d0f37b1eb23171c69d7c46420fbff673303f9611e0f0856a8e515d205ef47e394455ba7edab313916ad09cad44f9b87f64fa87f6541b6f", &(0x7f0000000180)="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"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x7eb0) ioprio_get$pid(0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 10:17:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/170) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000040)=ANY=[]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), 0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) write$selinux_create(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd', 0x20}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) socket(0x19, 0x800, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000029c0)={{{@in=@multicast2=0xe0000002, @in=@multicast2=0xe0000002, 0x0, 0x4, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x89}, {0xa6, 0x5, 0x5, 0x10000, 0x8000, 0x7, 0x0, 0x8001}, {0xc000000000000, 0x6, 0x7, 0x7}, 0x0, 0x6e6bb6, 0x2, 0x0, 0x0, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d5}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x8e91}}, 0xe8) 10:17:01 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x31) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x2b, [], 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380)=""/43}, &(0x7f0000000440)=0x78) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000100)=""/1, 0x1, 0x10042, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x80}, 0x1c) [ 199.224589] binder: 14467:14505 got reply transaction with no transaction stack [ 199.249135] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 10:17:01 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') getrusage(0x1, &(0x7f0000000040)) ioctl$VT_RELDISP(r0, 0xb701) [ 199.296958] binder: 14467:14505 transaction failed 29201/-71, size 0-0 line 2921 [ 199.311883] binder: release 14508:14515 transaction 499 out, still active [ 199.311888] binder: unexpected work type, 4, not freed [ 199.311891] binder: undelivered TRANSACTION_COMPLETE [ 199.316562] binder: send failed reply for transaction 499, target dead [ 199.319553] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 199.382692] binder_alloc: binder_alloc_mmap_handler: 14467 20001000-20004000 already mapped failed -16 [ 199.404553] binder_alloc: 14467: binder_alloc_buf, no vma [ 199.404574] binder: 14467:14536 transaction failed 29189/-3, size 0-0 line 3136 [ 199.412712] binder: 14467:14536 ERROR: BC_REGISTER_LOOPER called without request [ 199.420830] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.420859] binder: undelivered TRANSACTION_COMPLETE [ 199.420866] binder: undelivered TRANSACTION_ERROR: 29189 10:17:01 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000440)=0xc) r3 = getuid() setreuid(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r4 = dup3(r0, r1, 0x80000) mq_timedsend(r4, &(0x7f0000000000)="7e99a385406dd50f84c6687e5525587dabb123876577e3d92234f1ab4c340080a8c339d9665423eedc8fd9423621dd1eb8078b630e3866a5ed3dacec8c2885b6d3772c530bb08a73ece2ebb46816135a7fc1a8b87dd0ad6494585df529b684d4fad4ae1d0d864963a2349443f11fbe", 0x6f, 0x10001, &(0x7f0000000080)={0x0, 0x989680}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01800000"], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x6c1e, 0x0, 0xa053, 0x1, 0x0, 0x6, 0x3088, 0xc, 0x1a14afcc, 0x6, 0x3, 0x0, 0x7, 0x20, 0xffffffffffff78b9, 0x0, 0x1, 0x394eb16e, 0x8, 0x7, 0x6, 0x2e, 0x200, 0x8000, 0x8, 0x10000000000000, 0xab30, 0x1, 0x400, 0x6, 0x20, 0x2, 0x9, 0x9, 0x8, 0x74, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x9}, 0x800, 0x400, 0xf376, 0x4, 0x4000000000, 0x2, 0x1}, r5, 0x9, r4, 0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000040)=""/84, &(0x7f00000000c0)=0x54) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b97000)={0x1, &(0x7f000048fff0)=[{0x6}]}, 0x10) eventfd(0xfffffffffffffffd) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/1, &(0x7f0000561ffc)=0x1) 10:17:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) sendto$inet(r4, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 10:17:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000040)}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3cd9f704", @ANYRES64=r3], 0x0, 0x0, &(0x7f0000000280)}) 10:17:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d1ed7b2c", 0x25}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) fstatfs(r0, &(0x7f0000000940)=""/128) [ 199.445355] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.484303] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 [ 199.494019] binder: 14545:14551 BC_FREE_BUFFER u0000000020001000 matched unreturned buffer [ 199.494085] binder: 14545:14551 unknown command 83351868 [ 199.494092] binder: 14545:14551 ioctl c0306201 20000480 returned -22 [ 199.500905] binder: BINDER_SET_CONTEXT_MGR already set [ 199.500913] binder: 14550:14555 ioctl 40046207 0 returned -16 [ 199.501132] binder: BINDER_SET_CONTEXT_MGR already set [ 199.501139] binder: 14550:14555 ioctl 40046207 0 returned -16 [ 199.501228] binder_alloc: 14545: binder_alloc_buf, no vma [ 199.501247] binder: 14550:14555 transaction failed 29189/-3, size 0-0 line 3136 [ 199.501798] binder: 14550:14555 ioctl 8903 20000140 returned -22 [ 199.501971] binder: 14550:14555 got reply transaction with no transaction stack [ 199.501979] binder: 14550:14555 transaction failed 29201/-71, size 0-0 line 2921 [ 199.502062] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 199.513205] binder_alloc: binder_alloc_mmap_handler: 14545 20001000-20004000 already mapped failed -16 [ 199.514560] binder: BINDER_SET_CONTEXT_MGR already set [ 199.514568] binder: 14545:14551 ioctl 40046207 0 returned -16 [ 199.514617] binder_alloc: 14545: binder_alloc_buf, no vma [ 199.514634] binder: 14545:14553 transaction failed 29189/-3, size 0-0 line 3136 [ 199.515952] binder_alloc: 14545: binder_alloc_buf, no vma [ 199.515974] binder: 14542:14548 transaction failed 29189/-3, size 24-8 line 3136 [ 199.516183] binder: 14545:14553 BC_FREE_BUFFER u0000000020001000 no match [ 199.517779] binder: send failed reply for transaction 505 to 14545:14551 [ 199.524341] binder: undelivered TRANSACTION_COMPLETE [ 199.524347] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.537076] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.540216] binder: BINDER_SET_CONTEXT_MGR already set [ 199.540224] binder: 14550:14555 ioctl 40046207 0 returned -16 [ 199.540279] binder_alloc: 14550: binder_alloc_buf, no vma [ 199.540300] binder: 14550:14556 transaction failed 29189/-3, size 0-0 line 3136 [ 199.541812] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.542891] binder: 14550:14555 unknown command 32769 [ 199.542900] binder: 14550:14555 ioctl c0306201 20000240 returned -22 [ 199.542923] binder: 14550:14556 ioctl 8903 20000140 returned -22 [ 199.544120] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.555955] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.678226] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 10:17:02 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) 10:17:02 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000079c0)={{{@in6=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000007ac0)=0xe8) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) 10:17:02 executing program 7: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f0000000280)}) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2f, 'pids', 0x20}, {0x2b, 'pids', 0x20}, {0x2f, 'cpu', 0x20}, {0x2b, 'io', 0x20}, {0x2d, 'io', 0x20}]}, 0x19) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630000149cc39518ac53aef428eb331cda05b5b0d05101000000000000007978eba2c0099899d0f7fd59e22ad7f6931597a1e4653ba6c5f7ade61053c06a36fc64efb99712e39ed2928f21a589303f9275000000000000000000000000000000100000000000"], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00f\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000340)) 10:17:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000040)}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3cd9f704", @ANYRES64=r3], 0x0, 0x0, &(0x7f0000000280)}) 10:17:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) 10:17:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="f7fa0e277acc38595f21e9f281de677f542bc058a015315844e065ff1dffbd7dc44bc8b7a64a5751214a4ccfd9be00e537935e88b900cf35d8052de329ca8af171d6d387208719969e1c99abe67a4800648177429b8ef65725a55de7e841278ed444f674444a4ad496d1fe5824aebefb70178467c46d7326db4bbf5d0e92cb9b4a20bc2264d178556acb0d10a43318d5ec4c9023171c03a393702c78abbcfd4a3a9e29a6d7b2ecc0a1a173ba0c1294ac40f8a1aeac217e51c3e8388f570f14c4fad29e8d4880f0dca10bd9a6aebd91d2af9f88bc57cdd328e6c93b7a522f120b06dca30c0d1fbde5c3afdb71a6a6606e6f43b8ec69aa473fdc980d6dc89b92cb7699ed504a841596e95426d86a352e1de3ef580d8e663405de0a44feea040be805928c57969eba38f6e9827a8314bc145670e6f020a10dcf67f3f97b8e6bb336882ed150e00c2fa4302add97d31211a393e66fc0c57265bfcfbab18aa9117e47dba2430c65e463c63c198dfcd60e7d7e7acce019d7e20b2dcf1d9c69a6ed0efa6702f06ffc1c0da0163d76805fa825006a6489507ea16fbb34cd86a43fb312208bbe872640ef301a7a171743875a2f2c933f917547f2e93f97f4697876beda44f4f86fd8ed5563f5f84356dcdaffb966d9b00db300f5905fd2ff5b147984ac0728a523ea1666a04db193b447e89fc644211252f4e5dec691744ba07d18fc975042e4b2173a39fe3029b68a8852824f10ccfd286d0546f68a0c3dad704b2aab610dd121483e6a0562103f21a65a8eaaa5563ca0f0edd2d29970b7be13c91dcda65595e2ca273efe2ea3e69eb0fcd1a1023e72cc629faf2e90e9f73702641b82089da20dea8dfecbc4e1b9ad33681091d3739cfbe421963da7a6a119abfc948b41ca438387632f342d771cec7628a7d3468ec68aaa70cb52e5a54321a04bea9a97d73eebaad797380ed7cd796d1e88b477a1030123b5374656bfd8ffff85aee8037089b4d5c091c67f11964c8e2634ba4a5c795f3346617b3f41b7a1646fa59a048695d37284784afa2ae010004792599953b8c93a061a0933bede0c6004e6e900e24bb92aa6d29e6733e706ad8fada9d749e3925f39b88ac1186245e19767464ae36a8b71edf5239795e5e45b2dddfd5a00968e78151192eb2b4cba73d56c99b181fa48ad0faab795494c2864ba298c3dea0e814c746f7edbc7b054674b8e9d189c2cc316e6b44617e40fd0a137923966f8f6af9c51c203aace25b7973874f99765fff39283dccf3491291c9cbfb8a8e2b2b133a42971fe9b2071977be2dbde5b755f166bb6a070821083dbf4b25c8d2d7d47ffb11c3c5608c88957227e9dcf8f19e50f660819fd83704dd4d50e022d63cf51a38bb7cbbf969daefff37b352f214c4ce95b4f5302927db738000d94a6056910e55113f3337ec8b1844fb35ab3e558dadf092a3734844bd52293ba33127d4073c0011c9011365b9d5f7c6c69f19dcfb8bb80b59dae83046f3f1fe051cd1ffbf11e8b667d55f697f1f95de0dae425002380a4deb55f447fe093a3129bb1bbc4d4ee2d8cd63c2be1eac94161517ace219d26bb85729fa8915139a6e99b9f6916c49ac85ddc3f5355927f1ccce2f34637193eee06562414eaefcb1226e3194fd306efe164557540ec4f3ce6b98d5ffe77957c5ae2289fa182bf21944c84dd1dcd41c2b61ae430597a47853f1035652bd08b318cafe70137c175bdc0331070422b15ca31fc45c0a42589f8d06a9944f8a653d907bbebf937b38a24289a4e7bbde8d7f65a27a239a8d69e5783eaa72b7d4355babde84c010b4c411fa3d867d154e959fe9540708df45c4ad5a742a3368307f4498093e30f22cca82b85b126b44e172feb01e230dcef3aa5d4aec57b5654b4ce63a204b17880d6a7f141f0397437dec95e87bee7e91d228b409889fc9c94067eff95ff2b3d6f12e79759ee0a28c3b1b4fc60741034b80ad733d00d2fe582d4a13587be8074d43839eeadf9c93df4dcc59154ff99424f60a463a07ec0949b491bb4ff8b1bebbf8c14b3f71046cb4a0cf9e1f1ca61036752d6266c23ea9d79499058a86b61fc15694ae9bcd2499b5d227f27824eb392cf5d790df5352ca7d6421fa74d0ecc7a51ce4225b889127cf6aadaf70278b9871aa84a05060378a9f01dfe42acfa9824492bb1930ae078d4a9c54207d6fa3f54ca94a4639e40a7f6eb3af9bf06ae3ef4fd423020e3aa6f0606d4aa80014c527aadd0cc9ba7bbe048019a018b3b55e4c35aa772a6e1436b81bf64991f7696382f40325bf7a49ba31fcc12bed288bef36b34f3441efbcb9b7adc08c67f1b261161990d726404c3e0a8f87c6d35b1fd229338274af71322db4ee173f22d9c0514770bc63297ce87deef3d175d6a70095fddc130f447753c307b5970384940d5c847cca9565515498a14ede733b56764690995b88b7d0f08c253b33ee359b584aab451a8e967b59fc690d277606e2ed972c77cbe288b34d94f7c7add32000ba3840c66a10b28df46e910f48c2635da2b185b09d9c9df528be1967731dfb45d912bf29f91b0f1a33f45a3a535f6cfb6befb771540526497aeb1ea2200042abc4c6fe319873b018a7def68ad5aadb13cec45892d37f5f436f6369e30d8905bb3de8e8c99f8fff691886fe9c4151e5708c398437c8151fecf0b6cf80826115313f94ce7c87fc9ec619f021e81d1514712ff36332e4139f8152a772ebf27686f18e2da12cedefcf8bc8f782f03afd695314d7d944db3b7748708fc16cd0775e42958f27d004d708cd072d8c481d76fce496c13385ab440b0441f714ec6a2e49329789821146ceb5c8b3fee452855736b1736f87fed8b9696617fdcba6d9809b46ec71bc2272121c909f56deac69691318c278f43997b5502382511331ded6d18ff3c2e7faedf0036023c285bdf0889881fbe8e415bea7a6dc3eddba3c6255c791d6a50cad48e4e489ac455882d42a8523988c6c0b15bacf48a9dfae5128751b02af5745f31783dfcf8aea027bc2f1b3d554b03d8b74b8b09d6095d18ae071cf451471763d820e5ef3f7702573201e6180252ed4a2af9a0ac97d1a509f32b5152936579e304fadde0b3f67279c8c0b2a4c5fca535b94084dd3c281038939dcf4d2b6a7dbdc7a8ab5b0f2b28c9288cdafea21cc42771456b6c586cecb5cc48568bf45acdad45cc18457324c76aca34d796914c0bd1495f63ff7e668ecfb81b820f702bad04452022651e3f6e1ad2ca0279becda5ddf21b6997053970c75affe0d207546e5becefd06a4bc33aff1b51a2d47c6845c338395c103ec590db99c3613f0cc972dfe94451300c8a7dad1a26938a529031cd89fc198221e940d0655f42b4f6bd952d62bc848b3a73aeee7239bc2cdb42517d39fb578f87d94417599ce478cf813da269683c2f491bad024ea5d7d2b34cbe2ca32b857c9df0622558372ca264713507d165fa2b2a86395363a0dd8d3fd8efa61bf9ef13d7ea94a351591b658254893f2db9361566ab11d54db1f4d710c3adf93f18a77a677b2330ef3adfedf7ef048ca73a32cd0b5a8b6d861e8f698a2b8efcef7ec42d6feb52879132a4ef796c5edaaf4558208ff795917f8fb0b35deec0fab8fc94aa6d1a553c2148af2bd2b14ba62a63a8390adefef29ecace293e1a8dc8102d9f1489bd1101a100e5cc4d158a5a302396e7502d0ab8300d2f797605485f6b80dbb2afe945eb4624db01526e5259eeabc523778fd30766f690cfdb85002ea8b7bfbdb14ca7cbdcdf52bb680ac2ff5c3a315accaf342420e22403365dc2998ce3d5001d24be7328aa1ef43d041792bbf2731f40f3798f67008a652b2b32e7627e5985c8246c4cdab5510783b338201e58f5e7c2771151d26c9771b1852c418ab9c20c1fc4c4c0dd69a6461e2726861a2407e6f26ad35632d552e240e5392e8548e6ca9eb1647e99d87022cf030e92f7cc5f7723e2641a4844d669ec1fa2181a342394489f2f292e4edddb1ddaab87a36358a3d595e37ec8fb46524796d9bcec96cf00a6f793ca3af555c2840cc7d295287213385127dc357996771859e6d3b99323154edefcc3d3b31da0a423098d808ee6f9f11e0317b5489e9acff74c44755743cb5de8562e0646c997244ae1ed1e79210a80eb4bc31c7fb4ce24aecefa39b94a701f5c8bcee8812231cda93dacdddd14e28a9ad2d99abb3571846fd2a18fd574940981c3deeeaab58023c05994a4e70a93f97713de8696e22c4ad530721c75e77cc1078f6aedb6e566f2ef2795a9c6e90c28ccc71265b43c5a92dd54cab1a0a1a5d7548f2c8d5f78b75376ec0b9380731150d804c81e7766b0fbbea9298be6df3661b885b67464aa59bd755ecfd1514a8a3f5a757ddb2326ed9fcbd3eba04adebf1ff9c6d3b8a8e93e414c2380f61e63db5b31651ae8c95edfed1208b6505956e2fe8bd9b90eda680fe37633961911b3b20ce46f7c5384677a8e651ec18a14385313475b255f6574704b1a9d77a71d914eaa5bdaf4f8d47007b2b113f11abe8eabc892ecedc3014b01e3ae09fe1ed0a19a9d2a15bcdc18fb98361609a82db890c4cbcf8618fe76bc87e0d7c8c14c55f8ec23dd882ad57f7a910524ee014b63a4bbe0a042efbed8524b370cd58dac4dcfb32cf62caf4d12ba1bc4b588b4797fc60630e740efbd84a9795eaa700fbc24c0e29950e4f72d18c5a3e3855d4e89ec053c35bc25df7e707eea6434dec88280cda2ad720958220bd65cdeeab6e889945e694e041a52e682694515c652ee0fa830d029f34ff9a90b8a29237b7aa8c8dde8028cc0affff259ec2de2fca4ff83b0d179c463a521fee543552e858f4dcb3da5fc523c0d9ecb306084543aedc225e2b80ee9f7c52321a5b7bc0724d7890d771e38453d2615ea4d97f4137984a8198dd1c7fcf06e22665a78635aca82c29241e5ef7999eee96ff9b8a0bc40a4893613b282e2cfe63c619c108c7f2c1b3e18902156d57a0b8f719e179edbe6110c7a6c6e25a72c635f6e72a776f906070f47f7bdef10b7c415306f4388c5016166918e6251a102c1dbabf3f52de8304b00e531b9c9635c2ed2a1e298e8633c1a01369380feb3489bab76609cc9bf95a6fb3e69fd8fa93cddf70e0871c84b067f60af72a086361516800723dcfc226991048eb14d0725b91fdd5921c2dd9f0f860e283cee39da9188ce76590ae8eb8c262fe562e632324a191986a83e01ca8d55619f15c7e556c7b9e9c2f11eff5028258d0c03a2d708b0ca7ecb0ae3f9082aa5cea871527a69ab580fde482d85061b30d401706fd052d5aa7dfccf695cda8d619cd446f3f1d4e816416dd6744605da022e9d6f67c5c93df546a1d50d5ca61da3c35caadecbb2af6e0464e1a5c950eed82cca081736b793192761b9748b25030525dfe8915a1a2574a02d2c087a9fceaa8e1f22522d20271bbf51677ad505b1f19855dd1edda6ec8703521b739d0d523d6565db4f619ff6385984c8abd4d5942352480e1d2985d5eb2a09c923367ed3baf9df7679d16e7704d404b09c3aa793794d294e93e65809b04cf51ec5a563fd5e10fa2d7824f6ff70063ef4436e1dca54a8b0b30593a53ba23c255c041deb8175dff5fd7f15e97019a06b2b3633c6a31735353dd3ccca57aa73895634077483d26dab9174de3a19aa4a69cb760f82aa1bb385d2e93333f7f7a863402498e269db2cd97a42452ee287e172cd5bc980f29c2711567e50bc8f6116ec589214817da7b13a7ae32409d9c45852fcd6b843d497f2b99ccf142726b68081", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) [ 199.834081] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 199.863027] binder: 14574:14580 ERROR: BC_REGISTER_LOOPER called without request [ 199.867403] binder: BINDER_SET_CONTEXT_MGR already set [ 199.867412] binder: 14578:14579 ioctl 40046207 0 returned -16 10:17:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/170) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000040)=ANY=[]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), 0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) write$selinux_create(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd', 0x20}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) socket(0x19, 0x800, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000029c0)={{{@in=@multicast2=0xe0000002, @in=@multicast2=0xe0000002, 0x0, 0x4, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x89}, {0xa6, 0x5, 0x5, 0x10000, 0x8000, 0x7, 0x0, 0x8001}, {0xc000000000000, 0x6, 0x7, 0x7}, 0x0, 0x6e6bb6, 0x2, 0x0, 0x0, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d5}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x8e91}}, 0xe8) 10:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000040)}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3cd9f704", @ANYRES64=r3], 0x0, 0x0, &(0x7f0000000280)}) [ 199.882699] binder: release 14574:14580 transaction 513 out, still active [ 199.883161] binder: 14578:14579 BC_FREE_BUFFER u0000000020001000 no match [ 199.883235] binder: 14578:14579 unknown command 83351868 [ 199.883241] binder: 14578:14579 ioctl c0306201 20000480 returned -22 [ 199.887739] binder: release 14578:14579 transaction 514 out, still active [ 199.887742] binder: undelivered TRANSACTION_COMPLETE 10:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000040)}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3cd9f704", @ANYRES64=r3], 0x0, 0x0, &(0x7f0000000280)}) 10:17:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/170) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000040)=ANY=[]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), 0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) write$selinux_create(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd', 0x20}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) socket(0x19, 0x800, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000029c0)={{{@in=@multicast2=0xe0000002, @in=@multicast2=0xe0000002, 0x0, 0x4, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x89}, {0xa6, 0x5, 0x5, 0x10000, 0x8000, 0x7, 0x0, 0x8001}, {0xc000000000000, 0x6, 0x7, 0x7}, 0x0, 0x6e6bb6, 0x2, 0x0, 0x0, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d5}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x8e91}}, 0xe8) [ 199.949960] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 [ 199.976438] binder: BINDER_SET_CONTEXT_MGR already set 10:17:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 199.976453] binder: 14591:14597 ioctl 40046207 0 returned -16 [ 199.976897] binder: 14591:14597 BC_FREE_BUFFER u0000000020001000 no match [ 199.976979] binder: 14591:14597 unknown command 83351868 [ 199.976986] binder: 14591:14597 ioctl c0306201 20000480 returned -22 [ 199.985857] binder: release 14591:14597 transaction 518 out, still active [ 199.985860] binder: undelivered TRANSACTION_COMPLETE [ 200.002007] binder: release 14576:14577 transaction 515 out, still active [ 200.002011] binder: unexpected work type, 4, not freed [ 200.002014] binder: undelivered TRANSACTION_COMPLETE [ 200.023190] binder: undelivered TRANSACTION_COMPLETE [ 200.024810] binder: 14574:14580 transaction failed 29189/0, size 0-0 line 2945 [ 200.024817] binder: send failed reply for transaction 513, target dead [ 200.076759] binder: BINDER_SET_CONTEXT_MGR already set [ 200.076909] binder: 14574:14610 ioctl 40046207 0 returned -16 10:17:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 10:17:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) lseek(r1, 0x0, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adad79bb0385cdfaa0fa071fb35331ce39c5a00f7e12fca50cf2a7500000000000000bf76dcae72a88b89d4a118b598fb7b4fcebb3d01fa63ca2be403bb0a38ecfc247fbf00791ac7b32d1b14a6aa91f664bb3ae6163f6a592958ea7b30be7facdf9ad2c5baa786c2b66f47029f974f1d6a41fceb11aa1b240f300bc92ec50b01846647fe68a6a8acb710db4cddc5c9f2c6a74eb8aa02ac8709879d7746d9d127a10a7689e506023458f618290be96eadb35e54708489d177691ab56d9016a34015c027ad6566b093fb") fstat(r0, &(0x7f0000006980)) [ 200.077045] binder_alloc: binder_alloc_mmap_handler: 14574 20001000-20004000 already mapped failed -16 10:17:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) [ 200.083531] binder: 14574:14610 ERROR: BC_REGISTER_LOOPER called without request [ 200.086858] binder_alloc: 14574: binder_alloc_buf, no vma [ 200.086878] binder: 14574:14609 transaction failed 29189/-3, size 0-0 line 3136 [ 200.097032] binder: 14574:14610 transaction failed 29189/0, size 0-0 line 2945 [ 200.097041] binder: send failed reply for transaction 514, target dead [ 200.097619] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.202448] binder: undelivered TRANSACTION_ERROR: 29190 [ 200.202461] binder: undelivered TRANSACTION_ERROR: 29190 [ 200.202496] binder: send failed reply for transaction 515, target dead [ 200.202504] binder: send failed reply for transaction 518, target dead [ 200.300740] binder: 14601:14605 BC_FREE_BUFFER u0000000020001000 matched unreturned buffer [ 200.305059] binder: 14601:14605 unknown command 83351868 [ 200.305069] binder: 14601:14605 ioctl c0306201 20000480 returned -22 [ 200.315124] binder: send failed reply for transaction 523 to 14601:14605 [ 200.315455] binder: undelivered TRANSACTION_COMPLETE [ 200.315462] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.336304] binder: 14604:14606 transaction failed 29189/-22, size 24-8 line 3013 [ 200.352619] binder: 14617:14623 transaction failed 29189/-22, size 0-0 line 3013 [ 200.352738] binder: 14617:14623 ERROR: BC_REGISTER_LOOPER called without request [ 200.372953] binder: undelivered TRANSACTION_ERROR: 29189 10:17:03 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4205, r1, 0x0, &(0x7f0000001200)={&(0x7f0000004100)=""/4096, 0x1000}) 10:17:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:03 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) 10:17:03 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) mount(&(0x7f0000000000)='./file0/\x00', &(0x7f0000000040)='./file0/\x00', &(0x7f0000000080)='cpuset\x00', 0x0, &(0x7f00000000c0)) 10:17:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x80000000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) getpgrp(0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0x13}], 0x200000000000020a) write(r0, &(0x7f0000000140)="df867fcbebd2ac2de1ba6cdf172a435bdfd3581deaa922a98992ef2c7b19a2d2d2b182c9e5cb83484783b67e3d6565f4b786bf8d0b7d06e3add90a", 0x3b) mq_timedsend(r2, &(0x7f0000000180), 0x0, 0x6, &(0x7f0000000200)) 10:17:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @empty, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x5c) ioctl$TCFLSH(r1, 0x540b, 0x0) 10:17:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 10:17:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) rmdir(&(0x7f0000000280)='./control\x00') 10:17:03 executing program 0: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r0, r0, &(0x7f0000000200), 0x80003ffd) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 10:17:03 executing program 5: 10:17:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:03 executing program 5: 10:17:03 executing program 5: [ 200.933375] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 [ 200.945177] binder: 14641:14652 transaction failed 29189/-22, size 24-8 line 3013 [ 200.973126] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.083468] binder: 14668:14670 transaction failed 29189/-22, size 24-8 line 3013 [ 201.131850] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.146441] binder: 14617:14679 got reply transaction with no transaction stack [ 201.154304] binder: 14617:14679 transaction failed 29201/-71, size 0-0 line 2921 [ 201.270632] binder: BINDER_SET_CONTEXT_MGR already set [ 201.276614] binder: 14617:14681 ioctl 40046207 0 returned -16 [ 201.286092] binder: 14617:14681 ERROR: BC_REGISTER_LOOPER called without request [ 201.286100] binder: 14617:14679 transaction failed 29189/-22, size 0-0 line 3013 [ 201.314906] binder: undelivered TRANSACTION_ERROR: 29189 10:17:03 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x280000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r3, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c46000000fdffffff000000e41df4b80011350206c044a73700000000000000000000000000000038000000000000000000000000000000045b0000000040000000000000000000000000000000000000000000b6060000000000000300000000000000000000000000000000000000000000000000000000000000000000000000c67e9b79000000000000000000000000000000020000000000000000000000000000000000000000ce0c000000000000000000000000000000000000000000000000000000"], 0xc9) sendto(r3, &(0x7f0000000280)="8a7c94b16a3d59c903f95de9820ba213d7e690bda9a0d404db017ee55e1963bedaeeb70ef25375f8f52c5d97e04241181e2f945c59685ec5645d7ce824e03c75d81f7ffcae0f94b84efff95d1ce5eaa2162128d5176fbc4719dc09153d774d99ed95099c46f45197", 0x68, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001540)=[{{&(0x7f00000011c0)=@nl=@kern={0x10}, 0x80, &(0x7f0000001240)=[{&(0x7f0000004ac0)="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", 0x228}], 0x1, &(0x7f0000001280)}}], 0x1, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x205) 10:17:03 executing program 6: mlock(&(0x7f0000006000/0x1000)=nil, 0x1000) 10:17:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x41) getdents64(r0, &(0x7f0000000240)=""/207, 0xcf) utime(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x1}) fgetxattr(r0, &(0x7f0000000200)=@known='system.advise\x00', &(0x7f00000004c0)=""/82, 0x52) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x40) getdents(r1, &(0x7f0000000380)=""/8, 0x8) sendfile(r0, r1, &(0x7f0000000100), 0x7) getdents(r0, &(0x7f0000000000)=""/127, 0x7f) sendto(r0, &(0x7f00000016c0)="1cfb5b097c15d5eda24d441e5af2f55e2b2a2cf955c3ca6e8de9f23414b3863b9d082a5be216e6a452ae67dcfcc63f4d7678f36fcb6215fa226dd7d223215e8d76f789a8f30ed713a39c14f46ee1089ea517c5abd4cc0e8ea25ffdcee01d592818ec4cab5fa4c0de64abbacf1f6822a8a9b9833d3e58f02af198d0cf50285bbf0a68d7bffd10fda54316d3420c2fa4a2e213390f758b1825fbdbc68da4da8023c79ab8173a1968e1ce4faffc0cb9cd2b9b5acf0da022ffab3e30b7f5a61eee71906a34acfee3810ca8493eac0beb57c367c13a335320ec37794661d6af5280085303d95ff53ca8f6d450e4bfa01069fda14ade321df36334d759e15e3e26154baf219b0f6639b90c7ee27f905ad31e1aea119ed486c1d228aabff1d4296c4bc8aaa58561f13128ec26d246618731cb1c53e468e6aa6fe23dc2b21906adc0d4eea4c942f128fc78874ec97ca94a382fc0f2e187aac42e16a86ac38792be6c3e36256af44a7c4b117189ee8fd5af39af4e4c522aa970b02cdb1a5788d496c4b2e7cae65efd348c381b0b733c0b2b7d351b771a893f0f6fa3d576d38d80d122d5f9393648a7e9176d7e51afc0dc7399377f19c9941ff6f08441c9595c8aa16934f6de175caabbb5fd1d1ff2f2f817e11b4f29ba687b0bf4bf5315c7b05d78a7f54e777de83afcd730cb75aec6c25e5b164d2be573c7ef7e514e75092c2362d10d7d093f98956f7bb54eeda911721f92bf1d635f26140be017eb6387830965d082a8cee6fec3db007a31ee6f8434f025430be6f154b77217d063eee9392acfb840b400f737986ed6d70b21979ffe0d99f94dd838f144c751f24735a3c9f42315a34bbc4eeb04bf9a1bb8f6afe1e284b3ca696051634a0e47b99f5b7c22a38835754c5677ae0cc057557e8a8233859ad6112860be562a5f4a875b89e2455f2c890aab1200c27c4ee78246718ac7fc61dac17b10fee21c73f8a510de4f7da0f9cdc14f6b6575f3c4b6cee8ec84297bf3c312deaf61559a02ace0efb5efc2432073a026b70079658b099a036ae80abc8c1d49d761b18d5dc514fd2ba63b3b6b9dde7fdde7e4fcade0575f209d240539dd2ffda9d8d84d39b86f26f37fa49fb7910d035088970b25f88dedc034a1348ff4bd93e96a091a52e3c837f4774f453487712e970ec0514af41a0ea5b4d3a8d93a38b5e1ffde29548bd20aae6503f6de2522e4a86f7447577d805d7029b43424c842308d5c5b2272c592c2c678e8830b4ecf7c750ee5b3557b3634e071a1ddaad45452c831bf5d597ca2941731a388e1466ec4b6f1a2af7f26d8d1d524058c90985c4afd8d99aa86ab6490ed09f91c8568a010e6e505495e68856a2fff6d242cd9a91b0ea2950fe5a3f191e9407559bf3fa5abdcc50e5f89273bc7eb62f1fbedc0558e1740413f89d42fdf10d6f768dcdf6216830eaa58777433934fdb6618af04d45d98a77b03f29e6599297afaafa6a21226dbc0348309efb58c45e6719db698ad5c2c0bf1131719b8e10287e5fead37e90c0b665243162a1493aca33e12a48f9dbe5a7c818741c8456883aee0f70aab48b6bf21977498cf4120f85876751570e540480795885337956cc0f8adbd9af44beaff735b1efe7340c4b135fc1c743192db6267639d256c4c9a23c9aaccad62150853bf6857cc3053aeb6aed0a2957a3fbc9deee2e676d019200678eefaafa53ba7064c799e6a20c71c869cebdba13833097038484f57a52224c5ac2111ac624ef5718551a2cf3df96f1b6b73fbf39551cd0b9b1c38bed3ae9750cea7512877cb01a01803bd8d705775509b9ef4cab6a0de2682f0c6cb701a44719e5806127cc624c9fe1c6fc8a96d4d86aea375a26ab4f1d63c16ce86b5cfa44235a9b4bd2a39d3142d84569f21b4bc4bea91a18bca81c16ebcf4af092b274039e8deaaaf820f7ba63e792f6898276606a7b31ad43aa8f28e976ed02c08f6349f9df72e06237336c9e013ba80e12555a1622d3cb258873454088dae02c6aa343b017b30a3e55f2ae922b8ad91407bf14ef6728407e618f60831e8bde39e3b0214b9a4aec7b85fe82b11363a64f72d8a49bbad12c3f2d5c904616fec63fce38d946f20f62971b4a81856eb9eca8ed902956789cce600b4172730e3ab1e72d110a1bff45541625a07bfae4b9b5e97a583bb565a37e984c1c98f3ac38a69f101447f4ab7245c6ac786c32bcb4f2e51da4a43dfc285e0bb97d5c75f0d0213b93b568dfb0762b4471691b6e49b9ff6c27dba063330967413b85114556d0e2bce00c59343536d80eee004d018146b243dbe771b9f008eaf84e0a72222426ccdcd3151e000565abce76084b3c31b78c0e2943c1b113aaec7b47fa041baf32bd439c227dc8660da739c64929ba64ba4d8175a57d77a141fc041a4b9a66ba9f975d7a9fe9f2fee7c2f509cd7179fa6818d24bf335a8a2fba1fadf9a7f0c19a8972f963ee82f77848060edcd43c60806d5fa3c195c2918b9428bc4c170f7bf4110b1728fccc4034372ffb0908d69088afdb722188bf726189cf811ef7f6a194c16c78b7acfcaa510add252cc81509d82dab300e87e16b25595d8f7438be0c7a23f55175a0f664f16fe72fb1085b1901dd3f0c2957c201f7fbf80615212cd31d5a73a459ce88ae85590e401558691713fa7f8244506031371d2421cc0786c0dee0db3e81301674a6120a75a9a9a63e910b153b1bb7ff8375f8c571d836c0c992a12e8f86d771c4c6f8d8008794cdc610934c89f50e116e27eca5f45dd24f905655cf0057933fb625c3a1cfbc4af8209a11929d3dafa65349c3b6d8422b6f8670d28983585fd051b936dd93e3c387047b1a6b974e0450b0332aa08e4330dcca0e83340ad8fc973dc12f7a87e63539c8298551860877f33fc43c1d47f21139bf4e6b4e16753541632029422f694a082ddcf9b999020167a9bc14fcb2ee302a84f53b2a8ebda2f702614fca12388c8eaaaa45b1ce530b088031d76f9c47d8393ec42050111dcb16b657385d520ed4cf786e7cf218271524e2e66eddcf09a4932ca17cec80c7c39a18559488eba88f3252100d31b688c410d9f987cda14b7008b440a4c45091a9b306e62a40db028f1b5c688863ab498d0aa25a3b0b90529bea3ad43c614c4e885164dba8da85f92eea63fb7a928e7773334044d4488177de6c3a8c68dfc3ee1db0fdae06aa165cf6ee8aff30b41ebf74710b0080ea5d33247d7b2f50542dbe2b8ab18ba7c60521dfd7286fe69a8f62b077ab5c82701e418da0e2c29e5cfa84a8a7e2bbf48cba1f0ab1e041db8f0e49cfc0701e3fd73cd65a0ba2b74ef31d8885f8dff1c323d8872b91aaf255dfeb247f348296890b1629480882bbb55ddacb204b3cb760d378a41e68c1eea0927199dc3d784026ba7c4a05766439daf4a9c423bf76edc3940a981ead6c5a4cadfb08a92ec071b224fd23669cad75055ea7577f290148e1b77faaa68a0a9180b0eea754abaa01df3155fd2f6238b7dc2cbd79d23c90fb697b21e9bbb3fe3554bea59daeb98982ffcaa78c7feec944d7b913bf8ee7da534f4af12b1d1cfd45a2a3fa7beea026f67377824d1dbf812c2dc03bf531383703d88071f101eb8e0e7cd9493bd099b29d309c24d7706f2e7d3fe7f222a2669c6ffe512c6839ad3bf4553c99aa2bfbf1a571cccfe68f9121b2cb5fe86d1a2179a7fbd2baff5e5e87bd22e54221d8352c099252670964f69f2d2660b7e8bcbdf5b11011f14b621131080c3b6651bf5f1079d4a7c58adeddb72c3cb607a7db405ea1835523c65332525ef374f6ab2bcd7c8be976823ac2a2a3a785db6a9effab900f3bc45c89b21146f327d4b2b260ff5ad9b87dfe57e4e44e2ae291cdbabe0a02e35f323f29cca7d0b5a9f453d39eb522fed93984c57de8547b22d4866938c60f1d0beb7236bfd2fed6758e42d7cf67e06121f1956233d15da10af235a42ef48751364f7a11697928098fd90ac900d393720f69d20ddc3cbfca70c827d18d34755b78b59552c2d46ba910cd5f6555e2ab71b880c90ad47339a3d3182bb75b28aaf7508828c5d519905267e91f5cde2521f9915806df7cd98ed7124fa46dac89c0d3d0977346e18d6586c7b6c26760681a78222f527eec45d4d06507c00ef8a21b04058fc7cf3bbe1f92bc4a00d7674c5e9e78bf2c7ed2f6e9a05110fd7ba30abf3faec2feaecc6c95f9867100ead282421a1a51eda59235ccfc5001a0d3fe9db7baac30221cc0a6d3efbd542aaaf7364b299ddc7c44a031e1aba953b8779214a2e693e3d1a373e943a1281ddd2f98f837c142080ed9d36d4703351ce6c100d1afc118a09b3cec3e63dd52f99a894fd9f666828c4caa74a23104354d53dc0590cffcee30538ec0da7213891666d68a17b775261f4215418b184362238ded4c2f35fabcaaace627d2b9db47ce941958821e1d6fd3d646855645be13a3df51941628fa7a034a08ca0be70ab15b8b74075f27f070f56fe4b50f0ba46dbad865cefdd819c94e978c2b2739290dfeb2eb0aea488dd0d57556605c71eaf2a4b81bf9e1f3597133be8add59b40b869432d5b1d014519115cb62a46c9abc593e5abca7c834522c0b9d4fb6c43dd938b7535f330e168c6271ba00fa77d20fa6c5fb06ea56d7ce7ec1a3cf76f28fd520a0ffe4440fa08b5d161e93461691c87c92bbdddb290773869e92c0ea19606fd7e8cf46c15bab673f17f880203b68456e20b3589451bd5599c2b519514457dbf98920f192288fa83572f6d077155694e80f7f9e9c9a34c260985601e740628ed1a5fb5d542d9156eb510de0b88574c3ce7c72c30edfd3556de9e53fc0ae5fd5971d6ce024278838634d1026448ad658d3d92c19a97dbb9fa6064731b920b81b72cc1f2e47796e909992596c0065cb0c4238b60d14b4e19816f99a4a70f1afd9d4120097401ada84b177133b646b30c65b2a01de5f71a3e5e8055cadef0af362721ca5ba25c24056827f8a89958a94a2e0f8c54c024e121b1b2a41f5bf190a8e5aa69c635248f4508eab3f75c66093e1e51d1ca2ef034f4f4e5bc4ea00db10183a7c7d8e5f1d4322c5734424f5b716b17177bbcde3791557986233b926f32b259a99caab8fdf7a5a321506554a33f0002fb100b306340e238b061669babab67eb2c63f1897d45b77ca6f72296e2f4498aab866fb2e03efaaf7878df91e1c62c7bc6906c19c044655e1b99359e1f1b29523eafa7171f3237768b7dbd101b69e5f6e39afb73060f3e1bee81b89bdd2631b3e00ba6c5e7d742a3b4579813eb94012dbd6520e8f33d2516cec3f20a0b6afc27cb46395ad69155587fc7fde474b76e221e79e093e866214da58ea11bdfaaf601c4a8173b8fddb0aa5190bb6b1ceb4a1a193e4d0364adce3f09180a2523003fd3313c2954445a265844c351cce7a6c197517f3cd720455e06519bd68569a976956943924569470702e62c3fae832904e68c5d7eedbf90578c953622d30f903d1ea959fb50167aef91cd5e57d48da0811a12e9645c2a6c06c39a99a5c804b8332116ea31a419f47e1165c2f5c43cf9e1b8079fe2857d96b2fc1ef07ae358662d1e770c29a135a5adf1897d2e59e39cdab1e43dc8c99019c59e95e8753e6574b876feed84c516522547a15ea03c9206035c0395d0e99f0d4607c48253106b37c0f8e4d9960ee63883f3a512cffce008c47dfe89487bc35a178a29822c4691da449bb4e004887fa25091a2289a3317616222d3c79c9ed268e749cfe860c1b7cdbf6d957a1f98518e3f2dc8bdbf19302", 0x1000, 0x40, 0x0, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000540), &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x3ff, &(0x7f0000000580)="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") socket$inet(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 10:17:03 executing program 3: setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x2007ffffffc}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 10:17:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000480)={{0x33, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x2, 'nq\x00', 0x28, 0x4, 0x800}, {@loopback=0x7f000001, 0x4e23, 0x10000, 0xff, 0x0, 0x1}}, 0x44) [ 201.324133] binder: 14617:14679 got reply transaction with no transaction stack [ 201.324306] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.332033] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.343221] binder: 14617:14679 transaction failed 29201/-71, size 0-0 line 2921 [ 201.354503] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.391265] IPVS: set_ctl: invalid protocol: 51 172.20.20.19:20004 [ 201.401372] mmap: syz-executor3 (14692): VmData 35155968 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 201.404420] binder: 14688:14693 ERROR: BC_REGISTER_LOOPER called without request [ 201.404495] binder: release 14688:14693 transaction 533 out, still active [ 201.404498] binder: undelivered TRANSACTION_COMPLETE [ 201.404714] binder: 14688:14693 transaction failed 29189/0, size 0-0 line 2945 [ 201.404719] binder: send failed reply for transaction 533, target dead [ 201.407820] binder_alloc: binder_alloc_mmap_handler: 14688 20001000-20004000 already mapped failed -16 [ 201.409144] binder: BINDER_SET_CONTEXT_MGR already set [ 201.409151] binder: 14688:14693 ioctl 40046207 0 returned -16 [ 201.409193] binder_alloc: 14688: binder_alloc_buf, no vma [ 201.409208] binder: 14688:14696 transaction failed 29189/-3, size 0-0 line 3136 [ 201.410360] binder: 14688:14693 ERROR: BC_REGISTER_LOOPER called without request [ 201.410379] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.412755] binder: 14688:14696 got reply transaction with no transaction stack [ 201.412763] binder: 14688:14696 transaction failed 29201/-71, size 0-0 line 2921 [ 201.438414] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.438748] binder: undelivered TRANSACTION_ERROR: 29190 10:17:04 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) 10:17:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000007480)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x28013, r2, 0x0) 10:17:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r9 = getegid() r10 = getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) r12 = getegid() sendmmsg$unix(r6, &(0x7f0000001c80)=[{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000580)="0b69f772c857a923f9a5b4da799becef14e13e36085f807cb8e7c1b6d4645cee445a6c43c3b17444efc1a04b61873706b8d63ee858fa20899557c2f1686f69046a7e4625106d54944117220a6fe5776df10f31162eb8d780817c5644bb17c98ae8f4d83d664fdb5411c97baeab321a03d2ebace5f920fdf683dadffebd15e79fd78dd7c85a7942f79ccf6d794643994d4f7eafae8d6468616265d01a7a38903374b2c53edb6c4046ab236becb0d002fefe353930222eef3816c12dea64c5480fb4615c5c6ad9085284a35ad148a5535d77d0316fccba4c625787afe06db2e1dffa07817c", 0xe4}], 0x1, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r5, r5, r2, r0, r4, r2, r5, r3, r5]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r4, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r1, r6]}, @rights={0x20, 0x1, 0x1, [r6, r5, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xd8}, {&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000009c0)="3a2d93baa994c1f5a2cabfb08efda36b139a616113effacde4321b70ed564f07ce3a3ec230816f004fb566932e0a46549d06ba003cdf2f96635254731f11396c98cf26dea14b479b30193bcdb667604336d5febb28a98fd0a4b0d21511d4b65977adf8c610217f7838ed1de41087404be666acf3c5c7c6f4e1115d1061d573f85efe67ec68cd85ab2214f8822d81853d61973dfda5079da5a21583f7bc56d9ac9b2769fac37715d1ae2ebe92f436a2f73df157522ed4fa52d76af0e94719a17498ec3e51dda5381b95f0fd2a04ffda3ec2942248d4d0", 0xd6}, {&(0x7f0000000ac0)="e89eef263b57ecf89c23639dc1e3fb87ca6a4ec8603b6c91d8ea94589f2cf0622bc101999335ce1969935b3d9e43df62bb972f0edf07b6d13b961cd71416d784a7170fae722e4805f34ba01a3752d752c805bbb1c8af48b877373fa84177a67f6da34aa7aa5114b63a1473ac0f6ef65d4f3ad2d6ef7556f58461590fd27a89adeb0c6e4c9632160c7551d8d1a7d48e88f1a1a755f0f0d3746e5e4dcf53e8e9d9f17be5b9b47e01868e7fb4fc72747654594972c07532f0ed31ef31dc9e2d0b6017625ba3a6996d360e63953b33de37c0d4914e9ab8ea413e71e3371e5c20d47fabb78143364e07ea9d904fcf226044c70c24cc", 0xf3}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cf55a7c59767c4d80af4080ee39ae6ccc4ba4358e1a2d1a435fd07637d", 0x1d}], 0x4, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r5, r2, r4, r4]}], 0x28, 0xc000}], 0x2, 0x20000000) 10:17:04 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/rtc0\x00', 0x129002, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'lo\x00'}, 0x18) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xc0000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x8001}, 0x2c}, {@version_L='version=9p2000.L', 0x2c}, {@msize={'msize', 0x3d, 0xf2}, 0x2c}, {@uname={'uname', 0x3d, '@,'}, 0x2c}, {@privport='privport', 0x2c}, {@privport='privport', 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b6300f0720d42a8648391d0026ed7de42f60082c95d3a01b68fd7caced0530d8cecceeaf7ea7c4f2a13155961ad5ea5"], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:04 executing program 3: 10:17:04 executing program 0: 10:17:04 executing program 3: 10:17:04 executing program 0: 10:17:04 executing program 6: [ 201.892775] binder: 14707:14714 unknown command -268410101 10:17:04 executing program 3: 10:17:04 executing program 0: 10:17:04 executing program 6: 10:17:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getegid() getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) getegid() [ 201.934463] binder: 14707:14714 ioctl c0306201 20000240 returned -22 [ 201.948794] binder: release 14707:14714 transaction 538 out, still active [ 201.956263] binder: undelivered TRANSACTION_COMPLETE [ 201.982282] binder: release 14708:14715 transaction 539 out, still active [ 201.985330] binder: 14707:14714 got reply transaction with no transaction stack [ 201.985339] binder: 14707:14714 transaction failed 29201/-71, size 0-0 line 2921 [ 201.990339] binder_alloc: binder_alloc_mmap_handler: 14707 20001000-20004000 already mapped failed -16 [ 201.991500] binder: BINDER_SET_CONTEXT_MGR already set [ 201.991507] binder: 14707:14714 ioctl 40046207 0 returned -16 [ 201.994708] binder_alloc: 14707: binder_alloc_buf, no vma [ 201.994725] binder: 14707:14739 transaction failed 29189/-3, size 0-0 line 3136 [ 201.997303] binder: 14707:14714 unknown command -268410101 [ 201.997310] binder: 14707:14714 ioctl c0306201 20000240 returned -22 [ 201.997330] binder: undelivered TRANSACTION_ERROR: 29189 [ 202.073205] binder: unexpected work type, 4, not freed [ 202.078546] binder: undelivered TRANSACTION_COMPLETE [ 202.085998] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.091505] binder: send failed reply for transaction 538, target dead [ 202.098178] binder: send failed reply for transaction 539, target dead 10:17:05 executing program 3: 10:17:05 executing program 6: 10:17:05 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ustat(0x7ff, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634f40"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:05 executing program 0: 10:17:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getegid() getpgrp(0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) 10:17:05 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) close(r0) 10:17:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:05 executing program 6: 10:17:05 executing program 0: 10:17:05 executing program 3: 10:17:05 executing program 0: 10:17:05 executing program 6: 10:17:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 202.862153] binder: 14759:14762 unknown command 1078944529 [ 202.893034] binder: 14759:14762 ioctl c0306201 20000180 returned -22 10:17:05 executing program 0: 10:17:05 executing program 6: 10:17:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) close(r0) 10:17:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 202.912181] binder: release 14761:14764 transaction 545 out, still active [ 202.912186] binder: unexpected work type, 4, not freed [ 202.912188] binder: undelivered TRANSACTION_COMPLETE [ 202.985354] binder: 14759:14762 ERROR: BC_REGISTER_LOOPER called without request [ 202.994006] binder: 14759:14762 transaction failed 29189/0, size 0-0 line 2945 [ 203.001721] binder: send failed reply for transaction 545, target dead [ 203.009302] binder_alloc: binder_alloc_mmap_handler: 14759 20001000-20004000 already mapped failed -16 [ 203.020976] binder: BINDER_SET_CONTEXT_MGR already set [ 203.026694] binder: 14759:14795 ioctl 40046207 0 returned -16 [ 203.033844] binder: 14759:14762 unknown command 1078944529 [ 203.039541] binder: 14759:14795 ERROR: BC_REGISTER_LOOPER called without request [ 203.047220] binder: 14759:14762 ioctl c0306201 20000180 returned -22 [ 203.066247] binder: 14759:14798 got reply transaction with no transaction stack [ 203.073924] binder: 14759:14798 transaction failed 29201/-71, size 0-0 line 2921 10:17:05 executing program 6: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c4000008901f9bb551a2e5e06d71cda11bab5eabaa7a411405eb7f2aaebb47373347060a969792d56da2c18eb92c22486b60664d7bd8d02debb7d136a57b5d479bc88c453f26a3ab3606c8ce592d8dece7a5864e587e5b7e1ae039c5a0f3a19e377057db313264e69c4612a202237671bf83116a827660282a4b602a2cb4224209d8d1f9830b175e792a60e40ff902a7319d1024a07ff0a77d51d7a6be567f6f809264cfd9a6bf27df48dc405cc1c0102e81d43457ba5acd290ebf3bae5aa18ca26052cd8e3aa7d9225db38eb6713ae07dd63612f99760dc17fcbd7bac0f305c581010c61eb5c3bebf574146de6084504a2d0396b", 0x2761, 0x0) 10:17:05 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x20) dup2(r0, r1) 10:17:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getegid() getpgrp(0x0) 10:17:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 203.183729] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.189245] binder: undelivered TRANSACTION_ERROR: 29190 10:17:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") syz_read_part_table(0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c", 0x4d, 0x1c0}]) 10:17:06 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fchown(r0, r2, r3) mount(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='proc\x00', 0x400, &(0x7f00000007c0)="8c37bb79c4a92f86a4baca2db62447f0dbcf3b37055fcdee1692dff8ebe07fa52524d5acb9d396ce3afd5af16dd7640b6807d4054058a248d4f4d1234b2328f01c01842b29c9d48103287e94428d6837a67bbf14e93496fcd00298a309f490901733bf648a67c89479501066150b92e17ad11c36f82b2201b1266a20487a638c22a108533d15c1") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x80, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000940)={'filter\x00'}, &(0x7f00000009c0)=0x44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)="543d2c9826d9124fb396833ea9fce99187ad1779e4eff378ffbe6dab1fc0938ff20989a123ed23c4400041e529a877a751b1792cca63483e1390995c0ebec35822856f694d6ccf263a93969bd7f80ee6125ed67a06bc9cd01dc9e9d0b29d5dc8a9deb914f5c8bdf869d129cc15885bccb2692d2ec5cad89bdb5b47ed2346ce0d8e68e284d98905428853f48d8484caacfe1b28839a46988ad239aa78dc088aa7e23c96ac57a37d6cb5fdfa70ae2ab2eb03cfd96d0415cdbb19b7cac4bcef202af41ad184a57cfcbd788a2feebb656ab6166334653e46a953939db634fcc387aa1b", 0xe1, 0xfffffffffffffff8) r6 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)="684780372b658b3e086466365e5800c5737bbf51aaab3e1609bd0a97c6c4f04b1f915bfb07d079ff576866f00e7a67b951b30174fd83ea8e63e2009676700de50d408f2a55fb82092405f6370cedfa3542bd3724a1a6526b275ecfa1bb66005cd091cde9e490409488e1b23d11bdae6a61dace44cc8e121649b3739e1bcba685040f425457cbd0374b3c469ac07e068485877d220a89e607233bcdde58c0eb2cf8f3beee46d573ea425025617aea6eff72bb0bda6437d21fd94051a82e2abe97c6c1f58ed7", 0xc5, 0xfffffffffffffffb) keyctl$negate(0xd, r5, 0x1a12, r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x40, 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000640)=""/135) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000880)={'IDLETIMER\x00'}, &(0x7f00000008c0)=0x1e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:06 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="220000005a008d6b3ab7f30a00800000000000000000b8a6ac0000f89747e435c4b1", 0x22) 10:17:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 10:17:06 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) close(r0) 10:17:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getegid() 10:17:06 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 10:17:06 executing program 5: r0 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 203.775053] binder: 14823:14826 ERROR: BC_REGISTER_LOOPER called without request [ 203.798967] binder: release 14823:14826 transaction 551 out, still active [ 203.812101] Dev loop3: unable to read RDB block 3 [ 203.817059] loop3: unable to read partition table 10:17:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ustat(0x7ff, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634f40"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:06 executing program 5: r0 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ustat(0x7ff, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634f40"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:06 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2042010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b7cf0000", @ANYRES16=r3, @ANYBLOB="04000fbd7000fbdbdf25090000000400020400010100000800962e40000000080004007900009081ffd7"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) fdatasync(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 203.828429] binder: undelivered TRANSACTION_COMPLETE [ 203.834349] binder: 14823:14826 transaction failed 29189/0, size 0-0 line 2945 [ 203.834356] binder: send failed reply for transaction 551, target dead 10:17:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@local}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) 10:17:06 executing program 5: r0 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 203.847566] binder: release 14819:14835 transaction 552 out, still active [ 203.847571] binder: unexpected work type, 4, not freed [ 203.847573] binder: undelivered TRANSACTION_COMPLETE [ 203.849003] binder: BINDER_SET_CONTEXT_MGR already set [ 203.849013] binder: 14823:14826 ioctl 40046207 0 returned -16 [ 203.850273] binder_alloc: 14823: binder_alloc_buf, no vma [ 203.850292] binder: 14823:14843 transaction failed 29189/-3, size 0-0 line 3136 [ 203.861993] binder: 14823:14843 ERROR: BC_REGISTER_LOOPER called without request [ 203.866058] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.866087] binder: undelivered TRANSACTION_ERROR: 29190 [ 203.866113] binder: send failed reply for transaction 552, target dead [ 203.902556] binder: 14846:14851 unknown command 1078944529 [ 203.902565] binder: 14846:14851 ioctl c0306201 20000180 returned -22 [ 203.904217] binder: 14846:14851 ERROR: BC_REGISTER_LOOPER called without request [ 203.905500] binder_alloc: 14849: binder_alloc_buf, no vma [ 203.905515] binder: 14846:14851 transaction failed 29189/-3, size 0-0 line 3136 [ 203.905522] binder: send failed reply for transaction 558 to 14849:14853 [ 203.913635] binder: BINDER_SET_CONTEXT_MGR already set [ 203.913643] binder: 14856:14860 ioctl 40046207 0 returned -16 [ 203.913755] binder: 14856:14860 unknown command 1078944529 [ 203.913761] binder: 14856:14860 ioctl c0306201 20000180 returned -22 [ 203.913892] binder: 14856:14860 ERROR: BC_REGISTER_LOOPER called without request [ 203.924418] binder: BINDER_SET_CONTEXT_MGR already set [ 203.924426] binder: 14857:14861 ioctl 40046207 0 returned -16 [ 203.925009] binder: 14857:14861 ERROR: BC_REGISTER_LOOPER called without request [ 203.925075] binder: release 14857:14861 transaction 562 out, still active [ 203.925079] binder: undelivered TRANSACTION_COMPLETE [ 203.925413] binder: 14857:14861 got reply transaction with no transaction stack [ 203.925420] binder: 14857:14861 transaction failed 29201/-71, size 0-0 line 2921 [ 203.928386] binder: undelivered TRANSACTION_ERROR: 29190 [ 203.928411] binder: send failed reply for transaction 562, target dead [ 203.946163] binder: undelivered TRANSACTION_COMPLETE [ 203.946170] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.949798] binder: 14857:14861 got transaction to context manager from process owning it [ 203.949807] binder: 14857:14861 transaction failed 29201/-22, size 0-0 line 3004 [ 203.958600] binder: 14857:14861 ERROR: BC_REGISTER_LOOPER called without request [ 203.966750] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.966778] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.172293] loop3: partition table beyond EOD, truncated [ 204.177858] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 10:17:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000079c0)={{{@in6=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000007ac0)=0xe8) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) 10:17:06 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000079c0)={{{@in6=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000007ac0)=0xe8) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) 10:17:06 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_getattr(r2, &(0x7f0000000040), 0x30, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) getpid() [ 204.272052] Dev loop3: unable to read RDB block 3 [ 204.277016] loop3: unable to read partition table [ 204.282164] loop3: partition table beyond EOD, truncated [ 204.287808] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 204.312744] binder: 14878:14881 ERROR: BC_REGISTER_LOOPER called without request [ 204.320968] binder: release 14878:14881 transaction 567 out, still active [ 204.329910] binder: undelivered TRANSACTION_COMPLETE [ 204.337275] binder: 14878:14881 transaction failed 29189/0, size 0-0 line 2945 [ 204.371491] binder: send failed reply for transaction 567, target dead [ 204.408481] binder_alloc: binder_alloc_mmap_handler: 14878 20001000-20004000 already mapped failed -16 [ 204.422248] binder: release 14879:14882 transaction 569 out, still active [ 204.429367] binder: BINDER_SET_CONTEXT_MGR already set [ 204.430635] binder: unexpected work type, 4, not freed [ 204.430638] binder: undelivered TRANSACTION_COMPLETE [ 204.462364] binder: 14878:14893 ERROR: BC_REGISTER_LOOPER called without request [ 204.491794] binder_alloc: 14878: binder_alloc_buf, no vma [ 204.497432] binder: undelivered TRANSACTION_ERROR: 29190 [ 204.497468] binder: send failed reply for transaction 569, target dead [ 204.503776] binder: 14878:14881 ioctl 40046207 0 returned -16 [ 204.517209] binder: 14878:14890 transaction failed 29189/-3, size 0-0 line 3136 [ 204.525074] binder: undelivered TRANSACTION_ERROR: 29189 10:17:07 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) close(r0) 10:17:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) 10:17:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:07 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4010, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0xa, 0x0, &(0x7f0000000040)="2706a689ba03da6b9546"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000140)) 10:17:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) [ 204.703129] binder: 14856:14910 got reply transaction with no transaction stack [ 204.711042] binder: 14856:14910 transaction failed 29201/-71, size 0-0 line 2921 [ 204.768085] binder_alloc: 14902: binder_alloc_buf, no vma [ 204.776890] binder_alloc: 14902: binder_alloc_buf, no vma [ 204.783304] binder: 14901:14906 transaction failed 29189/-3, size 24-8 line 3136 [ 204.791209] binder: 14902:14907 transaction failed 29189/-3, size 0-0 line 3136 [ 204.797897] binder: 14902:14907 ERROR: BC_REGISTER_LOOPER called without request 10:17:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ustat(0x7ff, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634f40"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000079c0)={{{@in6=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000007ac0)=0xe8) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) 10:17:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) 10:17:07 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/170) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000040)=ANY=[]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), 0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) write$selinux_create(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd', 0x20}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) socket(0x19, 0x800, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000029c0)={{{@in=@multicast2=0xe0000002, @in=@multicast2=0xe0000002, 0x0, 0x4, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x89}, {0xa6, 0x5, 0x5, 0x10000, 0x8000, 0x7, 0x0, 0x8001}, {0xc000000000000, 0x6, 0x7, 0x7}, 0x0, 0x6e6bb6, 0x2, 0x0, 0x0, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d5}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x8e91}}, 0xe8) 10:17:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 204.840388] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.862491] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.862844] binder: BINDER_SET_CONTEXT_MGR already set 10:17:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) shutdown(0xffffffffffffffff, 0x0) 10:17:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/170) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000040)=ANY=[]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), 0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) write$selinux_create(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd', 0x20}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) socket(0x19, 0x800, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000029c0)={{{@in=@multicast2=0xe0000002, @in=@multicast2=0xe0000002, 0x0, 0x4, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x89}, {0xa6, 0x5, 0x5, 0x10000, 0x8000, 0x7, 0x0, 0x8001}, {0xc000000000000, 0x6, 0x7, 0x7}, 0x0, 0x6e6bb6, 0x2, 0x0, 0x0, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d5}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x8e91}}, 0xe8) [ 204.862851] binder: 14920:14924 ioctl 40046207 0 returned -16 [ 204.862969] binder: 14920:14924 unknown command 1078944529 [ 204.862976] binder: 14920:14924 ioctl c0306201 20000180 returned -22 10:17:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 204.863340] binder: 14920:14924 ERROR: BC_REGISTER_LOOPER called without request [ 204.958495] binder_alloc: 14902: binder_alloc_buf, no vma [ 204.958524] binder: 14931:14934 transaction failed 29189/-3, size 24-8 line 3136 [ 205.003234] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.310998] binder_alloc: 14902: binder_alloc_buf, no vma [ 205.324469] binder: 14943:14945 transaction failed 29189/-3, size 24-8 line 3136 [ 205.381950] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.472596] binder: 14902:14949 got reply transaction with no transaction stack [ 205.480319] binder: 14902:14949 transaction failed 29201/-71, size 0-0 line 2921 10:17:07 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) tkill(r3, 0x1004000000016) close(r0) 10:17:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x80000) 10:17:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000280)={0x5, 0x1, 'client0\x00', 0x4, "55090f942fd661b0", "60a08f15760938a379d3d9fbf628c0ce138d0361b2845ae438c0950d066d5d4c", 0x5, 0xffffffffffff3300}) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 205.605219] binder: BINDER_SET_CONTEXT_MGR already set [ 205.610847] binder: 14902:14949 ioctl 40046207 0 returned -16 [ 205.636566] binder: 14902:14962 ERROR: BC_REGISTER_LOOPER called without request [ 205.645070] binder_alloc: 14902: binder_alloc_buf, no vma [ 205.650780] binder_alloc: 14902: binder_alloc_buf, no vma [ 205.650788] binder: 14954:14961 transaction failed 29189/-3, size 24-8 line 3136 [ 205.656596] binder: 14902:14968 got reply transaction with no transaction stack [ 205.656604] binder: 14902:14968 transaction failed 29201/-71, size 0-0 line 2921 [ 205.659459] binder: 14920:14967 got reply transaction with no transaction stack [ 205.659467] binder: 14920:14967 transaction failed 29201/-71, size 0-0 line 2921 [ 205.699368] binder: 14902:14949 transaction failed 29189/-3, size 0-0 line 3136 [ 205.711911] binder: undelivered TRANSACTION_ERROR: 29189 10:17:08 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:17:08 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) lseek(r0, 0x400000000000000, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) truncate(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 10:17:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) 10:17:08 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x1, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001740)=ANY=[]) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x6fa1) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/213) 10:17:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ustat(0x7ff, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634f40"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 205.765014] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.774123] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.792110] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.803847] binder: BINDER_SET_CONTEXT_MGR already set 10:17:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 205.803857] binder: 14976:14982 ioctl 40046207 0 returned -16 10:17:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) socket$inet(0x2, 0x4000000000000001, 0x0) 10:17:08 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) lseek(r0, 0x400000000000000, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) truncate(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 10:17:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) [ 205.805011] binder_alloc: 14902: binder_alloc_buf, no vma [ 205.805029] binder: 14976:14982 transaction failed 29189/-3, size 0-0 line 3136 10:17:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 205.805123] binder: 14976:14982 ERROR: BC_REGISTER_LOOPER called without request [ 205.819242] binder_alloc: 14902: binder_alloc_buf, no vma [ 205.819261] binder: 14974:14984 transaction failed 29189/-3, size 24-8 line 3136 [ 205.859850] binder: BINDER_SET_CONTEXT_MGR already set [ 205.859861] binder: 14986:14991 ioctl 40046207 0 returned -16 [ 205.860164] binder: 14986:14991 unknown command 1078944529 [ 205.860172] binder: 14986:14991 ioctl c0306201 20000180 returned -22 [ 205.860371] binder: 14986:14991 ERROR: BC_REGISTER_LOOPER called without request [ 205.885270] binder_alloc: 14902: binder_alloc_buf, no vma [ 205.885288] binder: 14993:15001 transaction failed 29189/-3, size 24-8 line 3136 [ 205.956363] binder_alloc: 14902: binder_alloc_buf, no vma [ 205.956387] binder: 15007:15011 transaction failed 29189/-3, size 24-8 line 3136 [ 206.048715] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.054278] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.059811] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.065465] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.071012] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.603103] binder: 14976:15020 got reply transaction with no transaction stack [ 206.610626] binder: 14976:15020 transaction failed 29201/-71, size 0-0 line 2921 [ 206.630053] binder: 14986:15021 got reply transaction with no transaction stack [ 206.637642] binder: 14986:15021 transaction failed 29201/-71, size 0-0 line 2921 [ 206.724184] binder_alloc: binder_alloc_mmap_handler: 14976 20001000-20004000 already mapped failed -16 [ 206.737129] binder_alloc: 14976: binder_alloc_buf, no vma [ 206.742762] binder: 14976:15022 transaction failed 29189/-3, size 0-0 line 3136 [ 206.753567] binder: 14976:15020 ERROR: BC_REGISTER_LOOPER called without request [ 206.761380] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.766893] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.776799] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.786890] binder: undelivered TRANSACTION_ERROR: 29189 10:17:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) 10:17:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0xffffffff80000001}) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000000)=""/191, 0xbf}, {&(0x7f0000002200)=""/153, 0x99}, {&(0x7f00000022c0)=""/227, 0xe3}, {&(0x7f00000000c0)}, {&(0x7f0000000140)=""/97, 0x61}, {&(0x7f00000023c0)=""/168, 0xa8}], 0x8, 0x0) 10:17:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x3) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:10 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x1, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001740)=ANY=[]) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x6fa1) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/213) 10:17:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:10 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) tkill(r3, 0x1004000000016) close(r0) 10:17:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x1, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001740)=ANY=[]) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x6fa1) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/213) 10:17:10 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x1, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001740)=ANY=[]) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x6fa1) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/213) 10:17:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x5, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) 10:17:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 208.590020] binder: 15025:15034 ERROR: BC_REGISTER_LOOPER called without request [ 208.600548] binder: release 15031:15038 transaction 594 out, still active [ 208.611277] binder: release 15025:15034 transaction 593 out, still active [ 208.619938] binder: unexpected work type, 4, not freed [ 208.657801] binder: undelivered TRANSACTION_COMPLETE 10:17:11 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x202, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x0, 0x155b5dee, 0x6}, {0x7, 0x8, 0x10001, 0xfef}]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="0000007178863464c4285d0000000000"], 0x0, 0x0, &(0x7f0000000480)}) 10:17:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) 10:17:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 208.660875] binder: 15025:15034 transaction failed 29189/0, size 0-0 line 2945 10:17:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='schedstat\x00') ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000500)=""/253) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) fcntl$dupfd(r2, 0x406, r1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1) r3 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000300)=0x0, &(0x7f0000000340)) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000380)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20, 0x8000}, 0x20000000) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001e00)=ANY=[@ANYBLOB="45f985e93503954b34d416fb91fba99aca4e70c2e7205f980da473b4629ca8da01166b051c7d4ca242ef2538"], 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) [ 208.660881] binder: send failed reply for transaction 593, target dead 10:17:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) [ 208.667712] binder_alloc: binder_alloc_mmap_handler: 15025 20001000-20004000 already mapped failed -16 [ 208.668990] binder: BINDER_SET_CONTEXT_MGR already set [ 208.668998] binder: 15025:15034 ioctl 40046207 0 returned -16 [ 208.670091] binder: 15025:15058 ERROR: BC_REGISTER_LOOPER called without request [ 208.670187] binder_alloc: 15025: binder_alloc_buf, no vma [ 208.670204] binder: 15025:15034 transaction failed 29189/-3, size 0-0 line 3136 10:17:11 executing program 6: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2800) r1 = memfd_create(&(0x7f0000000500)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$mice(&(0x7f0000000840)='/dev/input/mice\x00', 0x0, 0x400) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) r3 = getgid() timer_create(0x1, &(0x7f00000007c0)={0x0, 0x1a, 0x0, @thr={&(0x7f0000000680)="eb3177458cb9de905f71de1d9bb80921cc0055785b7fc4e19a4eda7983d386ec6d62473a49879bd22502b8f486774b173f92887d4748d38890f9ca872609b2c43346776a4f67d519cdb17e9a8a120412b8aef0bfb4347630e3d0a38b4fe9afe49b62b49798fbf159dde546e19e41a1b397c5192c78d01fcbfcd2fde0c06fb51119a9cb773ab9cb85c9f047", &(0x7f0000000740)="bd7b08c708dbf209732086480935d5db616a612404ab7b42012f4701b4121b514fa8299b72cac891c749e1ade4fbcfbf666ab8f29443e62df4a2c1b551a9d1071edd1d5484780e83f799541331e6f707dbd7fefb549fa5269e90a5a844e536a769f5f00944ff5b2735cb07b3e6572e9bdb77"}}, &(0x7f0000000800)=0x0) ioctl$int_out(r1, 0x0, &(0x7f00000008c0)) timer_getoverrun(r4) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000640)={0xff, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x20, 0x10}, 0x2c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000880)=0x3, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @random="f4c9846eeef8"}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@rand_addr}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x440c41a1e8bef082) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="e4f366dfe3c78505aaa4745b24c947", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3ddf5a604c0a1f2b4e52b39b091824d753d7194dc445c309b945ba5c49bc1ef1af45812c3c4385557606cda2b08ed11735a463fd80dbcbd3d6b4f7ef7df788f54af426ac69d6c227fb55e72adc23c5f01fc05c6eda23e0e7abc305a355ee891a693b2c9033fd1a9328f7e0ffe47c4f96635ac0da12ac424f39e8c7add7af41b9535d2b6bbf471c1eeb513cf568", @ANYRESHEX=r1, @ANYBLOB=',d_ltgid=', @ANYRESHEX=r3, @ANYBLOB=',noextend,debug=0x0000000000000002,nodevmap,privport,version=9p2000,dfltuid=', @ANYRESHEX=r5, @ANYBLOB="2c64656275673d30783030303030301a3030303030303030362c616363652a343d757365722c63616368653d6c6f6f7365dccb9ac9f89030ff5d5369292c00"]) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000)) [ 208.671258] binder: 15025:15058 got reply transaction with no transaction stack [ 208.671265] binder: 15025:15058 transaction failed 29201/-71, size 0-0 line 2921 [ 208.671319] binder: undelivered TRANSACTION_ERROR: 29189 [ 208.680060] binder_alloc: 15025: binder_alloc_buf, no vma [ 208.680075] binder: 15056:15059 transaction failed 29189/-3, size 24-8 line 3136 [ 208.773156] binder: BINDER_SET_CONTEXT_MGR already set [ 208.773166] binder: 15064:15071 ioctl 40046207 0 returned -16 [ 208.773310] binder_alloc: 15025: binder_alloc_buf, no vma [ 208.773328] binder: 15064:15071 transaction failed 29189/-3, size 0-0 line 3136 [ 208.773394] binder: 15064:15071 ERROR: BC_REGISTER_LOOPER called without request [ 208.790656] binder_alloc: 15025: binder_alloc_buf, no vma [ 208.790676] binder: 15070:15073 transaction failed 29189/-3, size 24-8 line 3136 [ 208.859750] binder_alloc: 15025: binder_alloc_buf, no vma [ 208.859767] binder: 15084:15085 transaction failed 29189/-3, size 24-8 line 3136 [ 209.098082] binder: undelivered TRANSACTION_COMPLETE [ 209.106537] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.112384] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.117864] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.123388] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.133467] binder: undelivered TRANSACTION_ERROR: 29190 [ 209.134075] binder: 15098:15099 transaction failed 29189/-22, size 24-8 line 3013 [ 209.149382] binder: send failed reply for transaction 594, target dead [ 209.156226] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.539098] binder: 15064:15106 got reply transaction with no transaction stack [ 209.546601] binder: 15064:15106 transaction failed 29201/-71, size 0-0 line 2921 [ 209.668438] binder: 15064:15106 ERROR: BC_REGISTER_LOOPER called without request [ 209.668443] binder: release 15064:15107 transaction 606 out, still active [ 209.668450] binder: undelivered TRANSACTION_COMPLETE [ 209.691532] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.697086] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.705550] binder: release 15064:15106 transaction 606 in, still active [ 209.717589] binder: send failed reply for transaction 606, target dead 10:17:14 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) tkill(r3, 0x1004000000016) close(r0) 10:17:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) 10:17:14 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x244202, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x0, 0x9}) ioctl$TIOCSBRK(r0, 0x5427) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/156, 0x9c}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001240)=""/224, 0xe0}, {&(0x7f0000001340)=""/16, 0x10}, {&(0x7f0000001380)=""/17, 0x11}], 0x6) ftruncate(r1, 0x2) r2 = memfd_create(&(0x7f00000000c0)='security{)&)eth0self\x00', 0x0) fallocate(r2, 0x3, 0x0, 0x5d6) read(r1, &(0x7f0000000100)=""/4096, 0x1000) 10:17:14 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x241, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00a54cc9de68635e54f2425508"], 0xd) write$eventfd(r0, &(0x7f0000000040)=0x100000001, 0x107) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 10:17:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x7, &(0x7f0000000140)={0x0, 0x29, 0x6, @thr={&(0x7f0000000040)="d6f4ec2d241cca67d7993a44d04b2cc36e5857220ad6a7264e8767be7edc6758612acb4a4fded40e4a12558b5fdee83d9ce44a0f9403b74477cbacd0c03a2eeaabdf7b35fb15ddf0f4a93bedda6232fab36d1bfcb326c732eff8a410ed0116f1ec0f69e64483280c50ffe1ebac0cddba08033e080b1e3863e2bc66c0f7f26da06ba846818864c2f2cc16ce7ff200f7a25d8b2374dcda6c41557d391f0b4e889b0eace924a0e327bf38830b60a81f9e5819b4fa", &(0x7f0000000100)="9a924a506f2508d111"}}, &(0x7f0000000180)=0x0) timer_delete(r1) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0xb8}, 0x1}, 0x0) 10:17:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) [ 211.601108] binder: 15110:15114 ERROR: BC_REGISTER_LOOPER called without request [ 211.612665] binder: release 15111:15117 transaction 610 out, still active [ 211.619481] keychord: unsupported version 62036 [ 211.625274] keychord: unsupported version 62036 [ 211.626734] binder: unexpected work type, 4, not freed [ 211.626737] binder: undelivered TRANSACTION_COMPLETE [ 211.629119] binder: release 15110:15114 transaction 609 out, still active [ 211.629122] binder: undelivered TRANSACTION_COMPLETE [ 211.629193] binder: 15110:15114 transaction failed 29189/0, size 0-0 line 2945 [ 211.629199] binder: send failed reply for transaction 609, target dead [ 211.632016] binder_alloc: binder_alloc_mmap_handler: 15110 20001000-20004000 already mapped failed -16 [ 211.633210] binder: BINDER_SET_CONTEXT_MGR already set [ 211.633217] binder: 15110:15114 ioctl 40046207 0 returned -16 [ 211.633262] binder_alloc: 15110: binder_alloc_buf, no vma [ 211.633279] binder: 15110:15130 transaction failed 29189/-3, size 0-0 line 3136 10:17:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4000) write$sndseq(r2, &(0x7f0000000040)=[{0x3, 0x3, 0x3f, 0xc2, @time={0x0, 0x989680}, {0xfffffffffffffffe, 0x2}, {0x8, 0x401}, @result={0x9, 0x4}}], 0x30) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) 10:17:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x3, &(0x7f0000000400)=ANY=[]) mlock(&(0x7f0000f48000/0x1000)=nil, 0x1000) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x400, 0x401, 0x45, 0x1}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 10:17:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 211.634497] binder: 15110:15130 ERROR: BC_REGISTER_LOOPER called without request [ 211.635689] binder: 15110:15130 got reply transaction with no transaction stack [ 211.635696] binder: 15110:15130 transaction failed 29201/-71, size 0-0 line 2921 [ 211.637045] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.637064] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.637081] binder: undelivered TRANSACTION_ERROR: 29190 [ 211.637106] binder: send failed reply for transaction 610, target dead 10:17:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000001dc0)='\x00\x00\x00\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) [ 211.784427] binder: 15136:15141 ERROR: BC_REGISTER_LOOPER called without request [ 211.792971] binder: release 15140:15143 transaction 618 out, still active [ 211.793232] binder: release 15136:15141 transaction 617 out, still active [ 211.793236] binder: undelivered TRANSACTION_COMPLETE [ 211.793300] binder: 15136:15141 transaction failed 29189/0, size 0-0 line 2945 [ 211.793305] binder: send failed reply for transaction 617, target dead 10:17:14 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) 10:17:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) [ 211.793708] binder_alloc: binder_alloc_mmap_handler: 15136 20001000-20004000 already mapped failed -16 [ 211.799943] binder: BINDER_SET_CONTEXT_MGR already set [ 211.799950] binder: 15136:15141 ioctl 40046207 0 returned -16 [ 211.800004] binder_alloc: 15136: binder_alloc_buf, no vma [ 211.800026] binder: 15136:15141 transaction failed 29189/-3, size 0-0 line 3136 [ 211.800179] binder: 15136:15141 ERROR: BC_REGISTER_LOOPER called without request [ 211.802745] binder: 15136:15144 got reply transaction with no transaction stack [ 211.802753] binder: 15136:15144 transaction failed 29201/-71, size 0-0 line 2921 10:17:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 211.824858] FAT-fs (loop6): bogus number of reserved sectors [ 211.824863] FAT-fs (loop6): Can't find a valid FAT filesystem [ 211.910738] binder: unexpected work type, 4, not freed [ 211.916971] binder: undelivered TRANSACTION_COMPLETE [ 211.928693] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.936128] binder_alloc: 15136: binder_alloc_buf, no vma [ 211.936152] binder: 15160:15161 transaction failed 29189/-3, size 24-8 line 3136 [ 211.955221] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.960746] binder: undelivered TRANSACTION_ERROR: 29190 [ 211.973356] binder: send failed reply for transaction 618, target dead [ 211.984882] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.095909] FAT-fs (loop6): bogus number of reserved sectors [ 212.101870] FAT-fs (loop6): Can't find a valid FAT filesystem 10:17:17 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) 10:17:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3f, 0x0) r1 = memfd_create(&(0x7f00000004c0)='\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e200b3c"], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xf4, 0x0, &(0x7f0000000480)}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000040)=""/173, 0xad}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000300)=""/44, 0x2c}], 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000014c0)={0x0, 0x0}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001500)=0x0) setpgid(r4, r5) 10:17:17 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x6c, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x28, 0x30, &(0x7f0000000140)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x4, 0x7}], &(0x7f0000000180)=[0x0, 0x28, 0x40, 0x48, 0x78, 0x38]}}, @clear_death={0x400c630f, 0x4, 0x1}, @release={0x40046306, 0x2}], 0xe, 0x0, &(0x7f0000000280)="82dc8e7a5a5647a81be9d6e9fbe3"}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000005c0)) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) sendfile(r2, r0, &(0x7f0000000300), 0x7) 10:17:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:17 executing program 6: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fchdir(r0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x8001, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x8) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x10001}, 0x8) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$setsig(r3, 0xa, 0x0) mlockall(0x5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r5, 0x305, 0x70bd28, 0xffffffff892fcad4, {0x1}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x30}, 0x1}, 0x20004841) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x7, 0x3f, 0x5, 0x1}) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x34d) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380)={0x7, 0x0, 0x551f}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x200, 0x0, 0x0, 0x5}) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 10:17:17 executing program 5: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x100000001) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x4) 10:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4}, 0x1}, 0x0) [ 214.622994] binder: 15183:15188 unknown command 1007362078 [ 214.631162] binder: 15183:15188 ioctl c0306201 20000240 returned -22 [ 214.652499] binder: release 15183:15188 transaction 626 out, still active [ 214.659681] binder: undelivered TRANSACTION_COMPLETE 10:17:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 10:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4}, 0x1}, 0x0) [ 214.669566] binder: 15183:15188 got reply transaction with no transaction stack [ 214.687140] binder: 15183:15188 transaction failed 29201/-71, size 35184380477440-35184409837568 line 2921 10:17:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x1, 0x3, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}]}) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e0000001000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4}, 0x1}, 0x0) [ 214.716695] binder_alloc: binder_alloc_mmap_handler: 15183 20001000-20004000 already mapped failed -16 10:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e00000010000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4}, 0x1}, 0x0) 10:17:17 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x6c, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x28, 0x30, &(0x7f0000000140)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x4, 0x7}], &(0x7f0000000180)=[0x0, 0x28, 0x40, 0x48, 0x78, 0x38]}}, @clear_death={0x400c630f, 0x4, 0x1}, @release={0x40046306, 0x2}], 0xe, 0x0, &(0x7f0000000280)="82dc8e7a5a5647a81be9d6e9fbe3"}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000005c0)) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) sendfile(r2, r0, &(0x7f0000000300), 0x7) [ 214.737894] binder: BINDER_SET_CONTEXT_MGR already set [ 214.737904] binder: 15183:15188 ioctl 40046207 0 returned -16 [ 214.804032] binder_alloc: 15183: binder_alloc_buf, no vma [ 214.809631] binder: 15183:15225 transaction failed 29189/-3, size 0-0 line 3136 [ 214.821920] binder: 15183:15188 unknown command 1007362078 [ 214.821931] binder: 15183:15188 ioctl c0306201 20000240 returned -22 [ 214.836801] binder: 15183:15188 got reply transaction with no transaction stack [ 214.836811] binder: 15183:15188 transaction failed 29201/-71, size 35184380477440-35184409837568 line 2921 [ 214.891415] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.905112] binder: send failed reply for transaction 626, target dead 10:17:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 10:17:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x100) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x400) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) 10:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4}, 0x1}, 0x0) 10:17:20 executing program 0: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000200)=@access={'system_u:object_r:fsadm_exec_t:s0', 0x20, '/sbin/dhclient', 0x20}, 0x34) 10:17:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$sndseq(r1, &(0x7f0000000040)=[{0x1, 0x81, 0x2, 0x0, @time, {0x0, 0x8}, {0x1, 0x81}, @quote={{}, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, @time, {0x9, 0x401}, {0x200, 0x9}, @note={0x0, 0x3, 0x7, 0x4bc, 0x5}}}}, {0x7f, 0x1d, 0x2cd, 0x7e, @time, {0x5, 0x2}, {0x6, 0x3dc5}, @time=@time={0x0, 0x1c9c380}}], 0x60) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x28001, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl(r0, 0xfff, &(0x7f0000000000)="fe8a8ff8867d97269f582a19bb4696dd1d8e101a566e7442678d185e81823e4b908eab03fe779407cc0c24817aeb8af34014a948515b507213699070db672027813daeb5e1") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000300)=""/105) 10:17:20 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:20 executing program 6: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fchdir(r0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x8001, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x8) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x10001}, 0x8) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$setsig(r3, 0xa, 0x0) mlockall(0x5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r5, 0x305, 0x70bd28, 0xffffffff892fcad4, {0x1}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x30}, 0x1}, 0x20004841) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x7, 0x3f, 0x5, 0x1}) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x34d) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380)={0x7, 0x0, 0x551f}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x200, 0x0, 0x0, 0x5}) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 10:17:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) read(r0, &(0x7f00000001c0)=""/65, 0x41) timer_create(0x5, &(0x7f0000000140)={0x0, 0x31, 0x4, @tid=r1}, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4}, 0x1}, 0x0) 10:17:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000002c0)='nr0\x00') r1 = socket$inet6(0xa, 0x3, 0x3a) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='ip6gre0\x00') setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) ioctl(r0, 0xe74, &(0x7f0000000300)="6abec27b3efc5dc4502adee71fe8f0866a37ae7af7c8faa16fbba826cecf86191bbb9c3df97a561a14cbdd9285077a9b0f9d43420a300634b248c6f5e9d58d3fbc58cdb57fc6a2572b6c5f") ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@ipv4={[], [0xff, 0xff]}, 0x1e, r3}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x9, 0x3}, 0xfe09) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000380)=""/103) [ 217.664172] binder: 15252:15260 ioctl fff 20000000 returned -22 [ 217.679061] binder: 15252:15260 ERROR: BC_REGISTER_LOOPER called without request 10:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4}, 0x1}, 0x0) 10:17:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 10:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 217.710013] binder: release 15252:15260 transaction 631 out, still active [ 217.730925] binder: undelivered TRANSACTION_COMPLETE 10:17:20 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000380), &(0x7f0000003880)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x4, 0x4) membarrier(0x0, 0x0) dup2(r2, r1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0xa18, 0x9, 0x6, 0x7}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x7) 10:17:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0xfffffffffffe, 0x100000000) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 10:17:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x649, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 217.755825] binder: 15252:15260 transaction failed 29189/0, size 0-0 line 2945 [ 217.763981] binder: send failed reply for transaction 631, target dead [ 217.793261] binder: BINDER_SET_CONTEXT_MGR already set 10:17:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0], 0x2}, 0x1}, 0x0) 10:17:20 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000380), &(0x7f0000003880)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x4, 0x4) membarrier(0x0, 0x0) dup2(r2, r1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0xa18, 0x9, 0x6, 0x7}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x7) 10:17:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x82000064) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 217.817273] binder: 15252:15293 ioctl 40046207 0 returned -16 [ 217.829946] binder_alloc: 15252: binder_alloc_buf, no vma [ 217.829969] binder: 15252:15260 transaction failed 29189/-3, size 0-0 line 3136 [ 217.835639] binder: 15252:15304 ioctl fff 20000000 returned -22 [ 217.839018] binder: 15252:15260 ERROR: BC_REGISTER_LOOPER called without request [ 217.847993] binder: 15252:15260 got reply transaction with no transaction stack [ 217.848002] binder: 15252:15260 transaction failed 29201/-71, size 0-0 line 2921 [ 217.849750] binder_alloc: 15252: binder_alloc_buf, no vma [ 217.849767] binder: 15302:15308 transaction failed 29189/-3, size 0-8 line 3136 [ 217.855273] binder: undelivered TRANSACTION_ERROR: 29189 10:17:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x4}], 0x0, 0x0, &(0x7f0000000480)}) [ 217.855294] binder: undelivered TRANSACTION_ERROR: 29190 [ 217.872202] binder: undelivered TRANSACTION_ERROR: 29189 [ 217.989600] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.012666] binder: 15325:15326 ERROR: BC_REGISTER_LOOPER called without request [ 218.020644] binder: release 15325:15326 transaction 637 out, still active [ 218.028174] binder: undelivered TRANSACTION_COMPLETE [ 218.033821] binder: 15325:15326 Release 1 refcount change on invalid ref 4 ret -22 [ 218.042988] binder_alloc: binder_alloc_mmap_handler: 15325 20001000-20004000 already mapped failed -16 [ 218.053946] binder: BINDER_SET_CONTEXT_MGR already set [ 218.059345] binder: 15325:15326 ioctl 40046207 0 returned -16 [ 218.062847] binder_alloc: 15325: binder_alloc_buf, no vma [ 218.062865] binder: 15325:15327 transaction failed 29189/-3, size 0-0 line 3136 [ 218.066466] binder: 15325:15327 ERROR: BC_REGISTER_LOOPER called without request [ 218.070108] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.070134] binder: release 15325:15326 transaction 637 in, still active [ 218.070139] binder: send failed reply for transaction 637, target dead 10:17:23 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() memfd_create(&(0x7f0000000040)='#\x00', 0x1) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}, 0x1}, 0x0) 10:17:23 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000380), &(0x7f0000003880)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x4, 0x4) membarrier(0x0, 0x0) dup2(r2, r1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0xa18, 0x9, 0x6, 0x7}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x7) 10:17:23 executing program 0: unshare(0x20020000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000440)="72416d667300a7e9f5b6f32ff4859361c10251f6ee229130c43a59208f467321aa6d77ac782ca06c151599b5a3b2ff6532892c9006dc710b0b582ae976a3f4c0bf4dcd8b3ba1d796194c7039818bf46268c71af50d286b1d860a7322554fee100929151c8f34cb09d372d67f5349de186c70629fc96303dd3070efe916f82f19407e631905f861000066bc1b9cbbd4e9f596b375", 0x1000, &(0x7f0000000140)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="160000000000000000000000000000000000000000001e1df073d1cefbb59e919ac8f6e87e8a88523d56d9351b738704c7ed68f199cc48746a3fed7c9b2aa27d830787326800000000000000000000000000000000"], 0x16) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000002c0)={0x40, 0x2, 'client0\x00', 0x3, "47c7dc078d876f0e", "d9066883363226ea5bb6f039c0faee8564c7a602ded0d5cbb4cc45b59f001672", 0x17d, 0x2}) r1 = socket$inet6(0xa, 0x805, 0x400010ea) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f00000001c0)='./file0\x00') 10:17:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x5, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) readahead(r0, 0x0, 0x800000000) 10:17:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f0000000300)=[@exit_looper={0x630d}, @acquire={0x40046305, 0x4}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000000), &(0x7f0000000040)=[0x0, 0x28, 0x18, 0x38]}, 0x353d}}, @register_looper={0x630b}], 0xf, 0x0, &(0x7f00000000c0)="3e9fb6f6b9bbec01662e553cb3c65a"}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rfkill\x00', 0x181000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000a80)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000ac0)={r3}) r4 = getgid() syz_mount_image$iso9660(&(0x7f00000008c0)='iso9660\x00', &(0x7f0000000900)='./file0/file0\x00', 0x8, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000940)="89018e8e8f8f72bba35004604172dde5e68b22b24980161b298e7485525c6797f4831639afe0ecff6027e50e8d4d9487fc0881383d065bde7e83bac373fcd8765fe079ae487aba9b58e514b3d15382a4817015d59ab6e340031b7dd9f16ef710aaee0d155ce7e521ce1cdc0881ea3fdac533c5c34e684b2ce2", 0x79, 0x4}], 0x43002, &(0x7f0000000a00)={[{@map_off='map=off', 0x2c}, {@norock='norock', 0x2c}, {@nojoliet='nojoliet', 0x2c}, {@map_normal='map=normal', 0x2c}, {@block={'block', 0x3d, 0x400}, 0x2c}, {@hide='hide', 0x2c}, {@nojoliet='nojoliet', 0x2c}, {@gid={'gid', 0x3d, r4}, 0x2c}]}) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000840), &(0x7f0000000880)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') execveat(r5, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000440)='-securitysecurity*+proccpuset\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='vboxnet1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='/dev/binder#\x00', &(0x7f0000000580)='/dev/binder#\x00', &(0x7f00000005c0)='em0\x00', &(0x7f0000000600)='*\x00', &(0x7f0000000640)='/dev/binder#\x00', &(0x7f0000000680)='wlan0systemvmnet1trusted\x00', &(0x7f00000006c0)='/dev/binder#\x00', &(0x7f0000000700)='/dev/binder#\x00', &(0x7f0000000740)='cgrouptrusted\x00'], 0x1400) 10:17:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a00000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:23 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = getpgid(0xffffffffffffffff) sched_getattr(r2, &(0x7f00000000c0), 0x30, 0x0) recvfrom$inet(r0, &(0x7f0000000180)=""/99, 0x63, 0x0, &(0x7f0000000300)={0x2}, 0x10) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000003c0)=0x5, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000111, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000004c0)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000500)=0x14) sendto(r0, &(0x7f0000000400)="23469167c10fbf5d1e9407ac021ebe3e84cc8250bc730d03e9c534996a049ab397f24876f87edbadb33663f24fdeaf050decdd0a543716fd2898199fcc30f97cb6a7ca8099c90f5fd7ed917047ad29692538715a02df9d14f1a12d2b9f400eee778e0798a2fa8597528611b114d7f7091e898647dd8eb90f89572a5e82c8b2b954806c8fb60c6889d661b51dad02ce", 0x8f, 0x2000c040, &(0x7f0000000540)=@hci={0x1f, r4, 0x3}, 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x0, 0x31, 0x10000}) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140), 0x4) [ 220.656947] binder: 15333:15335 got transaction to context manager from process owning it [ 220.669958] binder: 15333:15335 transaction failed 29201/-22, size 0-0 line 3004 10:17:23 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x5d4b421d5a6399ec, 0x70bd2b, 0x25dfdbfb, "", [@mark={0xc, 0x15, {0x350759, 0x1f}}]}, 0x1c}, 0x1}, 0x50) r2 = fcntl$getown(r0, 0x9) get_robust_list(r2, &(0x7f0000000080)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000540)}, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)}}, &(0x7f0000000040)=0x18) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) 10:17:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 220.697234] binder: 15333:15335 ERROR: BC_REGISTER_LOOPER called without request [ 220.708980] binder: 15334:15346 transaction failed 29189/-22, size 0-8 line 3013 [ 220.728191] binder: undelivered TRANSACTION_ERROR: 29201 10:17:23 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = getpgid(0xffffffffffffffff) sched_getattr(r2, &(0x7f00000000c0), 0x30, 0x0) recvfrom$inet(r0, &(0x7f0000000180)=""/99, 0x63, 0x0, &(0x7f0000000300)={0x2}, 0x10) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000003c0)=0x5, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000111, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000004c0)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000500)=0x14) sendto(r0, &(0x7f0000000400)="23469167c10fbf5d1e9407ac021ebe3e84cc8250bc730d03e9c534996a049ab397f24876f87edbadb33663f24fdeaf050decdd0a543716fd2898199fcc30f97cb6a7ca8099c90f5fd7ed917047ad29692538715a02df9d14f1a12d2b9f400eee778e0798a2fa8597528611b114d7f7091e898647dd8eb90f89572a5e82c8b2b954806c8fb60c6889d661b51dad02ce", 0x8f, 0x2000c040, &(0x7f0000000540)=@hci={0x1f, r4, 0x3}, 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x0, 0x31, 0x10000}) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140), 0x4) 10:17:23 executing program 5: getgid() r0 = socket$inet6(0xa, 0x1008000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') syz_open_procfs(0x0, &(0x7f0000000100)='net/stat\x00') 10:17:23 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24ff00000301ffff00000000000000000000000008001500000000000800f5c24537ee7a080004001de4"], 0x24}, 0x1}, 0x0) 10:17:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 220.728269] binder: 15333:15335 Acquire 1 refcount change on invalid ref 4 ret -22 [ 220.728277] binder: 15333:15335 got transaction to invalid handle [ 220.728286] binder: 15333:15335 transaction failed 29201/-22, size 0-32 line 3013 [ 220.816162] binder: BINDER_SET_CONTEXT_MGR already set [ 220.823533] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.832100] binder_alloc: 15333: binder_alloc_buf, no vma [ 220.839864] binder: 15333:15376 transaction failed 29189/-3, size 0-0 line 3136 [ 220.847708] binder: 15333:15335 ioctl 40046207 0 returned -16 [ 220.850424] binder: 15333:15335 ERROR: BC_REGISTER_LOOPER called without request [ 220.857324] binder: 15333:15335 Acquire 1 refcount change on invalid ref 4 ret -22 [ 220.857333] binder: 15333:15335 got transaction to invalid handle [ 220.857341] binder: 15333:15335 transaction failed 29201/-22, size 0-32 line 3013 [ 220.893748] binder: 15333:15376 got reply transaction with no transaction stack [ 220.901280] binder: 15333:15376 transaction failed 29201/-71, size 0-0 line 2921 [ 220.911862] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.917379] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.922913] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.929652] binder: undelivered TRANSACTION_ERROR: 29201 10:17:26 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000100)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}}], 0x0, 0x0, &(0x7f0000000280)}) 10:17:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) 10:17:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x5, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80, 0x0) socketpair(0x11, 0x1, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xffffffffffffff7a, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="11634840"], 0xfffffffffffffedf, 0x0, &(0x7f0000000340)="0a50affc40065ec02f168c556f84cabd29331b0bd72de8cb4a6ca2f7d9bcb75e46c8487bb3eb66c2cf507c386792d6131d9ec357dbf25349e50ca55046eed24102788195e325f6515d785b197e38bcc33bad69fbc4eb594eab3c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x803, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FRA_SRC={0x14, 0x2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x48}, 0x1}, 0x0) 10:17:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x5, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:26 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000e00)='./file0//ile0\x00', &(0x7f0000000e40)='./file0/file0\x00') stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) getsockname(r1, &(0x7f0000000e80)=@sco, &(0x7f0000000f00)=0x80) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400", 0x22}], 0x1}, 0x0) getsockname(r2, &(0x7f0000000f40)=@pppol2tp, &(0x7f0000000fc0)=0x80) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x2000, 0x0) seccomp(0x1, 0x0, &(0x7f0000000980)={0x6, &(0x7f0000000940)=[{0x10001, 0x2, 0x0, 0x8000}, {0x10001, 0x6, 0x7ff, 0x9}, {0x4, 0x9, 0x8, 0x13c146b8}, {0x1, 0x8, 0x40, 0x1}, {0x7fffffff, 0x5, 0x4, 0xb3b}, {0x3, 0x5d97, 0x1, 0x1}]}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000680)='veth0_to_bond\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/155, 0x9b}, {&(0x7f0000000a40)=""/199, 0xc7}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/233, 0xe9}], 0x9, &(0x7f0000000340)=""/7, 0x7, 0xe0}, 0x2122) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) 10:17:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x5, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 223.683818] binder: 15395:15397 ERROR: BC_REGISTER_LOOPER called without request [ 223.694133] binder: 15395:15397 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 223.710757] binder: 15395:15397 got reply transaction with no transaction stack 10:17:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4100206}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="7000000096f232827556667b6e4876420dac4116971400ef480293fd8b293263203614bb9c674268d350e9f8f101361f32ddce1a406bbd939fc62d42ed7e84fa1d00fe44eaa74181d0fa37714b54c36ac3be791952a3eb9ba8fb188e023570470e014b1a587a", @ANYRES16=r3, @ANYBLOB="00002cbd7000fddbdf25070000005400020008000b000000000008000b0002000000080002004e23000008000900008000000800050008000000080002004e23000008000500030000000800080000010000080008007f000000080008000400000008000600fdffffff"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) set_thread_area(&(0x7f0000000500)={0x7f, 0x100000, 0x2000, 0x6049, 0xff, 0xceb6, 0x5, 0x3, 0x1, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f00000000c0)={'\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x1997b62df82dfc0b, 0x0) 10:17:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:26 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0xf806, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fallocate(0xffffffffffffffff, 0x0, 0x8000, 0x10000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x10010, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000006) [ 223.728585] binder: 15395:15397 transaction failed 29201/-71, size 0-0 line 2921 [ 223.744081] binder: 15398:15404 transaction failed 29189/-22, size 0-8 line 3013 [ 223.766864] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.775881] binder: 15426:15429 transaction failed 29189/-22, size 0-0 line 3013 [ 223.775935] binder: 15426:15429 ERROR: BC_REGISTER_LOOPER called without request [ 223.811820] binder: 15395:15445 ERROR: BC_REGISTER_LOOPER called without request [ 223.822270] binder: 15395:15397 got reply transaction with no transaction stack [ 223.822413] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.835392] binder: 15395:15397 transaction failed 29201/-71, size 0-0 line 2921 [ 223.842974] binder: undelivered TRANSACTION_ERROR: 29201 10:17:26 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(0x0, 0x1004000000016) close(r0) 10:17:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:26 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:26 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) dup(r0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) syz_open_procfs(r1, &(0x7f00000001c0)='net/netlink\x00') bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x80080) sendto$inet(r2, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f41388c", 0x12, 0x4004040, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x10000, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000580)="61f107fc86df6d0a88b16226936dffc673aa008e7697439b1ef42e419f11bf4abe5a3fb786f2a24d832d", 0x2a) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000380)='./file1\x00', 0x10001, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="e41d", 0x2, 0x800}, {&(0x7f0000000400)="c6b087821bfb34ea22ebf674b903f3d4d9ccd63a609c3ac2bec63ca10a4e246a05c206e7ada6dd12ad3662b4eed27544b61287e2acaf0f23e8977d05e566e5ea179eb897aade782e1361ecaba6dee40f15ed4e4333e702a74c3d", 0x5a, 0x9}], 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6175746f6465667261672c6e6f7373642c6e09007265656c6f672c636865636b5f696e745f7072696e745f6d61736b3d3078303030303030303030303030303038352c636f6d6d69743d3078303030303030303130303030303030312c6e6f73706163655f63616368652c72657363616e5f757569645f747265652c7265665f7665726966792c747265656c6f672c004a0ab4aa122a46f935fbdd3de18b2880827d235231bc30ddeed73e38647dd6fef52eb07595159f4f858eb917048f81e353ce186e4c0f59931949d245689a33d7ff9739a6dd2436158e15f0"]) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 10:17:26 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000e00)='./file0//ile0\x00', &(0x7f0000000e40)='./file0/file0\x00') stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) getsockname(r1, &(0x7f0000000e80)=@sco, &(0x7f0000000f00)=0x80) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400", 0x22}], 0x1}, 0x0) getsockname(r2, &(0x7f0000000f40)=@pppol2tp, &(0x7f0000000fc0)=0x80) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x2000, 0x0) seccomp(0x1, 0x0, &(0x7f0000000980)={0x6, &(0x7f0000000940)=[{0x10001, 0x2, 0x0, 0x8000}, {0x10001, 0x6, 0x7ff, 0x9}, {0x4, 0x9, 0x8, 0x13c146b8}, {0x1, 0x8, 0x40, 0x1}, {0x7fffffff, 0x5, 0x4, 0xb3b}, {0x3, 0x5d97, 0x1, 0x1}]}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000680)='veth0_to_bond\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/155, 0x9b}, {&(0x7f0000000a40)=""/199, 0xc7}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/233, 0xe9}], 0x9, &(0x7f0000000340)=""/7, 0x7, 0xe0}, 0x2122) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) 10:17:26 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000e00)='./file0//ile0\x00', &(0x7f0000000e40)='./file0/file0\x00') stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) getsockname(r1, &(0x7f0000000e80)=@sco, &(0x7f0000000f00)=0x80) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400", 0x22}], 0x1}, 0x0) getsockname(r2, &(0x7f0000000f40)=@pppol2tp, &(0x7f0000000fc0)=0x80) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x2000, 0x0) seccomp(0x1, 0x0, &(0x7f0000000980)={0x6, &(0x7f0000000940)=[{0x10001, 0x2, 0x0, 0x8000}, {0x10001, 0x6, 0x7ff, 0x9}, {0x4, 0x9, 0x8, 0x13c146b8}, {0x1, 0x8, 0x40, 0x1}, {0x7fffffff, 0x5, 0x4, 0xb3b}, {0x3, 0x5d97, 0x1, 0x1}]}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000680)='veth0_to_bond\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/155, 0x9b}, {&(0x7f0000000a40)=""/199, 0xc7}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/233, 0xe9}], 0x9, &(0x7f0000000340)=""/7, 0x7, 0xe0}, 0x2122) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) 10:17:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000500)=""/4096) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:27 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x4, {0x401}}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 224.565546] binder: 15426:15453 got reply transaction with no transaction stack [ 224.571825] binder: 15457:15467 got transaction with invalid offset (0, min 0 max 24) or object. [ 224.571844] binder: 15457:15467 transaction failed 29201/-22, size 24-8 line 3199 10:17:27 executing program 6: socket$netlink(0x10, 0x3, 0x1f) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000d80)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd4b4fab488a8e5bb}, 0x0) 10:17:27 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x80) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x40, @mcast2={0xff, 0x2, [], 0x1}, 0x7fca}, {0xa, 0x4e23, 0x1, @empty, 0x401}, 0x400, [0x9, 0xfff, 0x9, 0xffffffffffffffff, 0x0, 0x4, 0x6]}, 0x5c) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") 10:17:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00') ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000540)=""/4096) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x3, &(0x7f0000000080), 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$getown(r0, 0x9) ptrace(0xffffffffffffffff, r2) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES16=r1], @ANYBLOB="982b4cc0681e09ddb00076ded44f04c690fe31df4028ab907d0f0c0b6e776a472ce65521623885fe146781340fc2102a120e6df0a56d4a050b3cd2042768b460719116715fc32c9728f0b033dad6b53771e96bce784cb75beeb88a713b915f149f5eb9116fd8478acc5104825e2aec0362e53c227fdf9cf0afe6eec2807624b30c71ae24df8864b92a83d215d009af07554e2c52fac72f01d2eae595f3846338f7cacf2e8bd1cccefea6e39952c06957fc78e049fb474b7e9e6362ebf6aec1382bf705e214ae90"], 0x3}, 0x1, 0x0, 0x0, 0xffff7ffffffffffd}, 0x0) [ 224.612039] binder: undelivered TRANSACTION_ERROR: 29201 [ 224.623454] binder: 15426:15453 transaction failed 29201/-71, size 0-0 line 2921 [ 224.644877] binder: 15482:15485 got transaction with invalid offset (0, min 0 max 24) or object. [ 224.655504] binder: 15482:15485 transaction failed 29201/-22, size 24-8 line 3199 [ 224.711095] binder_alloc: binder_alloc_mmap_handler: 15426 20001000-20004000 already mapped failed -16 [ 224.721147] binder: undelivered TRANSACTION_ERROR: 29201 [ 224.743640] binder: BINDER_SET_CONTEXT_MGR already set [ 224.749597] binder: 15426:15477 ioctl 40046207 0 returned -16 [ 224.759399] binder: 15426:15453 transaction failed 29189/-22, size 0-0 line 3013 [ 224.765646] binder: 15426:15477 ERROR: BC_REGISTER_LOOPER called without request [ 224.773840] binder: 15426:15510 got reply transaction with no transaction stack [ 224.773846] binder: 15426:15510 transaction failed 29201/-71, size 0-0 line 2921 10:17:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x40000080}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff22, 0x0, &(0x7f00000006c0), 0x48, 0x0, &(0x7f0000000600)="2b982ba8f5e437f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f537ae2aa23a7b83b55034c9d5f3c72eaefd2f68d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) 10:17:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$inet(0x2, 0x2, 0xa723, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f0000000000)=0x1, 0x4) close(r4) dup3(r1, r2, 0x0) 10:17:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:27 executing program 2: r0 = socket(0xb, 0x2, 0x7) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000400200000, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2=0xe0000002}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x20, {0x2, 0x4e24, @rand_addr=0x7}, 'veth1\x00'}) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 224.879161] binder: undelivered TRANSACTION_ERROR: 29189 [ 224.884683] binder: undelivered TRANSACTION_ERROR: 29201 [ 224.894640] binder: undelivered TRANSACTION_ERROR: 29201 [ 224.903381] binder: undelivered TRANSACTION_ERROR: 29189 [ 224.909803] binder: 15519:15522 unknown command -1917814520 [ 224.909808] binder: 15519:15522 ioctl c0306201 20000180 returned -22 [ 224.912856] binder: 15519:15522 unknown command -1917814520 [ 224.912861] binder: 15519:15522 ioctl c0306201 20000180 returned -22 [ 224.934443] binder: 15516:15520 transaction failed 29189/-22, size 24-0 line 3013 [ 224.971948] binder: undelivered TRANSACTION_ERROR: 29189 10:17:27 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(0x0, 0x1004000000016) close(r0) 10:17:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x40000) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x8) r2 = memfd_create(&(0x7f0000000640)="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", 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:27 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x200031, 0xffffffffffffffff, 0x0) ustat(0x6, &(0x7f0000000080)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1a9) sendfile(r1, r2, &(0x7f0000000100), 0x401) ftruncate(r1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:17:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) accept$inet(r1, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1263483fffffe1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) 10:17:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES16, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:27 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000380)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@local, 0x0}, &(0x7f0000000400)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8000000}}}]}}, {{0x8, 0x1, r3}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4}}, {0x8, 0x6, r5}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x40000080}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff22, 0x0, &(0x7f00000006c0), 0x48, 0x0, &(0x7f0000000600)="2b982ba8f5e437f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f537ae2aa23a7b83b55034c9d5f3c72eaefd2f68d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) 10:17:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0xfffffffffffffff7, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x5}}}, 0x88) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 10:17:27 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000000000)) dup2(r1, r1) 10:17:27 executing program 2: r0 = socket$inet(0x2, 0x80000, 0x20) fsync(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 225.427577] binder: 15535:15539 ERROR: BC_REGISTER_LOOPER called without request [ 225.440520] binder: 15538:15542 transaction failed 29189/-22, size 24-0 line 3013 [ 225.455317] binder: 15533:15545 transaction failed 29189/-22, size 24-8 line 3013 10:17:27 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc82066345f8f762070") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffff9c, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) keyctl$unlink(0x9, r0, 0x0) [ 225.455515] binder: undelivered TRANSACTION_ERROR: 29189 [ 225.467857] binder: 15552:15557 unknown command -1917814520 [ 225.467862] binder: 15552:15557 ioctl c0306201 20000180 returned -22 [ 225.541956] binder: undelivered TRANSACTION_ERROR: 29189 10:17:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:28 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x1b, 0x7, 0x2, {{0xe, 'vboxnet0-@user'}, 0x5}}, 0x1b) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000030000000000000000000000ff010000000000000000000000000001e0000001000000000000000000000000000000ed000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000071f5dcee2df061121cbd814478187360000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) fsetxattr(r2, &(0x7f0000000000)=@random={'btrfs.', '\x00'}, &(0x7f0000000040)=')/eth1\x00', 0x7, 0x1) 10:17:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x4010000000001, 0x200) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe2$9p(&(0x7f0000000000), 0x80800) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) write$cgroup_int(r1, &(0x7f0000000040)=0xfffffffffffffff9, 0x12) exit(0x101) [ 225.744651] binder: 15587:15590 transaction failed 29189/-22, size 24-0 line 3013 [ 225.799089] binder: undelivered TRANSACTION_ERROR: 29189 10:17:28 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(0x0, 0x1004000000016) close(r0) 10:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) pread64(r1, &(0x7f0000000100)=""/255, 0xff, 0x0) 10:17:28 executing program 6: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1c3) setresuid(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) ioprio_set$uid(0x3, r1, 0x0) 10:17:28 executing program 5: r0 = socket$inet6(0xa, 0x7, 0x2000100000) poll(&(0x7f0000000040)=[{r0, 0x80}, {r0, 0x80}, {r0, 0x8440}, {r0, 0x431}], 0x4, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) prctl$setfpexc(0xc, 0xe0000) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0x7, 0xdb73, 0xa5, 0x0, 0x6, 0x7, 0x83, 0x40, 0x1e1, 0x100000001, 0x9, 0x38, 0x1, 0x5, 0x1, 0x2}, [{0x6474e553, 0x80000000, 0x1026400, 0x4, 0x100000001, 0xa994, 0x3ff, 0x6}, {0x4, 0x2, 0x59, 0xfffffffffffffff9, 0x68f, 0x7, 0x100, 0x10000}], "8e55d9d7368500665c0352c9ca49ac4840104071bb00c9cda3baf234ccc3243561591df3e3aba6fb599bd9ebd907a9eca1452226383e259071e22eda0b8e11ab6446c645694650241b2c1b5bbf6a79056572cf1856ee16ed08d06814f4de907dde325bc58d0c00a3e2fea875443def871dc45606392c834fa4101f337d45f8976f849dfab1b4fe10c9773f05572da981a6dd", [[]]}, 0x242) [ 226.233685] binder: 15535:15600 unknown command 1061708562 [ 226.239383] binder: 15535:15600 ioctl c0306201 200002c0 returned -22 [ 226.297367] FAT-fs (loop0): Directory bread(block 2) failed [ 226.303172] FAT-fs (loop0): Directory bread(block 3) failed [ 226.308883] FAT-fs (loop0): Directory bread(block 4) failed [ 226.314921] FAT-fs (loop0): Directory bread(block 5) failed [ 226.321984] FAT-fs (loop0): Directory bread(block 6) failed [ 226.327820] FAT-fs (loop0): Directory bread(block 7) failed [ 226.334218] FAT-fs (loop0): Directory bread(block 8) failed [ 226.340030] FAT-fs (loop0): Directory bread(block 9) failed [ 226.345925] FAT-fs (loop0): Directory bread(block 10) failed [ 226.350472] binder: BINDER_SET_CONTEXT_MGR already set [ 226.350478] binder: 15535:15618 ioctl 40046207 0 returned -16 [ 226.352765] binder: 15535:15618 ERROR: BC_REGISTER_LOOPER called without request [ 226.371062] FAT-fs (loop0): Directory bread(block 11) failed [ 226.381064] attempt to access beyond end of device [ 226.386390] loop0: rw=536870912, want=73, limit=2 [ 226.391780] attempt to access beyond end of device [ 226.396759] loop0: rw=0, want=73, limit=2 [ 226.396769] binder: 15535:15621 unknown command 1061708562 [ 226.396775] binder: 15535:15621 ioctl c0306201 200002c0 returned -22 [ 226.413046] attempt to access beyond end of device [ 226.417952] loop0: rw=0, want=73, limit=2 10:17:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10081, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) getpeername$unix(r3, &(0x7f0000000300), &(0x7f00000000c0)=0x6e) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:28 executing program 2: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x80000, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@alg, &(0x7f0000000180)=0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f00003c7ff4)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES16=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES16]], 0x3}, 0x1, 0x0, 0x0, 0x1003}, 0x0) 10:17:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018110000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) 10:17:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./bus\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x3e, 0x1}, &(0x7f0000000240)) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 10:17:28 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r0, 0x21, 0x0, 0x0, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 10:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) pread64(r1, &(0x7f0000000100)=""/255, 0xff, 0x0) 10:17:28 executing program 2: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) pread64(r1, &(0x7f0000000100)=""/255, 0xff, 0x0) 10:17:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) pread64(r1, &(0x7f0000000100)=""/255, 0xff, 0x0) 10:17:28 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x7ff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000840000000000000000000001e00000010000000000000000000000000000000000000000ff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 226.511428] binder: 15628:15630 transaction failed 29189/-22, size 4376-8 line 3013 [ 226.535839] binder: 15636:15640 ERROR: BC_REGISTER_LOOPER called without request 10:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) pread64(r1, &(0x7f0000000100)=""/255, 0xff, 0x0) [ 226.535924] binder: release 15636:15640 transaction 663 out, still active [ 226.535926] binder: undelivered TRANSACTION_COMPLETE [ 226.535975] binder: 15636:15640 transaction failed 29189/0, size 0-0 line 2945 [ 226.535979] binder: send failed reply for transaction 663, target dead [ 226.541386] binder_alloc: binder_alloc_mmap_handler: 15636 20001000-20004000 already mapped failed -16 [ 226.543545] binder: BINDER_SET_CONTEXT_MGR already set [ 226.543551] binder: 15636:15640 ioctl 40046207 0 returned -16 10:17:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) [ 226.544617] binder_alloc: 15636: binder_alloc_buf, no vma [ 226.544631] binder: 15636:15646 transaction failed 29189/-3, size 0-0 line 3136 [ 226.546894] binder: 15636:15640 ERROR: BC_REGISTER_LOOPER called without request [ 226.555802] binder: undelivered TRANSACTION_ERROR: 29189 [ 226.558830] binder: 15636:15652 got reply transaction with no transaction stack [ 226.558836] binder: 15636:15652 transaction failed 29201/-71, size 0-0 line 2921 [ 226.563417] FAT-fs (loop5): Directory bread(block 2) failed [ 226.563426] FAT-fs (loop5): Directory bread(block 3) failed [ 226.563433] FAT-fs (loop5): Directory bread(block 4) failed [ 226.563441] FAT-fs (loop5): Directory bread(block 5) failed [ 226.563449] FAT-fs (loop5): Directory bread(block 6) failed [ 226.563456] FAT-fs (loop5): Directory bread(block 7) failed [ 226.563481] FAT-fs (loop5): Directory bread(block 8) failed [ 226.563489] FAT-fs (loop5): Directory bread(block 9) failed [ 226.563496] FAT-fs (loop5): Directory bread(block 10) failed [ 226.563503] FAT-fs (loop5): Directory bread(block 11) failed [ 226.567445] FAT-fs (loop0): Directory bread(block 2) failed [ 226.567453] FAT-fs (loop0): Directory bread(block 3) failed [ 226.567461] FAT-fs (loop0): Directory bread(block 4) failed [ 226.567469] FAT-fs (loop0): Directory bread(block 5) failed [ 226.567475] FAT-fs (loop0): Directory bread(block 6) failed [ 226.567482] FAT-fs (loop0): Directory bread(block 7) failed [ 226.567512] FAT-fs (loop0): Directory bread(block 8) failed [ 226.567522] FAT-fs (loop0): Directory bread(block 9) failed [ 226.567530] FAT-fs (loop0): Directory bread(block 10) failed [ 226.567538] FAT-fs (loop0): Directory bread(block 11) failed [ 226.569371] attempt to access beyond end of device [ 226.569376] loop5: rw=536870912, want=73, limit=2 [ 226.569533] attempt to access beyond end of device [ 226.569537] loop5: rw=0, want=73, limit=2 [ 226.569545] attempt to access beyond end of device [ 226.569548] loop5: rw=0, want=73, limit=2 [ 226.573447] attempt to access beyond end of device [ 226.573452] loop0: rw=536870912, want=73, limit=2 [ 226.573606] attempt to access beyond end of device [ 226.573609] loop0: rw=0, want=73, limit=2 [ 226.573619] attempt to access beyond end of device [ 226.573621] loop0: rw=0, want=73, limit=2 [ 226.660464] binder: undelivered TRANSACTION_ERROR: 29190 [ 226.667687] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.747536] FAT-fs (loop0): Directory bread(block 2) failed [ 226.747545] FAT-fs (loop0): Directory bread(block 3) failed [ 226.747553] FAT-fs (loop0): Directory bread(block 4) failed [ 226.747568] FAT-fs (loop0): Directory bread(block 5) failed [ 226.747576] FAT-fs (loop0): Directory bread(block 6) failed [ 226.747584] FAT-fs (loop0): Directory bread(block 7) failed [ 226.747609] FAT-fs (loop0): Directory bread(block 8) failed [ 226.747616] FAT-fs (loop0): Directory bread(block 9) failed [ 226.747624] FAT-fs (loop0): Directory bread(block 10) failed [ 226.747631] FAT-fs (loop0): Directory bread(block 11) failed [ 226.752617] attempt to access beyond end of device [ 226.752621] loop0: rw=536870912, want=73, limit=2 [ 226.752772] attempt to access beyond end of device [ 226.752776] loop0: rw=0, want=73, limit=2 [ 226.752784] attempt to access beyond end of device [ 226.752787] loop0: rw=0, want=73, limit=2 [ 226.772250] FAT-fs (loop5): Directory bread(block 2) failed [ 226.772259] FAT-fs (loop5): Directory bread(block 3) failed [ 226.772266] FAT-fs (loop5): Directory bread(block 4) failed [ 226.772273] FAT-fs (loop5): Directory bread(block 5) failed [ 226.772280] FAT-fs (loop5): Directory bread(block 6) failed [ 226.772287] FAT-fs (loop5): Directory bread(block 7) failed [ 226.772313] FAT-fs (loop5): Directory bread(block 8) failed [ 226.772321] FAT-fs (loop5): Directory bread(block 9) failed [ 226.772328] FAT-fs (loop5): Directory bread(block 10) failed [ 226.772335] FAT-fs (loop5): Directory bread(block 11) failed [ 226.779350] attempt to access beyond end of device [ 226.779355] loop5: rw=536870912, want=73, limit=2 [ 226.779527] attempt to access beyond end of device [ 226.779530] loop5: rw=0, want=73, limit=2 [ 226.779539] attempt to access beyond end of device [ 226.779542] loop5: rw=0, want=73, limit=2 [ 227.056284] binder: 15628:15630 transaction failed 29189/-22, size 4376-8 line 3013 [ 227.064845] binder: undelivered TRANSACTION_ERROR: 29189 10:17:29 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(r0) 10:17:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x70c, 0x70bd2d, 0x25dfdbff, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9564}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20c80, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000880)=0x0) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x1, r2}) r8 = getgid() r9 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000140)="16217393fb2638d7", 0x8}, {&(0x7f0000000440)="d4364e53bcf6375b3700bf83d4285ac1e770b81f50d5a784fea4fc2934354cfea8b8b795e84d2f92b0dfa0ad2eadc3c13c40e718684d7585f28d94931bfda0c8df6a96254dd1844a35737506eda5b957fcb6f04279230203b666c1a26fabcef0aeb62d25ecbe8116e10c7aa74484e0763684b2809dde8943f614475e36f81b52d65335527e60df00520ef83df0687214438ccf62a4fa1607eb4659c4fc8017fdc9047abe2e440143e56b2067a3b9d74a5f333ae5229d613ddb47cbee8028b68da8a5cf", 0xc3}, {&(0x7f0000000540)="dd59d351374f103f25f140101736294e69d1b42552bfc23dd40b8610588b247ca877085d0bcad489eba6d4b3639c2a85d0651deba3f71bb460a4fc94cd3ca269ceb66369632e39b081b6f9676b31e420dfa6f81cf530df16e0b2e1455b982eeb3041bea58d2ea0304591dd280b430d0216845a79e7e9f5767a48f95e940b92512153bdabe70f90", 0x87}, {&(0x7f0000000600)="d8c6153f03db12a65c824fe937d892483c3b81ea68219387960cab3690ae2bd36401387b6b9b2e7f6a93a25ebee4bf4fb2ba4921b30735dc7fd6f581b69472dd1fe287457e22f5701315346266ce7d5d91e8c1203b97de11b6caa8b115478f5e31d9cd0efb51ea13c3f99fa6a6e93fef392659ce94802bf0963fa6235aceb434fcb904cef0a54b531b1cc0252fc0b093bba75b434e", 0x95}, {&(0x7f0000000380)="b97d649f9ec9932f8787e9bfc302", 0xe}], 0x5, &(0x7f0000000a40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r0]}], 0xa0, 0x80}, 0x40004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="ba4889aa68547336b48e9fb262b4bae1156d31695484f25d4edf90fa33e70f6c2aa4051a4deb6d1f666faa0b4f315eb5348c53ee8290c6d087d20d3a206e062a536e2bb8621f2923a8fe342aa5f30e24c169aa85"], 0x0, 0x0, &(0x7f0000000480)}) pselect6(0x40, &(0x7f0000000080)={0xe9, 0x81, 0x5, 0x7, 0x401, 0xffff, 0x8, 0xfffffffffffff940}, &(0x7f00000000c0)={0x1, 0x6, 0xffffffff, 0x3, 0x3, 0x7ff, 0x22d3, 0x1}, &(0x7f00000003c0)={0x3, 0x9, 0x34d, 0x4, 0x1, 0x5, 0xf79a, 0x100000000}, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000c40)={&(0x7f0000000c00)={0x8000}, 0x8}) 10:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) pread64(r1, &(0x7f0000000100)=""/255, 0xff, 0x0) 10:17:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) pread64(r1, &(0x7f0000000100)=""/255, 0xff, 0x0) 10:17:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000580)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00b7000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x9c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x31}], &(0x7f0000000140)=[0x48, 0x40]}, 0x2}}, @free_buffer={0x40086303, r2}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000280)=[@fda={0x66646185, 0x3, 0x3, 0x18}, @flat={0x77682a85, 0x101, r3, 0x4}, @fda={0x66646185, 0x9, 0x4, 0x23}], &(0x7f00000001c0)=[0x40]}}], 0x65, 0x0, &(0x7f0000000480)="96db059fad3eb740cf807cad546d8be6479b29a784d938118bbecb6beaf2a673691c467b1f8ddbb268c5e36d4021286f0f12a4bf56fec76e547258f0f51d367920e27bfbd4afaee3ebeed521e765edfec02faef88856462042c4153add26623fcf82fa0a5c"}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000005c0)=""/101) [ 227.121780] binder: undelivered TRANSACTION_ERROR: 29189 [ 227.150693] binder: 15690:15700 ERROR: BC_REGISTER_LOOPER called without request [ 227.158947] binder: 15697:15702 got transaction with invalid offset (0, min 0 max 24) or object. [ 227.168967] FAT-fs (loop5): Directory bread(block 2) failed [ 227.168976] FAT-fs (loop5): Directory bread(block 3) failed [ 227.168983] FAT-fs (loop5): Directory bread(block 4) failed [ 227.168991] FAT-fs (loop5): Directory bread(block 5) failed [ 227.169000] FAT-fs (loop5): Directory bread(block 6) failed [ 227.169009] FAT-fs (loop5): Directory bread(block 7) failed [ 227.169070] FAT-fs (loop5): Directory bread(block 8) failed [ 227.169080] FAT-fs (loop5): Directory bread(block 9) failed [ 227.169088] FAT-fs (loop5): Directory bread(block 10) failed [ 227.169097] FAT-fs (loop5): Directory bread(block 11) failed [ 227.175174] attempt to access beyond end of device [ 227.175179] loop5: rw=536870912, want=73, limit=2 [ 227.175408] attempt to access beyond end of device [ 227.175413] loop5: rw=0, want=73, limit=2 [ 227.175422] attempt to access beyond end of device [ 227.175424] loop5: rw=0, want=73, limit=2 [ 227.192551] binder: release 15690:15700 transaction 669 out, still active [ 227.192554] binder: undelivered TRANSACTION_COMPLETE [ 227.192607] binder: 15690:15700 transaction failed 29189/0, size 0-0 line 2945 [ 227.192611] binder: send failed reply for transaction 669, target dead [ 227.194082] binder_alloc: binder_alloc_mmap_handler: 15690 20001000-20004000 already mapped failed -16 [ 227.195223] binder: BINDER_SET_CONTEXT_MGR already set [ 227.195228] binder: 15690:15700 ioctl 40046207 0 returned -16 [ 227.209536] binder_alloc: 15690: binder_alloc_buf, no vma [ 227.209549] binder: 15690:15710 transaction failed 29189/-3, size 0-0 line 3136 [ 227.210683] binder: 15690:15700 ERROR: BC_REGISTER_LOOPER called without request [ 227.210701] binder: undelivered TRANSACTION_ERROR: 29189 [ 227.216468] binder: 15690:15710 got reply transaction with no transaction stack [ 227.216474] binder: 15690:15710 transaction failed 29201/-71, size 0-0 line 2921 [ 227.323742] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.323767] binder: undelivered TRANSACTION_ERROR: 29190 [ 227.381087] binder: 15697:15702 transaction failed 29201/-22, size 24-8 line 3199 [ 227.393438] binder: 15697:15719 transaction failed 29189/-22, size 24-8 line 3013 [ 227.403420] binder: 15697:15702 got reply transaction with no transaction stack [ 227.410924] binder: 15697:15702 transaction failed 29201/-71, size 40-16 line 2921 [ 227.451838] binder: undelivered TRANSACTION_ERROR: 29189 10:17:31 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20c80, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000880)=0x0) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x1, r2}) r8 = getgid() r9 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000140)="16217393fb2638d7", 0x8}, {&(0x7f0000000440)="d4364e53bcf6375b3700bf83d4285ac1e770b81f50d5a784fea4fc2934354cfea8b8b795e84d2f92b0dfa0ad2eadc3c13c40e718684d7585f28d94931bfda0c8df6a96254dd1844a35737506eda5b957fcb6f04279230203b666c1a26fabcef0aeb62d25ecbe8116e10c7aa74484e0763684b2809dde8943f614475e36f81b52d65335527e60df00520ef83df0687214438ccf62a4fa1607eb4659c4fc8017fdc9047abe2e440143e56b2067a3b9d74a5f333ae5229d613ddb47cbee8028b68da8a5cf", 0xc3}, {&(0x7f0000000540)="dd59d351374f103f25f140101736294e69d1b42552bfc23dd40b8610588b247ca877085d0bcad489eba6d4b3639c2a85d0651deba3f71bb460a4fc94cd3ca269ceb66369632e39b081b6f9676b31e420dfa6f81cf530df16e0b2e1455b982eeb3041bea58d2ea0304591dd280b430d0216845a79e7e9f5767a48f95e940b92512153bdabe70f90", 0x87}, {&(0x7f0000000600)="d8c6153f03db12a65c824fe937d892483c3b81ea68219387960cab3690ae2bd36401387b6b9b2e7f6a93a25ebee4bf4fb2ba4921b30735dc7fd6f581b69472dd1fe287457e22f5701315346266ce7d5d91e8c1203b97de11b6caa8b115478f5e31d9cd0efb51ea13c3f99fa6a6e93fef392659ce94802bf0963fa6235aceb434fcb904cef0a54b531b1cc0252fc0b093bba75b434e", 0x95}, {&(0x7f0000000380)="b97d649f9ec9932f8787e9bfc302", 0xe}], 0x5, &(0x7f0000000a40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r0]}], 0xa0, 0x80}, 0x40004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="ba4889aa68547336b48e9fb262b4bae1156d31695484f25d4edf90fa33e70f6c2aa4051a4deb6d1f666faa0b4f315eb5348c53ee8290c6d087d20d3a206e062a536e2bb8621f2923a8fe342aa5f30e24c169aa85"], 0x0, 0x0, &(0x7f0000000480)}) pselect6(0x40, &(0x7f0000000080)={0xe9, 0x81, 0x5, 0x7, 0x401, 0xffff, 0x8, 0xfffffffffffff940}, &(0x7f00000000c0)={0x1, 0x6, 0xffffffff, 0x3, 0x3, 0x7ff, 0x22d3, 0x1}, &(0x7f00000003c0)={0x3, 0x9, 0x34d, 0x4, 0x1, 0x5, 0xf79a, 0x100000000}, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000c40)={&(0x7f0000000c00)={0x8000}, 0x8}) 10:17:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002440000000000000000000000000000000000000000000002c26e6a698379dc8f4365d72f326131976ccd9920dfa3b62090418066425af364a11467eef25ce242bd6c0fff76c878552598ea6300389129740072fb1980ebb056796fc640f645ba7e867265e325a646a9c7f250a9eef"], 0x3}, 0x1}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x14) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x4, 0x3}, 'port1\x00', 0x20, 0xc20, 0x0, 0x10001, 0x3, 0x5, 0x8, 0x0, 0x7, 0x1}) 10:17:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x10000) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/89) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000001c0)={0x8000000020, @time, 0x0, {0x0, 0x401}, 0x35}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) unshare(0x42060000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 10:17:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x2, 0x400000) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}]}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x200) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0xb7, @loopback=0x7f000001, 0x4e23, 0x3, 'fo\x00', 0x6, 0x7, 0x51}, 0x2c) 10:17:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00>'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:31 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(r0) 10:17:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getown(r0, 0x9) r1 = memfd_create(&(0x7f0000000000)="12766d6e65743100", 0x2) getpeername$inet(r1, &(0x7f0000000040)={0x0, 0x0, @rand_addr}, &(0x7f0000000080)=0x10) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000ff01000000000000000000000b00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000009e90b9a8acab0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) fadvise64(r1, 0x0, 0x0, 0x4) [ 229.540042] binder: 15728:15736 ERROR: BC_REGISTER_LOOPER called without request [ 229.547977] binder: 15730:15742 got transaction with invalid offset (0, min 0 max 24) or object. 10:17:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1132, 0x800) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'mime_type'}, {0x20, "746c6fab28"}, {0x20, '^:.em0ppp0}!'}, {0x20, 'loposix_acl_access!vmnet0@.^cgroup'}], 0xa, "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"}, 0x104b) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioprio_get$pid(0x3, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x202, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0xe10b) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) 10:17:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)="706f7369785f4c636c5f6163632500a71b", 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 229.564275] binder: BINDER_SET_CONTEXT_MGR already set [ 229.564283] binder: 15737:15744 ioctl 40046207 0 returned -16 [ 229.567556] binder: 15737:15744 ERROR: BC_REGISTER_LOOPER called without request [ 229.571218] FAT-fs (loop5): Directory bread(block 2) failed [ 229.571231] FAT-fs (loop5): Directory bread(block 3) failed [ 229.571243] FAT-fs (loop5): Directory bread(block 4) failed [ 229.571255] FAT-fs (loop5): Directory bread(block 5) failed [ 229.571267] FAT-fs (loop5): Directory bread(block 6) failed [ 229.571278] FAT-fs (loop5): Directory bread(block 7) failed 10:17:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000200)='.\x00', &(0x7f0000000140)=""/175, 0xaf) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 229.571320] FAT-fs (loop5): Directory bread(block 8) failed [ 229.571334] FAT-fs (loop5): Directory bread(block 9) failed [ 229.571349] FAT-fs (loop5): Directory bread(block 10) failed [ 229.571363] FAT-fs (loop5): Directory bread(block 11) failed [ 229.574761] attempt to access beyond end of device [ 229.574769] loop5: rw=536870912, want=73, limit=2 [ 229.584171] binder: release 15728:15736 transaction 677 out, still active 10:17:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x6, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) r4 = gettid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002fc0)=0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getresgid(&(0x7f0000002d80), &(0x7f0000002dc0), &(0x7f0000002e00)=0x0) sendmsg$netlink(r1, &(0x7f0000002f40)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000500)={0x13d4, 0x2d, 0x20c, 0x70bd25, 0x25dfdbfc, "", [@nested={0x198, 0x30, [@generic="1a31efc555570ebdb5c176bd0e33b114f7f656f50ac85a65ecf54c8d185997e0735c18d82308c94d6c0392edb2cc7e278ffe75e1f5d484e85bc66581b6cbb99cb0bb97a19af194b42d0b2bc6aba2bc243e375fbbc9f1434587aa8cb333fe8f0237fb9897eb4c77ac62a4c1e3d4852fd5a0bea2943274e1923e43eeb25f788201d12d6d1c86aa097f3442fa55a7ab1556a0d21d749e8f34151b8e291e8f7a6b255c857d90ab70f5429891503ff843f45f5e041900afff4f6e63fe13c387132d41665d4a9e1c19", @generic="569f484eed021ef433449eb0c93e55069faec1b359effc73997176d7c6acac25142b80fb1c52bd0c5936e46ceb5da33464e4659c1ba119694e3d447912d44683a5d86c1abc3e7b08fec1d1799e68d3115bbd4ae74cafa27830e3d07ac7e47d217c45d7dd2e72aa674aa104af2a5aee1a335898f2340dcffede20755885482bb37cf44b9182a83d8adff0d914a733b0523380e19156a8a94683035a83c6832ee50ef0fe0b403dfdaafd72011cdd1619f79422f40687c7ba100cc93a580498a9b7be6f46cc6618636ef2a328b74dcc"]}, @typed={0xc, 0xc, @u64=0x7e}, @nested={0x1220, 0x94, [@generic="8c61be8540e10b6b87e74b5eda798b7201e277ebaecba1de8fbde014ce6fb220b2a49ba8be464a295aedb597ce7d6d8cce57bf3d4e0010c9868a0e6482876eb50ad6d735fb149cb75b6c6ef4a52afb127e378c87c870fa74e624d953e809fb685c7bf5689fc42b2cd2cffe2b3dae853a99db526abbbb156c8fdcbabf4d23cc936af1523477637020d0b5ba67f9f973d840de79ca9d0245ace056f4ff342b70e1cff74455db0713ca91c84f90", @typed={0x8, 0x36, @ipv4=@broadcast=0xffffffff}, @typed={0x4, 0x81}, @generic="7023319c0958a320b159c3d5960ae52b831c8a81d5c084af57b885eebe0fddecf46f1c4026128603c91f05", @generic="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", @generic="5cb2888ef94bb6a8e2bc3b43344b2cccfece4f8a4053d88d3d4f81659ee7909baf2f81986eec79eb8895428197b682708a795343002e95ff52af57ff0625585c09", @generic="0a8f5aa60a8d95cf1942fccf101bccd44a4398674f65d21f032d49b3c16b506e3e714f941d8b6e5e9d8981272501fb100b2e274fb476d91e225cc3877ea37c00f31b03c37c39a55a04b999b8c67506384d7dfaccbed8859fddcae01a3e9a5edfa8b90a4d1cdb6903155f465460f2d49c9b71c53740be804084ead6df805d6a131797528a70f600269121182055871f4310b4780d8a3b3de33d2f2ba7abfe80881db09600bffda9c996581783116801bb9708ba500e6bd677404d41af1a43c6ce8121e0fe6b81295821294e4641f0880f8c0c309d17ccc7d86cf0348cf5eb0e2d4324", @typed={0x14, 0x7f, @ipv6=@dev={0xfe, 0x80, [], 0xa}}]}]}, 0x13d4}, {&(0x7f0000001900)={0x1470, 0x41, 0x45546114a09a689b, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x134, 0xc, [@typed={0x10, 0x15, @binary="1cc1be803a572dbcb2be"}, @generic="c3e75f7d537890aa90a0f41fd464df8bc5d971897f5a67202ba8199e246ba0607e5e5597871509a36b0058e2396ef0ed19cb5069b18e2b2f980928e37bd3", @generic="a8ec36dc23df0fc6a9a6433270699954dd0799f43803331634778408bf7f150b8a111f633acf52aac88d4e2d6ba1af500d8401bede4d8c4a22670dc3f6a23d766d77b233c1b08f072c9d6a9f97a46e464a518827255d18606d222f1d740b7b6359c9c31893db408a8db9ea6bc1466df79c26f30e2b1064f9e282842aa6d86a7e6f47be0bbeee2c9b2c83b80c7546b1535c1e11f1ddfdaf93d0f730c8f32148bbef03529054831e219980983194ad940cbcba387301d1e6a1ff5505", @generic="5ec344fea6cbf03f18a944a6a73b53808cd5796ad007cdcbd4abbf36f37183bbde91eb32"]}, @generic="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", @generic="06265aa99d08d8180353048abe5281a796ffb9dd22f6b952111d91c0151f35352a1425cd1343b0697d06b7ec2ad1bd434e628c5ed5ab9cb0b419d439ca2a6fa6e4419b31e753bf12f3999a30514a72c660170eb667af4ca3d28b4069d63112a9c85c654d0d850e57", @generic="da674bf028306a2bec45a954f1b4a05b481bc6ee946ef1f83209a87b7d7f6743ec2c50f5000f4e70b2578936045e1320073566e520ba0029771277a98f5b6da4af45107d6b75e45d2ecdac732c88359e96efe7a0fdca13ee4248cdc132fc799bb359baa48ae836b77f53573a8098a59c1576fe8493522d1c5a121a4b5b29fee8c63ef582913ffa31ce756f687977be103b8e21d9b64fbbdc6e5bb69bc5483d4af3550b3dad30b532d021", @nested={0x50, 0xb, [@typed={0x4, 0xe}, @typed={0x8, 0x2e, @u32=0x5}, @typed={0x8, 0x14, @uid=r2}, @generic="a2d91ff070cab01d55c24023e8f4973214615019b604cc28aba56f7cccec94f98e818213ebc65edb5d66c3e99f07c5c84993d9f62bab"]}, @generic="493c2edadd0e1823623fabe70d139b6151f9bf838811f63d759e28611539f9b4a50431a75f149397fc4c67e0d7b3f2b1f3c1691be85ad11c99d449585fce268ce47eb3b91a7b70f809a4daa9de990905258cc49841b1cb73a621d7843ca0eb2de9a3fa7ac15bb8f4bc3a311360bfa50afc4ecbba635c5ff8fbb2921cdf52d16b249f20f38e15af8b8f069d35c9dd4681ebd8e2cdb2f528bb6cff975be0208e07c0d0019480f0a85f7ca03f03d207b3993983ce4d5ae9f3fc943a08c69bc6878cabc33001461596eba7b9f3f98a8cefa27a205bf45b4798a30ae0464b1967b8f56ec5942773b2ea", @nested={0xcc, 0x7d, [@typed={0xc0, 0x75, @binary="daa28cc6e3c9a18b3197858ce13b8389814cea97fd560213a73987ca47814718f4665b74449359b4da5b6803d5b637187de94658779071113546a641c4a9cd2ee53801086a7013f64fa5c145ca3e7544a5777a7d981e0e0235415f8d7796d2dbe7428582a4f308856d01c173b56f4836942a223247b61b82f7c29e15763b5a8b72374f9a57bc6f6aa96ddd647096ef4aadfe4597acd5bf8a7dfd4f885a1a8b7712aa07b3e8527d800bb0cd4554354fdb3377c98858759da9f7"}, @typed={0x8, 0x3c, @uid=r3}]}, @typed={0xc, 0x25, @u64=0x2}, @typed={0x8, 0x2e, @pid=r4}]}, 0x1470}], 0x2, &(0x7f0000002e40)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}, @rights={0x10, 0x1, 0x1}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0]}], 0xe0, 0x4004800}, 0x8010) 10:17:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) [ 229.584176] binder: undelivered TRANSACTION_COMPLETE [ 229.584253] binder: 15728:15736 transaction failed 29189/0, size 0-0 line 2945 [ 229.584258] binder: send failed reply for transaction 677, target dead [ 229.589465] binder_alloc: binder_alloc_mmap_handler: 15728 20001000-20004000 already mapped failed -16 [ 229.590650] binder: BINDER_SET_CONTEXT_MGR already set [ 229.590659] binder: 15728:15736 ioctl 40046207 0 returned -16 [ 229.590739] binder_alloc: 15728: binder_alloc_buf, no vma [ 229.590763] binder: 15728:15751 transaction failed 29189/-3, size 0-0 line 3136 [ 229.592084] binder: 15728:15736 ERROR: BC_REGISTER_LOOPER called without request [ 229.592107] binder: undelivered TRANSACTION_ERROR: 29189 [ 229.595590] binder: 15728:15751 got reply transaction with no transaction stack [ 229.595597] binder: 15728:15751 transaction failed 29201/-71, size 0-0 line 2921 [ 229.607353] binder: undelivered TRANSACTION_ERROR: 29190 [ 229.607373] binder: send failed reply for transaction 679 to 15737:15744 [ 229.612117] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.659338] binder: 15756:15760 ERROR: BC_REGISTER_LOOPER called without request [ 229.659525] binder: release 15756:15760 transaction 684 out, still active [ 229.659529] binder: undelivered TRANSACTION_COMPLETE [ 229.659592] binder: 15756:15760 transaction failed 29189/0, size 0-0 line 2945 [ 229.659597] binder: send failed reply for transaction 684, target dead [ 229.676084] binder_alloc: binder_alloc_mmap_handler: 15756 20001000-20004000 already mapped failed -16 [ 229.677574] binder: BINDER_SET_CONTEXT_MGR already set [ 229.677583] binder: 15756:15760 ioctl 40046207 0 returned -16 [ 229.677669] binder_alloc: 15756: binder_alloc_buf, no vma [ 229.677689] binder: 15756:15761 transaction failed 29189/-3, size 0-0 line 3136 [ 229.678861] binder: 15756:15760 ERROR: BC_REGISTER_LOOPER called without request [ 229.693783] binder: 15756:15761 got reply transaction with no transaction stack [ 229.693793] binder: 15756:15761 transaction failed 29201/-71, size 0-0 line 2921 [ 229.736575] IPVS: Creating netns size=2536 id=32 [ 229.769448] FAT-fs (loop5): Directory bread(block 2) failed [ 229.769462] FAT-fs (loop5): Directory bread(block 3) failed [ 229.769475] FAT-fs (loop5): Directory bread(block 4) failed [ 229.769488] FAT-fs (loop5): Directory bread(block 5) failed [ 229.769500] FAT-fs (loop5): Directory bread(block 6) failed [ 229.769513] FAT-fs (loop5): Directory bread(block 7) failed [ 229.769552] FAT-fs (loop5): Directory bread(block 8) failed [ 229.769566] FAT-fs (loop5): Directory bread(block 9) failed [ 229.769579] FAT-fs (loop5): Directory bread(block 10) failed [ 229.769601] FAT-fs (loop5): Directory bread(block 11) failed [ 229.774139] attempt to access beyond end of device [ 229.774147] loop5: rw=536870912, want=73, limit=2 [ 229.810570] binder: undelivered TRANSACTION_ERROR: 29189 [ 229.810596] binder: undelivered TRANSACTION_ERROR: 29190 [ 229.817015] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.022403] FAT-fs (loop5): Directory bread(block 2) failed [ 230.022462] FAT-fs (loop5): Directory bread(block 3) failed [ 230.022496] FAT-fs (loop5): Directory bread(block 4) failed [ 230.022509] FAT-fs (loop5): Directory bread(block 5) failed [ 230.022522] FAT-fs (loop5): Directory bread(block 6) failed [ 230.022535] FAT-fs (loop5): Directory bread(block 7) failed [ 230.022600] FAT-fs (loop5): Directory bread(block 8) failed [ 230.022615] FAT-fs (loop5): Directory bread(block 9) failed [ 230.022628] FAT-fs (loop5): Directory bread(block 10) failed [ 230.022642] FAT-fs (loop5): Directory bread(block 11) failed [ 230.025668] attempt to access beyond end of device [ 230.025675] loop5: rw=536870912, want=73, limit=2 [ 230.079581] IPVS: Creating netns size=2536 id=33 [ 230.185562] binder: 15730:15742 transaction failed 29201/-22, size 24-8 line 3199 [ 230.199015] binder: 15730:15742 transaction failed 29189/-22, size 24-8 line 3013 [ 230.199125] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.251918] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.342081] binder: 15737:15806 got reply transaction with no transaction stack [ 230.349676] binder: 15737:15806 transaction failed 29201/-71, size 0-0 line 2921 10:17:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x10040) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x892f, 0x100000000000, 0xa95a, 0x9, 0xef, 0x4, 0x9}, 0x1c) flistxattr(r1, &(0x7f0000000000)=""/119, 0x77) 10:17:32 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xfffffffffffefffc, 0x4) 10:17:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000080), 0x80000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x7f, 0x9]) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:32 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0xfffffffffffeffff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/98) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=[{0x10, 0x11f}], 0x10, 0x1}, 0x3}, {{&(0x7f0000001440)=@pptp={0x18, 0x2, {0x0, @multicast2=0xe0000002}}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)="46b8d299d5c17809850e8c8d6eab4ab99e1314e3085265e587dd568e36c0c6e38f4e2e1fec5c3501be4f57a4acb26fcae93a4b6ab9ab28c6205930e1e1866e73362bcc3dd66ad6faba03a5014e01780ef396d5da76971cbc956dd9f6bbbb97658269effdcebcfb441dc8a328aae4cd9794bb919ac4bed524bacf90c090289b40b01a2ca8f87bcd6cbc39985cdd050799acccf2a2789830826b5787aa5a32f5a8649a6b2658d75f95cffad425e5819897412c7a70e72fc98427d6e568e868f50be4ab8a1675429b8da807d353eca46fbed1de", 0xd2}, {&(0x7f0000001600)="f02d55b51ac6febcbde497289c3fd3817f6abe58b86e2c35ff197f238e7e2871b2f844ce055006f9b02a5fa30f5f79e0f87f5eda81f58f2af7b7be7d85efb3259e2c735285834f", 0x47}, {&(0x7f0000001780)="727d694d53ccea0b7dda00cd9b54656f6cbcb6c26eae57b195602885e53cbaaad6d538b9f7319c000c7e2a0710d06e250c5b999940400dc76a7553f8b9aea557511edbd344fbb4f004a8237402b3c1b0474a6d", 0x53}], 0x3, 0x0, 0x0, 0x80}, 0x2}, {{&(0x7f0000001a40)=@ethernet={0x6, @random="e83eef62245a"}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000045c0)="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", 0x1000}, {&(0x7f0000001c40)="fcea7cbd0ffd59262c85d3473709f1f139f1692572356bb9434a1303f5521a3f32b2613f6aa9050ac87e87f50136c69c6ad471bee999fa58984752afce96e2469bc0aa445ca974c5a45f9057753743603b6ac6dbd941581f433ef631a980a37b6dc97fd3df33548a2daa849d5aa6bb938fceaf036104a1db20cf4e8787418aa78df10dacb692ecb5a49b8217727021a47cc300a1ed", 0x95}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000700e46080763081ddb4c2d031b07c07000000810000002ba6a7d51ddf9fd086ee3c267fcb0000c1cd69ed6eccd9ff5be295e4155046d14fdf983771e09f55599034c8af6e50175729810a315b6bd14015c1926b"], 0x20, 0x20000000}, 0x75e}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001e40)="bc1e91978b36af81021b583ed3be6101d5b3da74aac9312b011e68dbd4bb071031604882f6957998f69a21c0eade6f4aa87fba1239584b4fc3e36cf04fd9213fc968edef02adca6592da135ec49049c3467df86474da7dcdefd2f5155ebf542f2689a2021e207184cc8a4728e6156a08120246b18ebd046931114250ae7ddb6b60d2d3859e4e3586b536", 0x8a}, {&(0x7f00000055c0)="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", 0x1000}, {&(0x7f00000020c0)="02bca7216628657a2d52c70cd2d50c7959c49cd6b177ca00ae5c1ee4", 0x1c}], 0x3, &(0x7f00000065c0)=[{0x1010, 0x11f, 0x3ff, "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"}, {0xa8, 0x109, 0x5, "744dca106b329c5a33601f17bf73765ac0e473587ccca7c8c7cba4a6c806cf144fdd5cd45d0ab155270beab3128b614f449958b4d378be959defd9127a1ec05f5f786d6678a8ffb029a62fd0034ed17ecf6074d2f3d62ea277647d629141f918cf7a4bf6b356bc707070f34b0474c4f7d38494303f42675b8ea68e23651772ae54b9d8a82be5e8124e8b3846b2fdb320830b017b"}, {0xf0, 0x105, 0x9, "77b36016584a9975b6ec6c19a143d49ac643a256f8fb1d675022c8e4c2191e4a4279967abf027c1019beb777734af1d123e0104509c69a2f2b424b4cd4d2d446dc0e0703a2a0b053d0b852a6ab2c140d09d8b864381635ec1740f9093cb3d25717569f4e69f3e8faafc4106cef326a4a9048c85480b4f05175f4d7819974370df54a6578d7b42635ec4ebf2f61302defaa4043c137d69a3e92dbfac076d9de231921638f63174db2679ec423e8a65636b39f805f3b06bf6eec3c8f63c62b628c1f3ec8d30f4894fc9ad32fe4392756d3b252b675f63d477b13088ba64217"}, {0x28, 0x11f, 0x5, "9d8bf4217c354b8e870184a293330887e0f101b1"}, {0x88, 0x108, 0x9, "ccad863b963597ed1eab1054562eb3305a27bf3300aef92c3ea9ffdbe21ce1905d83c3fdab9cbe03f857675b60110bd5a12ad56f34f12a363f91a1237ce15786d8a5e97aa334820ea9f810ebff0b1dcdb1a16385ff9e54a14f94f1d8df983459111da54b9d3db96e8798bdd0d86500e27a"}], 0x1258, 0x24004000}, 0x3}], 0x4, 0x10) ioctl$RTC_AIE_ON(r1, 0x7001) 10:17:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x10000) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/89) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000001c0)={0x8000000020, @time, 0x0, {0x0, 0x401}, 0x35}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) unshare(0x42060000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 10:17:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000000c0)}) 10:17:32 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(r0) [ 230.469856] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.475412] binder: undelivered TRANSACTION_COMPLETE [ 230.480497] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.492246] binder: 15809:15811 transaction failed 29189/-22, size 24-8 line 3013 10:17:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='QBH@'], 0x0, 0x0, &(0x7f0000002000)}) unlink(&(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x1) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000080)=[{}], 0x0, [{}, {}, {}]}, 0xa8) set_thread_area(&(0x7f0000000300)={0x1, 0x20000800, 0x1000, 0x400, 0x2, 0x2, 0x80, 0x6, 0xffffffff00000001, 0x8000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:32 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x480, 0x2) accept(r2, &(0x7f0000000040)=@in={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x80) close(r0) [ 230.511244] binder: 15813:15824 transaction failed 29189/-22, size 0-0 line 3013 [ 230.511702] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.526325] binder: 15813:15824 transaction failed 29189/-22, size 0-0 line 3013 10:17:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10:17:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:33 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$pokeuser(0x6, r0, 0x6dfa, 0x400) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) getsockopt$inet_tcp_buf(r2, 0x6, 0x2f, &(0x7f0000000040)=""/96, &(0x7f0000000100)=0x60) [ 230.532999] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.569497] FAT-fs (loop5): Directory bread(block 2) failed [ 230.569508] FAT-fs (loop5): Directory bread(block 3) failed [ 230.569526] FAT-fs (loop5): Directory bread(block 4) failed [ 230.569536] FAT-fs (loop5): Directory bread(block 5) failed [ 230.569548] FAT-fs (loop5): Directory bread(block 6) failed [ 230.569559] FAT-fs (loop5): Directory bread(block 7) failed 10:17:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100000000000000000000000000a701e000000100000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000050000000000000043e53acb3ea5dadda36a000000000000000000f90000000000000000000000000000000000000000000026000000000000ad000000000000000000040000000000000000000000000000000000000000000000e1650000000000000000009af10c90c50f4532a63bd412c5b31116d9d1bb9487dad560ca6215c6ac7d9a"], 0x3}, 0x1}, 0x0) [ 230.569594] FAT-fs (loop5): Directory bread(block 8) failed [ 230.569651] FAT-fs (loop5): Directory bread(block 9) failed [ 230.569664] FAT-fs (loop5): Directory bread(block 10) failed [ 230.569677] FAT-fs (loop5): Directory bread(block 11) failed [ 230.589372] binder: 15837:15840 unknown command 1078477393 10:17:33 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES64], 0x3}, 0x1}, 0x0) 10:17:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) socket(0x11, 0x803, 0x7) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') [ 230.589381] binder: 15837:15840 ioctl c0306201 20000180 returned -22 [ 230.589512] binder: 15837:15840 ERROR: BC_REGISTER_LOOPER called without request [ 230.687423] FAT-fs (loop5): Directory bread(block 2) failed [ 230.687434] FAT-fs (loop5): Directory bread(block 3) failed [ 230.687525] FAT-fs (loop5): Directory bread(block 4) failed [ 230.687784] FAT-fs (loop5): Directory bread(block 5) failed [ 230.687796] FAT-fs (loop5): Directory bread(block 6) failed [ 230.687806] FAT-fs (loop5): Directory bread(block 7) failed [ 230.687842] FAT-fs (loop5): Directory bread(block 8) failed [ 230.687855] FAT-fs (loop5): Directory bread(block 9) failed 10:17:33 executing program 3: r0 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 10:17:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) [ 230.687866] FAT-fs (loop5): Directory bread(block 10) failed [ 230.687877] FAT-fs (loop5): Directory bread(block 11) failed [ 230.798512] binder: 15809:15811 transaction failed 29189/-22, size 24-8 line 3013 [ 230.810799] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.827453] FAT-fs (loop5): Directory bread(block 2) failed [ 230.827466] FAT-fs (loop5): Directory bread(block 3) failed [ 230.827478] FAT-fs (loop5): Directory bread(block 4) failed [ 230.827490] FAT-fs (loop5): Directory bread(block 5) failed [ 230.827500] FAT-fs (loop5): Directory bread(block 6) failed [ 230.827511] FAT-fs (loop5): Directory bread(block 7) failed [ 230.827549] FAT-fs (loop5): Directory bread(block 8) failed [ 230.827563] FAT-fs (loop5): Directory bread(block 9) failed [ 230.827577] FAT-fs (loop5): Directory bread(block 10) failed [ 230.827589] FAT-fs (loop5): Directory bread(block 11) failed [ 230.917753] FAT-fs (loop5): Directory bread(block 2) failed [ 230.917767] FAT-fs (loop5): Directory bread(block 3) failed [ 230.917779] FAT-fs (loop5): Directory bread(block 4) failed [ 230.917791] FAT-fs (loop5): Directory bread(block 5) failed [ 230.917802] FAT-fs (loop5): Directory bread(block 6) failed [ 230.917813] FAT-fs (loop5): Directory bread(block 7) failed [ 230.917852] FAT-fs (loop5): Directory bread(block 8) failed [ 230.917865] FAT-fs (loop5): Directory bread(block 9) failed [ 230.917878] FAT-fs (loop5): Directory bread(block 10) failed [ 230.917890] FAT-fs (loop5): Directory bread(block 11) failed [ 231.014330] binder: undelivered TRANSACTION_ERROR: 29189 [ 231.034513] IPVS: Creating netns size=2536 id=34 10:17:33 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000300)) r1 = socket$inet(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0x68b, 0x0, 0x0) 10:17:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x81, 0x80}, {0x7, 0x388e}, {0x1000, 0x200}]}) getsockname$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f0000000140)=0x1c) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:33 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x1ff, 0x9, 0x10001, 0x4, 0x3, 0x7ff}) [ 231.141933] binder: 15893:15897 transaction failed 29189/-22, size 24-8 line 3013 [ 231.158428] binder: 15893:15899 transaction failed 29189/-22, size 24-8 line 3013 [ 231.167639] binder: undelivered TRANSACTION_ERROR: 29189 [ 231.192378] binder: undelivered TRANSACTION_ERROR: 29189 10:17:33 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(r0) [ 231.398607] binder: 15837:15913 got reply transaction with no transaction stack [ 231.406188] binder: 15837:15913 transaction failed 29201/-71, size 0-0 line 2921 [ 231.520434] binder_alloc: binder_alloc_mmap_handler: 15837 20001000-20004000 already mapped failed -16 [ 231.533244] binder: BINDER_SET_CONTEXT_MGR already set [ 231.533258] binder: 15837:15915 unknown command 1078477393 [ 231.533265] binder: 15837:15915 ioctl c0306201 20000180 returned -22 [ 231.537180] binder: 15837:15916 ERROR: BC_REGISTER_LOOPER called without request [ 231.547434] binder: 15837:15916 got reply transaction with no transaction stack [ 231.547478] binder: 15837:15916 transaction failed 29201/-71, size 0-0 line 2921 [ 231.573233] binder: 15837:15913 ioctl 40046207 0 returned -16 10:17:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000080)="69fd3d69e26064ad6163e362e9607f8784f51a04") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="22e65d8d622f5ee1e099e2335cfa774c280886cbcaac8c7c5286c8d33db981d1b0514e6011961730984e74"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000f2ffffff0000000000002f78a566e34f5a6d0000004000000000000019776c507ebf7895720f10000001008300", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) 10:17:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r1) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7fffffff, 0x20000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0xfffffffffffffffe}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000280)=""/68, 0x44) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/144) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000002c0)={"69476d0000000000000000050000000000000000ea00"}, &(0x7f0000000300)=0x1e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '\'}(self[)\x00'}, &(0x7f00000000c0)=""/228, 0xe4) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x43) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00003c7ff4)={0x10}, 0x16a, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYPTR=&(0x7f0000001440)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYPTR, @ANYBLOB="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", @ANYRES32=r1, @ANYRESOCT, @ANYPTR, @ANYPTR, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC=r1, @ANYRESHEX], @ANYRESHEX=r1]}, 0x1}, 0x0) 10:17:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x67ff, 0x120) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1e, &(0x7f0000000480)="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", 0xfffffffffffffe89) socket$inet6_udp(0xa, 0x2, 0x0) 10:17:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x100000000000010, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4090080}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc4, r4, 0x2, 0x70bd28, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa9c7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x804}, 0x0) setresuid(0x0, r2, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f3, &(0x7f0000000100)={"73697430000202000340000040000060", @ifru_map}) 10:17:34 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={"65716cffffffff007a000000eb00", 0x103}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000001740)=""/40, 0x28, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="730700eba73ab073"]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20000100ffd, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x7fffffff, 0x1, {0xffffffffffffffff, 0x3, 0x1f, 0x2, 0x10001}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086607, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/180) 10:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x210100, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) [ 231.648753] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.655372] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.671421] binder: 15917:15919 unknown command -1923226078 [ 231.682678] binder: 15917:15919 ioctl c0306201 20000180 returned -22 10:17:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000b88f0085c9a308909aed9edec46590fb136125034e283c86", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 231.693228] binder: 15922:15928 transaction failed 29189/-22, size 24-8 line 3013 [ 231.717478] binder: 15922:15934 transaction failed 29189/-22, size 24-8 line 3013 [ 231.725506] binder: undelivered TRANSACTION_ERROR: 29189 [ 231.725783] binder: undelivered TRANSACTION_ERROR: 29189 10:17:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x100000000000010, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4090080}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc4, r4, 0x2, 0x70bd28, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa9c7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x804}, 0x0) setresuid(0x0, r2, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f3, &(0x7f0000000100)={"73697430000202000340000040000060", @ifru_map}) 10:17:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a457a223eb208077974cd3bdd9119bdc5675e4af4c15d32f026a76a147b6d4004c76bcd083944a85f9477e2d95811769f470fd0ad0f0230c9c35ebb87be35968257b5a037e8a36dfe068069a7487810601310df20c5e6410061ae993a8239e552ebb000022a27f6ea053528a750a2f878e8150f549be103bc28bab140765e6a18e533ce92192"}, 0x96) 10:17:34 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000080)=""/101, &(0x7f0000000100)=0x65) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x10042, 0x0) [ 231.764209] binder: 15917:15919 ERROR: BC_REGISTER_LOOPER called without request [ 231.774438] binder: 15917:15919 ioctl c0306201 20000240 returned -11 [ 231.782461] binder: 15917:15919 got reply transaction with no transaction stack [ 231.791840] binder: 15917:15919 transaction failed 29201/-71, size 8256638255706958967-36873226244067343 line 2921 10:17:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x100000000000010, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4090080}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc4, r4, 0x2, 0x70bd28, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa9c7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x804}, 0x0) setresuid(0x0, r2, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f3, &(0x7f0000000100)={"73697430000202000340000040000060", @ifru_map}) 10:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 231.848166] binder: BINDER_SET_CONTEXT_MGR already set [ 231.854022] binder: 15917:15919 ioctl 40046207 0 returned -16 [ 231.860152] binder: 15917:15945 unknown command -1923226078 [ 231.860160] binder: 15917:15945 ioctl c0306201 20000180 returned -22 [ 231.863886] binder: BINDER_SET_CONTEXT_MGR already set [ 231.863897] binder: 15917:15945 ioctl 40046207 0 returned -16 [ 231.870699] binder: 15917:15960 ERROR: BC_REGISTER_LOOPER called without request [ 231.874523] binder: 15917:15960 got reply transaction with no transaction stack [ 231.874532] binder: 15917:15960 transaction failed 29201/-71, size 8256638255706958967-36873226244067343 line 2921 [ 231.885808] binder_alloc: 15917: binder_alloc_buf, no vma [ 231.885833] binder: 15956:15964 transaction failed 29189/-3, size 24-8 line 3136 [ 231.896459] FAT-fs (loop5): Directory bread(block 2) failed [ 231.896473] FAT-fs (loop5): Directory bread(block 3) failed [ 231.896485] FAT-fs (loop5): Directory bread(block 4) failed [ 231.896498] FAT-fs (loop5): Directory bread(block 5) failed [ 231.896510] FAT-fs (loop5): Directory bread(block 6) failed [ 231.896522] FAT-fs (loop5): Directory bread(block 7) failed [ 231.896564] FAT-fs (loop5): Directory bread(block 8) failed [ 231.896579] FAT-fs (loop5): Directory bread(block 9) failed [ 231.896592] FAT-fs (loop5): Directory bread(block 10) failed [ 231.896606] FAT-fs (loop5): Directory bread(block 11) failed [ 231.915463] binder: undelivered TRANSACTION_ERROR: 29189 [ 231.938071] attempt to access beyond end of device [ 231.938080] loop5: rw=536870912, want=73, limit=2 [ 231.976723] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.098347] binder: undelivered TRANSACTION_ERROR: 29201 10:17:34 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(r0) 10:17:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000176700000000000000000000000000000001000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r0, 0x100000000) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000a9b4f686ec7c303416853b039d1c244ab7bdeb31ff00db2c44e363471a49e1abb9df830e0e6e5dc94a46626a1168a6b64915ec3672c9a64f9c110438ec7f28209649a13631c92a29da78cd7f24955449ecd1f9531dc14c528827711d6b77033596fbb640ba2833f9abe30c6697732eb4b1fd4e5d9f6e26d3a0a3b3598d663ef09112b2bbb08d9e20456ae3e9e30218f514cd05b04d30f4f5b8de8a846525d5cb21bd", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000002c0)={"69476d0000000000000000050000000000000000ea00"}, &(0x7f0000000300)=0x1e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '\'}(self[)\x00'}, &(0x7f00000000c0)=""/228, 0xe4) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x43) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00003c7ff4)={0x10}, 0x16a, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYPTR=&(0x7f0000001440)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYPTR, @ANYBLOB="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", @ANYRES32=r1, @ANYRESOCT, @ANYPTR, @ANYPTR, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC=r1, @ANYRESHEX], @ANYRESHEX=r1]}, 0x1}, 0x0) 10:17:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:34 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={"65716cffffffff007a000000eb00", 0x103}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000001740)=""/40, 0x28, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="730700eba73ab073"]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20000100ffd, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x7fffffff, 0x1, {0xffffffffffffffff, 0x3, 0x1f, 0x2, 0x10001}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086607, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/180) 10:17:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x1c}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x19}}, 0xffff, 0x4, 0x3ff, 0x500, 0x400, 0x2000040, r2}) 10:17:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="68c2b3ef52dbd6e2e9ef9d8aaefa80ade3f33715d83a066f831a020cad6570b54b6cdb7f7520adeff8fe2ca01902f5ae43736c7b70e6b17220c3b11707e06c90ca0ad18f9bf59712c7baf783dad33099dcbba46f3b81f173cd274e1556889337c5283da433238b3fce5baf7b29153a5bc5e86bd76342e3f795c12fcd7c62d6f3c012b703a4656dbed8522d5354"], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f0000000040)="c492812027f10a2794c75ffeb05b71b19c9e8ea31b", 0x15, 0x8000, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a457a223eb208077974cd3bdd9119bdc5675e4af4c15d32f026a76a147b6d4004c76bcd083944a85f9477e2d95811769f470fd0ad0f0230c9c35ebb87be35968257b5a037e8a36dfe068069a7487810601310df20c5e6410061ae993a8239e552ebb000022a27f6ea053528a750a2f878e8150f549be103bc28bab140765e6a18e533ce92192"}, 0x96) 10:17:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b80000000200010000000057c00000000000000001e000000100000000000000000000000000000000000000000a000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 232.239939] binder: 15988:16002 unknown command -273431960 [ 232.248676] FAT-fs (loop5): Directory bread(block 2) failed 10:17:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) ptrace$peekuser(0x3, r0, 0x9) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0080ca0000005c00"]], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0x3, &(0x7f00000bfff0)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="f20a4201f8a46dbe92c59d373f", @ANYPTR64], @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES32=r0], @ANYRES32=r0, @ANYRES64]}, 0x1, 0x0, 0x0, 0x2}, 0xfffffffffffffffc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x82, 0x0) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x82, 0x3, 0x2}}, 0x14) [ 232.248689] FAT-fs (loop5): Directory bread(block 3) failed [ 232.248702] FAT-fs (loop5): Directory bread(block 4) failed [ 232.248714] FAT-fs (loop5): Directory bread(block 5) failed [ 232.248725] FAT-fs (loop5): Directory bread(block 6) failed 10:17:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) sendfile(r1, r0, &(0x7f0000000000), 0x349d86d3) [ 232.248736] FAT-fs (loop5): Directory bread(block 7) failed [ 232.248774] FAT-fs (loop5): Directory bread(block 8) failed [ 232.248789] FAT-fs (loop5): Directory bread(block 9) failed [ 232.248802] FAT-fs (loop5): Directory bread(block 10) failed [ 232.248815] FAT-fs (loop5): Directory bread(block 11) failed [ 232.252423] attempt to access beyond end of device 10:17:34 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={"65716cffffffff007a000000eb00", 0x103}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000001740)=""/40, 0x28, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="730700eba73ab073"]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20000100ffd, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x7fffffff, 0x1, {0xffffffffffffffff, 0x3, 0x1f, 0x2, 0x10001}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086607, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/180) 10:17:34 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r0, 0x0, 0x0, 0x4) [ 232.252430] loop5: rw=536870912, want=73, limit=2 [ 232.393463] binder: 15988:16002 ioctl c0306201 20000240 returned -22 [ 232.403453] binder: 16019:16025 transaction failed 29189/-22, size 24-8 line 3013 [ 232.405579] FAT-fs (loop5): Directory bread(block 2) failed [ 232.405593] FAT-fs (loop5): Directory bread(block 3) failed [ 232.405605] FAT-fs (loop5): Directory bread(block 4) failed [ 232.405617] FAT-fs (loop5): Directory bread(block 5) failed [ 232.405629] FAT-fs (loop5): Directory bread(block 6) failed [ 232.405642] FAT-fs (loop5): Directory bread(block 7) failed [ 232.405680] FAT-fs (loop5): Directory bread(block 8) failed [ 232.405696] FAT-fs (loop5): Directory bread(block 9) failed [ 232.405708] FAT-fs (loop5): Directory bread(block 10) failed [ 232.405722] FAT-fs (loop5): Directory bread(block 11) failed [ 232.408147] attempt to access beyond end of device [ 232.408154] loop5: rw=536870912, want=73, limit=2 [ 232.424624] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.424714] binder: 16019:16025 transaction failed 29189/-22, size 24-8 line 3013 [ 232.462682] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.530396] binder: 15988:16002 got reply transaction with no transaction stack [ 232.538026] binder: 15988:16002 transaction failed 29201/-71, size 0-0 line 2921 [ 232.547393] binder_alloc: binder_alloc_mmap_handler: 15988 20001000-20004000 already mapped failed -16 [ 232.560407] binder: BINDER_SET_CONTEXT_MGR already set [ 232.565817] binder: 15988:16002 ioctl 40046207 0 returned -16 [ 232.566087] binder_alloc: 15988: binder_alloc_buf, no vma [ 232.566106] binder: 15988:16043 transaction failed 29189/-3, size 0-0 line 3136 [ 232.575504] binder: 15988:16043 unknown command -273431960 [ 232.575512] binder: 15988:16043 ioctl c0306201 20000240 returned -22 [ 232.579626] binder: 15988:16043 got reply transaction with no transaction stack [ 232.579634] binder: 15988:16043 transaction failed 29201/-71, size 0-0 line 2921 [ 232.583771] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.583795] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.583816] binder: send failed reply for transaction 707 to 15988:16002 [ 232.584883] binder: undelivered TRANSACTION_COMPLETE [ 232.584889] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.636660] FAT-fs (loop5): Directory bread(block 2) failed [ 232.636671] FAT-fs (loop5): Directory bread(block 3) failed [ 232.636681] FAT-fs (loop5): Directory bread(block 4) failed [ 232.636691] FAT-fs (loop5): Directory bread(block 5) failed [ 232.636701] FAT-fs (loop5): Directory bread(block 6) failed [ 232.636712] FAT-fs (loop5): Directory bread(block 7) failed [ 232.636747] FAT-fs (loop5): Directory bread(block 8) failed [ 232.636759] FAT-fs (loop5): Directory bread(block 9) failed [ 232.636770] FAT-fs (loop5): Directory bread(block 10) failed [ 232.636783] FAT-fs (loop5): Directory bread(block 11) failed [ 232.639458] attempt to access beyond end of device [ 232.639465] loop5: rw=536870912, want=73, limit=2 [ 232.707863] binder: undelivered TRANSACTION_ERROR: 29201 10:17:35 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(r0) 10:17:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8080, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x62, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x0, 'sh\x00', 0x10, 0x7ff, 0x3e}, 0x2c) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a457a223eb208077974cd3bdd9119bdc5675e4af4c15d32f026a76a147b6d4004c76bcd083944a85f9477e2d95811769f470fd0ad0f0230c9c35ebb87be35968257b5a037e8a36dfe068069a7487810601310df20c5e6410061ae993a8239e552ebb000022a27f6ea053528a750a2f878e8150f549be103bc28bab140765e6a18e533ce92192"}, 0x96) 10:17:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x6, 0x70, 0x1, 0x7, 0x2, 0x4320, 0x0, 0x8000, 0x40404, 0x8, 0x5, 0x1, 0xed, 0x4, 0x5, 0x800, 0x8, 0x1, 0x3, 0x7, 0x3, 0x2, 0x8, 0x8001, 0x2, 0x100, 0xfffffffffffffffb, 0x4, 0x7, 0x3, 0x5, 0x20, 0x6, 0x2, 0x1, 0x90df, 0x0, 0x6, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x2000, 0x58, 0x2, 0x7, 0x1, 0x4, 0x3}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x100, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="706f7369785f61636c5f616363657373380b72e14e60a3a2ead40608cf015100", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)={0x7f, 0x4, 0x6}) 10:17:35 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r0, 0x0, 0x0, 0x4) 10:17:35 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={"65716cffffffff007a000000eb00", 0x103}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000001740)=""/40, 0x28, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="730700eba73ab073"]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20000100ffd, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x7fffffff, 0x1, {0xffffffffffffffff, 0x3, 0x1f, 0x2, 0x10001}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086607, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/180) 10:17:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) finit_module(r1, &(0x7f00000000c0)="3a73656375726974798d776c616e31656d313a7b2c6367726f7570776c616e315b5c00", 0x1) r2 = syz_open_pts(0xffffffffffffffff, 0x208880) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0x0, 0xa0c}) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000300)={'broute\x00'}, &(0x7f0000000140)=0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xffffff87, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1263484000000000000000006d000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) 10:17:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 10:17:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1173fc07"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a457a223eb208077974cd3bdd9119bdc5675e4af4c15d32f026a76a147b6d4004c76bcd083944a85f9477e2d95811769f470fd0ad0f0230c9c35ebb87be35968257b5a037e8a36dfe068069a7487810601310df20c5e6410061ae993a8239e552ebb000022a27f6ea053528a750a2f878e8150f549be103bc28bab140765e6a18e533ce92192"}, 0x96) 10:17:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 233.110152] binder: 16055:16060 ERROR: BC_REGISTER_LOOPER called without request [ 233.115407] binder: 16061:16067 transaction failed 29189/-22, size 24-8 line 3013 [ 233.125530] binder: undelivered TRANSACTION_ERROR: 29189 [ 233.131266] binder: release 16055:16060 transaction 714 out, still active 10:17:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x1, 0x9}) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 233.131278] binder: undelivered TRANSACTION_COMPLETE [ 233.131358] binder: 16055:16060 transaction failed 29189/0, size 0-0 line 2945 [ 233.131364] binder: send failed reply for transaction 714, target dead 10:17:35 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r0, 0x0, 0x0, 0x4) 10:17:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:35 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={"65716cffffffff007a000000eb00", 0x103}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000001740)=""/40, 0x28, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="730700eba73ab073"]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20000100ffd, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x7fffffff, 0x1, {0xffffffffffffffff, 0x3, 0x1f, 0x2, 0x10001}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086607, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/180) [ 233.131839] binder_alloc: binder_alloc_mmap_handler: 16055 20001000-20004000 already mapped failed -16 [ 233.133469] binder: BINDER_SET_CONTEXT_MGR already set [ 233.133477] binder: 16055:16060 ioctl 40046207 0 returned -16 [ 233.133536] binder_alloc: 16055: binder_alloc_buf, no vma [ 233.133701] binder: 16055:16073 transaction failed 29189/-3, size 0-0 line 3136 [ 233.137200] binder: 16055:16060 ERROR: BC_REGISTER_LOOPER called without request [ 233.137227] binder: undelivered TRANSACTION_ERROR: 29189 [ 233.202727] FAT-fs (loop5): Directory bread(block 2) failed [ 233.202742] FAT-fs (loop5): Directory bread(block 3) failed [ 233.202755] FAT-fs (loop5): Directory bread(block 4) failed [ 233.202768] FAT-fs (loop5): Directory bread(block 5) failed [ 233.202780] FAT-fs (loop5): Directory bread(block 6) failed [ 233.202791] FAT-fs (loop5): Directory bread(block 7) failed [ 233.202831] FAT-fs (loop5): Directory bread(block 8) failed [ 233.202845] FAT-fs (loop5): Directory bread(block 9) failed [ 233.202858] FAT-fs (loop5): Directory bread(block 10) failed [ 233.202870] FAT-fs (loop5): Directory bread(block 11) failed [ 233.215013] attempt to access beyond end of device [ 233.215020] loop5: rw=536870912, want=73, limit=2 [ 233.267491] binder_alloc: 16055: binder_alloc_buf, no vma [ 233.267511] binder: 16089:16092 transaction failed 29189/-3, size 24-8 line 3136 [ 233.279503] binder_alloc: 16055: binder_alloc_buf, no vma [ 233.279520] binder: 16089:16092 transaction failed 29189/-3, size 24-8 line 3136 [ 233.283393] binder: BINDER_SET_CONTEXT_MGR already set [ 233.283401] binder: 16078:16084 ioctl 40046207 0 returned -16 [ 233.283466] binder: 16078:16084 unknown command 133985041 [ 233.283472] binder: 16078:16084 ioctl c0306201 20000040 returned -22 [ 233.283531] binder: 16078:16084 ERROR: BC_REGISTER_LOOPER called without request [ 233.456933] FAT-fs (loop5): Directory bread(block 2) failed [ 233.456948] FAT-fs (loop5): Directory bread(block 3) failed [ 233.456963] FAT-fs (loop5): Directory bread(block 4) failed [ 233.456975] FAT-fs (loop5): Directory bread(block 5) failed [ 233.456987] FAT-fs (loop5): Directory bread(block 6) failed [ 233.456999] FAT-fs (loop5): Directory bread(block 7) failed [ 233.457039] FAT-fs (loop5): Directory bread(block 8) failed [ 233.457053] FAT-fs (loop5): Directory bread(block 9) failed [ 233.457067] FAT-fs (loop5): Directory bread(block 10) failed [ 233.457079] FAT-fs (loop5): Directory bread(block 11) failed [ 233.521497] attempt to access beyond end of device [ 233.521504] loop5: rw=536870912, want=73, limit=2 [ 233.535016] binder: undelivered TRANSACTION_ERROR: 29189 [ 233.540468] binder: undelivered TRANSACTION_ERROR: 29189 [ 233.546198] binder: undelivered TRANSACTION_ERROR: 29190 10:17:36 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="0b75cb3e5f8415bc08596002fff8dcb2ccfc490e7abe465674110cc14a79fde32562418239da5af3ad7d01a7e971096571d886fd7ff3c85045f5048387a318d248b65eaff3c1f5b122c229d5ef6afa02b8ff0dfb23176a423f1cdb0c88aff695fd0aff21d92a197dc66364192d71da2a3b1be4427041160030d2dee650d347c2a81c2f93185e1c2ddd38a211e4d6bbe368cdf54d253709fe54160616c28ea342efe97c8ee74c15") sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000000)) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) 10:17:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:36 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r0, 0x0, 0x0, 0x4) 10:17:36 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="706f7369785f61636c5f616363657373380b72e14e60a3a2ead40608cf015100", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)={0x7f, 0x4, 0x6}) 10:17:36 executing program 2: r0 = dup(0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xff) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1a) 10:17:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 233.991765] binder: 16126:16133 transaction failed 29189/-22, size 24-8 line 3013 [ 234.004310] FAT-fs (loop5): Directory bread(block 2) failed [ 234.014026] binder: 16078:16142 got reply transaction with no transaction stack [ 234.014036] binder: 16078:16142 transaction failed 29201/-71, size 0-0 line 2921 [ 234.029441] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.029601] binder: 16126:16133 transaction failed 29189/-22, size 24-8 line 3013 [ 234.061210] FAT-fs (loop5): Directory bread(block 3) failed [ 234.063025] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.080525] FAT-fs (loop5): Directory bread(block 4) failed [ 234.095687] FAT-fs (loop5): Directory bread(block 5) failed [ 234.104315] FAT-fs (loop5): Directory bread(block 6) failed [ 234.110192] FAT-fs (loop5): Directory bread(block 7) failed [ 234.116432] FAT-fs (loop5): Directory bread(block 8) failed [ 234.122527] FAT-fs (loop5): Directory bread(block 9) failed [ 234.128376] FAT-fs (loop5): Directory bread(block 10) failed [ 234.130605] binder: 16078:16158 unknown command 133985041 [ 234.130614] binder: 16078:16158 ioctl c0306201 20000040 returned -22 [ 234.130638] binder: 16078:16159 ERROR: BC_REGISTER_LOOPER called without request [ 234.154917] FAT-fs (loop5): Directory bread(block 11) failed [ 234.162782] binder: 16078:16162 got reply transaction with no transaction stack [ 234.171866] attempt to access beyond end of device [ 234.171873] loop5: rw=536870912, want=73, limit=2 [ 234.191073] binder: 16078:16162 transaction failed 29201/-71, size 0-0 line 2921 10:17:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000140)={@loopback, @remote, 0x0}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000006c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000780)={{{@in=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000880)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000007d00)={@local, 0x0}, &(0x7f0000007d40)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000007d80)={'syzkaller1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000007e80)={@mcast1, 0x0}, &(0x7f0000007ec0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000008380)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000008440)={@local, @broadcast, 0x0}, &(0x7f0000008480)=0xc) r16 = accept4$packet(0xffffffffffffffff, &(0x7f00000084c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008500)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008600)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@dev}}, &(0x7f0000008700)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008740)={'bond_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008780)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000008880)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000088c0)={0x0, @empty, @loopback}, &(0x7f0000008900)=0xc) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000008940)={"79ffb313b500000000000100", 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008980)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000008a80)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000008ac0)={{{@in6=@ipv4={[], [], @remote}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@broadcast}}, &(0x7f0000008bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000008ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000009840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000009800)={&(0x7f0000008f00)={0x8d4, r3, 0x20, 0x70bd29, 0x25dfdbfc, {0x1}, [{{0x8, 0x1, r4}, {0x224, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x29}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x86}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5fc}}, {0x8, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1b8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x54, 0x4, [{0x1, 0x401, 0x59, 0x5}, {0x7f, 0x1, 0x8, 0x2}, {0x7, 0x8, 0x4, 0x9e9}, {0x100, 0x0, 0x8000, 0x5}, {0x8000, 0x7, 0xdc, 0x1}, {0x6, 0x2, 0xfffffffffffffff8}, {0xd7f4, 0x5, 0x9, 0xffffffff}, {0x4, 0x9, 0x7, 0x8001}, {0x4, 0x0, 0x2, 0xfe}, {0x6da, 0x1, 0x84ab, 0x4}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r17}, {0x164, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r18}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3f}}, {0x8, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0x3f, 0x7, 0x9, 0x40}, {0x4, 0x0, 0xfff, 0x100000000}, {0x9, 0xf7e, 0x20004000, 0xffff}, {0xc8, 0x80, 0xffff, 0x3}, {0x7, 0x4, 0x7fffffff, 0xffffffffffffb031}, {0x8, 0x81, 0x100, 0xffffffffffff058d}, {0xc1, 0x8d, 0x100000000000, 0x401}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0xf4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x53b}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x45f}}}]}}, {{0x8, 0x1, r22}, {0x1a4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xdc97}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r25}}}]}}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000001e89ffea10d093c9000000000000000000000000000000000000e606003ab9fa03f4aec17b0467113343189994fd88c3a3594bfc98e92818c9b844dcc62bf2bca71aa56b5cbf8bbf4480f7eb3591160cae2505140a47122deea4237beb972b9074ae4f68d52fcf8820044f4302bf806bca1cef369b09d839a3a39410d91ea558acd24cd31ff9511e47f761d1115cdb55228e75a610a73f8b1da00b600e33b732aea68763ebf1bdbe83837a60272c2407ff59f244d8a04ab70861168bc735a5f2b48bc7c055780f35cfcf", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) 10:17:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00000000a8edc0ad", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:36 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(0xffffffffffffffff, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(r0) 10:17:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0xb, 0xa, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000080)={0xfffffffffffffffb, 0xfffffffffffff775, 0xb6, 0x58}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) finit_module(r0, &(0x7f0000000000)=']\x00', 0x0) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000100000000000ff010000000000000000000000000001e00000010000000000000000000000000000000000001a000a9b000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) pause() 10:17:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:36 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="706f7369785f61636c5f616363657373380b72e14e60a3a2ead40608cf015100", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)={0x7f, 0x4, 0x6}) 10:17:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:36 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r0, 0x0, 0x0, 0x4) 10:17:36 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 234.287801] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.296864] binder: undelivered TRANSACTION_ERROR: 29201 10:17:36 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r0, 0x0, 0x0, 0x4) 10:17:36 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 234.352398] binder: 16168:16183 got transaction with invalid offset (0, min 0 max 24) or object. [ 234.356701] FAT-fs (loop5): Directory bread(block 2) failed [ 234.356715] FAT-fs (loop5): Directory bread(block 3) failed [ 234.356728] FAT-fs (loop5): Directory bread(block 4) failed [ 234.356742] FAT-fs (loop5): Directory bread(block 5) failed [ 234.356756] FAT-fs (loop5): Directory bread(block 6) failed 10:17:36 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:36 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:36 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 234.356770] FAT-fs (loop5): Directory bread(block 7) failed [ 234.356809] FAT-fs (loop5): Directory bread(block 8) failed [ 234.356823] FAT-fs (loop5): Directory bread(block 9) failed 10:17:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634842349eb3ecf24579b2ebdad8aa35b46df445703c47b0a38cd9c08255863ff64e83b4f9323653632bc0a31dddc9e36038136490daca6d69cb871f0ba38f4d1d2d565b4dbd5f83be2799ccb85ee40d3e6729477809c1b90c2c132f6341820f7da641e283b32242e1318ee53d5bdf5fb6e5aac01df95033315aa45992d874d8ae79f970ff96fe487ed743160e8842b49568f315960edc4785933f18494bafaccbca4003f1abf5a6ce95d02352a171f17aaffc3359c0a8cd3c4ffcdc2ff97b53f84513652d6f97d3227e0ed8adc69184020fc07f202186c9d45ed213e84f87d5de9392258552a61f209a72d63115"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b630000210c5611dc076ec165e3b9b161b441e751e6de505c26f95468561f42ecfc4edad4ad34d27f7e1b14079deb2adbd4d3953c4a"], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = dup2(r0, r1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)={0x80000000000, {{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x1, [{{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x110) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x5, 0x0, 0x8, 0x8}) r2 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ftruncate(r1, 0x5) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) [ 234.356835] FAT-fs (loop5): Directory bread(block 10) failed [ 234.356847] FAT-fs (loop5): Directory bread(block 11) failed [ 234.360532] attempt to access beyond end of device [ 234.360539] loop5: rw=536870912, want=73, limit=2 [ 234.364703] binder: 16185:16187 ERROR: BC_REGISTER_LOOPER called without request [ 234.391369] binder: 16185:16187 ioctl 8933 20008740 returned -22 [ 234.392284] binder: release 16185:16187 transaction 727 out, still active [ 234.392290] binder: undelivered TRANSACTION_COMPLETE [ 234.392379] binder: 16185:16187 transaction failed 29189/0, size 0-0 line 2945 [ 234.392386] binder: send failed reply for transaction 727, target dead [ 234.392896] binder_alloc: binder_alloc_mmap_handler: 16185 20001000-20004000 already mapped failed -16 [ 234.394099] binder: BINDER_SET_CONTEXT_MGR already set [ 234.394106] binder: 16185:16187 ioctl 40046207 0 returned -16 [ 234.394345] binder_alloc: 16185: binder_alloc_buf, no vma [ 234.394365] binder: 16185:16193 transaction failed 29189/-3, size 0-0 line 3136 [ 234.395544] binder: 16185:16187 ERROR: BC_REGISTER_LOOPER called without request [ 234.463131] binder: 16185:16194 ioctl 8933 20008740 returned -22 [ 234.490386] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.490414] binder: undelivered TRANSACTION_ERROR: 29190 [ 234.494304] FAT-fs (loop5): Directory bread(block 2) failed [ 234.494319] FAT-fs (loop5): Directory bread(block 3) failed [ 234.494332] FAT-fs (loop5): Directory bread(block 4) failed [ 234.494346] FAT-fs (loop5): Directory bread(block 5) failed [ 234.494360] FAT-fs (loop5): Directory bread(block 6) failed [ 234.494374] FAT-fs (loop5): Directory bread(block 7) failed [ 234.494441] FAT-fs (loop5): Directory bread(block 8) failed [ 234.494460] FAT-fs (loop5): Directory bread(block 9) failed [ 234.494477] FAT-fs (loop5): Directory bread(block 10) failed [ 234.494494] FAT-fs (loop5): Directory bread(block 11) failed [ 234.498458] attempt to access beyond end of device [ 234.498466] loop5: rw=536870912, want=73, limit=2 [ 234.547680] binder: 16217:16222 unknown command 1112040209 [ 234.547689] binder: 16217:16222 ioctl c0306201 20000180 returned -22 [ 234.547772] binder: 16217:16222 ERROR: BC_REGISTER_LOOPER called without request [ 234.745356] binder: 16168:16183 transaction failed 29201/-22, size 24-8 line 3199 [ 234.759687] binder: 16168:16183 got transaction with invalid offset (0, min 0 max 24) or object. [ 234.768818] binder: 16168:16183 transaction failed 29201/-22, size 24-8 line 3199 [ 234.768939] binder: undelivered TRANSACTION_ERROR: 29201 10:17:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)=""/80, &(0x7f0000000280)=0x50) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000002c0)) ftruncate(r3, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:37 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 234.812154] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.833396] binder: BINDER_SET_CONTEXT_MGR already set [ 234.840307] binder: 16235:16237 ioctl 40046207 0 returned -16 [ 234.850318] binder: BINDER_SET_CONTEXT_MGR already set [ 234.855830] binder: 16235:16237 ioctl 40046207 0 returned -16 10:17:37 executing program 2: r0 = dup(0xffffffffffffff9c) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'syzkaller0\x00', 0x100000000}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000000000db740846eb998bf70100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:37 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='posix_acl_access\x00', 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x400400, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000380)={@rand_addr=0x5b, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000280)={0x10000, 0x5, 0x2, 'queue0\x00', 0x4}) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000100)=""/107, &(0x7f0000000080)=0x6b) 10:17:37 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:37 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:37 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:37 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 235.283627] binder: 16255:16259 got transaction with invalid offset (0, min 0 max 24) or object. [ 235.308492] FAT-fs (loop5): Directory bread(block 2) failed [ 235.308506] FAT-fs (loop5): Directory bread(block 3) failed 10:17:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="116348403276374a5cb3fcbdb5ee1daba5768ac9e10f4323f960bceb3a0b959e9048ea7257dccc613058acaa2ff06d7e0ef73eacf148817f4dd3f7ccee417dbe24b44ee24b3d921e7a07c7cdfacb2943dda9e8fd4937504e864b1e6456a4ec75327c07575933ba92dace8307a83e40d8f75ee5f514a30fd39ab0d7fb21e90784e63b966714585703a78337d8970e2813cbc71db99b84ba22fec493e8c7d9cbba7764046b5bd0d98c31f8c127498975494a3dee761d905435275e70378a93e92dbbbf82e2400a25865ea2e251aa9bff1912e8108d1b4474e5290d10"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getpeername$unix(r2, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:37 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000400)={0x4, 0x80000000, 0xfffffff, 0x8, 0x80000001, 0x7fff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in=@multicast1=0xe0000001, 0x4e20, 0x8, 0x4e22, 0x8, 0x2, 0xa0, 0xa0, 0xff, r1, r2}, {0xbf, 0x9, 0x6, 0x7, 0x8, 0x3, 0xfffffffffffffde6, 0x1}, {0x7fff, 0xfff, 0xfff, 0x2}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in=@broadcast=0xffffffff, 0x4d3, 0x7f}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3500, 0x3, 0x3, 0xa3, 0x5, 0x800, 0x2}}, 0xe8) sendto$inet(r0, &(0x7f0000000440)="56f0fe4eeee7f9b23c1759687ae24ce101d077dcc0117d081174a813f30da29b9f3e3682b310e771a608fc7b2294429ec05bd71bb40f6119b4e93fcbbed49354f5d34d374d658e6d8edbf1dc11a90c01757ce0790aa909930b0bb296182b9ab1c39161c447382354e23651e4afbaecf30a62faede24fed8125ba59b506cfba0eb903da04f35cf8c974984947d7ab2b5947d90a60ab6bfa174193ddf48d1d04881dde5713f626beebf63abdbd9177419ccfa5eb0f547fe76e0e9cfe158caaaf28f8421189fd0290ed29f7dbe0e927aa8d8fb185bfbed17e20a5d52b0194bf1e6f40929889a4b7313c", 0xe8, 0x20004000, &(0x7f0000000040)={0x2, 0x4e22}, 0x10) socketpair(0x8, 0x5, 0x3ff, &(0x7f0000000540)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f00000006c0)=ANY=[]}, 0x1}, 0x0) 10:17:37 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00000000a8edc0ad", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:37 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r0, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(0xffffffffffffffff) [ 235.308518] FAT-fs (loop5): Directory bread(block 4) failed [ 235.308530] FAT-fs (loop5): Directory bread(block 5) failed [ 235.308543] FAT-fs (loop5): Directory bread(block 6) failed [ 235.308556] FAT-fs (loop5): Directory bread(block 7) failed [ 235.308596] FAT-fs (loop5): Directory bread(block 8) failed 10:17:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x101000) signalfd4(r0, &(0x7f0000000040)={0x2}, 0x8, 0x80004) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{}, {0x9}}) open$dir(&(0x7f0000000000)='./file0\x00', 0x501000, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x100) [ 235.308611] FAT-fs (loop5): Directory bread(block 9) failed [ 235.308623] FAT-fs (loop5): Directory bread(block 10) failed 10:17:37 executing program 2: exit_group(0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:37 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r0, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(0xffffffffffffffff) 10:17:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:37 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x420040, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000440)) socketpair$inet(0x2, 0x80e, 0x1000003, &(0x7f00000004c0)={0xffffffffffffffff}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') write$P9_RFLUSH(r2, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000380)=0xfffffd8e) getpeername$unix(r2, &(0x7f0000000540), &(0x7f0000000280)=0xfffffffffffffe54) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='irlan0\x00', 0xa08f}) ioctl$LOOP_SET_STATUS64(r2, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x18000000008, 0x0, 0x1000000000000, 0xfffffffffffffffe, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b10550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b410000000000806662665ed469956700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee4717a1b", [0x0, 0xfffffffffffffffc]}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000140)) 10:17:37 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 235.308635] FAT-fs (loop5): Directory bread(block 11) failed [ 235.311468] attempt to access beyond end of device [ 235.311475] loop5: rw=536870912, want=73, limit=2 [ 235.339409] binder: 16217:16222 got reply transaction with no transaction stack [ 235.339419] binder: 16217:16222 transaction failed 29201/-71, size 0-0 line 2921 [ 235.346299] binder: 16217:16271 unknown command 1112040209 [ 235.346309] binder: 16217:16271 ioctl c0306201 20000180 returned -22 [ 235.352337] binder: 16217:16222 ERROR: BC_REGISTER_LOOPER called without request [ 235.369780] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.395314] binder: 16279:16284 transaction failed 29189/-22, size 24-8 line 3013 [ 235.395752] binder: undelivered TRANSACTION_ERROR: 29189 [ 235.429969] binder: 16288:16297 got transaction to invalid handle [ 235.429980] binder: 16288:16297 transaction failed 29201/-22, size -6148442426445079465--6035114809007149009 line 3013 [ 235.430064] binder: 16288:16297 ERROR: BC_REGISTER_LOOPER called without request [ 235.515887] FAT-fs (loop5): Directory bread(block 2) failed [ 235.515902] FAT-fs (loop5): Directory bread(block 3) failed [ 235.515914] FAT-fs (loop5): Directory bread(block 4) failed [ 235.515926] FAT-fs (loop5): Directory bread(block 5) failed [ 235.515937] FAT-fs (loop5): Directory bread(block 6) failed [ 235.515949] FAT-fs (loop5): Directory bread(block 7) failed [ 235.515985] FAT-fs (loop5): Directory bread(block 8) failed [ 235.515998] FAT-fs (loop5): Directory bread(block 9) failed [ 235.516009] FAT-fs (loop5): Directory bread(block 10) failed [ 235.516021] FAT-fs (loop5): Directory bread(block 11) failed [ 235.518580] attempt to access beyond end of device 10:17:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/185) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:38 executing program 6: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0xb6a, 0x2, 0x200, 0x9, 0x800}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140)) fcntl$addseals(r0, 0x409, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000340)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0xffffff43) syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400)="3e9e0c018927ab2ebea100495001c9b69ba93de6fe1de05bbdab95f8f68a0b279ba915e2dc3005595ac8dfab95295e0a9f927abec8690fe7efbae0b1b9bdc8012ed2fe85828101a549fc", 0x4a, 0xbb}], 0x0, &(0x7f00000005c0)=ANY=[]) 10:17:38 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:38 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r0, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1004000000016) close(0xffffffffffffffff) 10:17:38 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 235.518587] loop5: rw=536870912, want=73, limit=2 [ 235.699624] binder: 16255:16259 transaction failed 29201/-22, size 24-8 line 3199 [ 235.710736] binder: 16255:16259 got transaction with invalid offset (0, min 0 max 24) or object. [ 235.710832] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.725250] binder: 16255:16259 transaction failed 29201/-22, size 24-8 line 3199 [ 235.741762] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.793941] binder: 16340:16345 got transaction with invalid offset (0, min 0 max 24) or object. [ 235.806066] binder: 16340:16345 transaction failed 29201/-22, size 24-8 line 3199 [ 235.817014] loop6: p1 p2 p3 p4 < > [ 235.823049] FAT-fs (loop5): Directory bread(block 2) failed [ 235.823064] FAT-fs (loop5): Directory bread(block 3) failed [ 235.823078] FAT-fs (loop5): Directory bread(block 4) failed [ 235.823092] FAT-fs (loop5): Directory bread(block 5) failed [ 235.823107] FAT-fs (loop5): Directory bread(block 6) failed [ 235.823128] FAT-fs (loop5): Directory bread(block 7) failed [ 235.823180] FAT-fs (loop5): Directory bread(block 8) failed [ 235.823196] FAT-fs (loop5): Directory bread(block 9) failed [ 235.823218] FAT-fs (loop5): Directory bread(block 10) failed [ 235.823242] FAT-fs (loop5): Directory bread(block 11) failed [ 235.826178] attempt to access beyond end of device [ 235.826186] loop5: rw=536870912, want=73, limit=2 [ 235.916023] binder: 16340:16345 got transaction with invalid offset (0, min 0 max 24) or object. [ 235.916114] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.930782] binder: 16340:16345 transaction failed 29201/-22, size 24-8 line 3199 [ 235.961887] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.981966] loop6: p1 p2 p3 p4 < > [ 236.228177] binder: 16288:16374 got reply transaction with no transaction stack [ 236.235704] binder: 16288:16374 transaction failed 29201/-71, size 0-0 line 2921 [ 236.347925] binder_alloc: binder_alloc_mmap_handler: 16288 20001000-20004000 already mapped failed -16 [ 236.359715] binder: BINDER_SET_CONTEXT_MGR already set [ 236.359731] binder: 16288:16375 got transaction to invalid handle [ 236.359744] binder: 16288:16375 transaction failed 29201/-22, size -6148442426445079465--6035114809007149009 line 3013 [ 236.363309] binder: 16288:16375 ERROR: BC_REGISTER_LOOPER called without request [ 236.389889] binder: 16288:16374 ioctl 40046207 0 returned -16 10:17:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x45, 0x2, [{0x8000, 0xd9, 0x4, 0x0, 0x0, 0x800}, {0x0, 0x40, 0x3}]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) setpriority(0x2, r2, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0xc2, 0x1f, 0x0, 0x1f, 0x5, 0xa00000000000}) 10:17:38 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40200, 0x100) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}, 0x1}, 0x0) 10:17:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="65281cde463ce96aa1e0a37d5e3f0f6ad7f0ccd326be1d977417cb4301c5f0f266da09c10e87ecc6f294c6c10cd5d13f3f3a84b71eb799116096c5ea6e19dccae9877574db340266b103d13f0aea10a4e6e4b44545f28499fd1a0802e6c3735a1054a020eaae16d6c63e67783e5cb1e93f7114052340fe528e1b4a25bf7fe922c3c99d01045f778c4dc3", 0x8a}, {&(0x7f0000000140)="ff0220a7ddc5332871ba6cc9a850da1fab8f6c", 0x13}, {&(0x7f0000000180)="26106014679b04", 0x7}, {&(0x7f00000001c0)="ef6260f10611", 0x6}, {&(0x7f0000000280)="937b256d7f794b96eefa2f806efcdfa8874e4b64cd4e576b1411bc9cecdca46b194570ec71cf96bfa9f65cfe0df8270215b65cd20448bdb28cc6c1f967111fdbac23a389ba2572dadde0f863ba2e361b94e3b46d4da4754655c342881ca934c8e9", 0x61}, {&(0x7f0000000380)="1acdf46751c6e157a1523455cc7c9a3505e22f3664a8d054f8d78f2340f8e31032393cab9bf3928b8f1cd98f085993293ada1468a16f31b5faca60283b24c4be9a9e461b63da12c59b", 0x49}], 0x6) 10:17:38 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000080)='$Z', 0x2, 0x404c080, &(0x7f0000000200)=@un=@abs, 0x80) sendto(r0, &(0x7f0000000540)="666339379bd955fbcf86cc8f112374576aabf161489a778e812c535b30ff4e2a73d338672ce13e65ac2059a1eebf00a716d2", 0x32, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'veth1\x00', 0x4}) [ 236.389904] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.389941] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.396181] binder: undelivered TRANSACTION_ERROR: 29201 10:17:38 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) [ 236.440938] binder: 16384:16390 transaction failed 29189/-22, size 24-8 line 3013 [ 236.452599] binder: 16388:16392 ERROR: BC_REGISTER_LOOPER called without request 10:17:38 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:38 executing program 6: r0 = memfd_create(&(0x7f0000000340)='^vmnet1posix_acl_access+vboxnet1\x00', 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='security.capability\x00', &(0x7f0000000100)='\x00', 0x1, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000040)='security.capability\x00', 0x14, 0x0) flistxattr(r0, &(0x7f0000000140)=""/75, 0x4b) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="090000000000000002004e2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e23ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac14141d0000000000000000000000000000000000000000000000000000000000000000000000000000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c56aad35b32985f1246206c0f02ad2041891764111449e8121a0a883f3a49a84437a8f9350fea6c189fab30b7f73082e213e0613897d5d0dd724f6d0d2dde90a6c81d3b1b4a01cef014839c9eb15041ceb67f"], 0x210) 10:17:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) setsockopt(r0, 0x400000000, 0x3, &(0x7f0000000080), 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 236.453330] binder: release 16388:16392 transaction 745 out, still active [ 236.453335] binder: undelivered TRANSACTION_COMPLETE [ 236.455051] binder: 16388:16392 transaction failed 29189/0, size 0-0 line 2945 10:17:38 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 236.455298] binder: send failed reply for transaction 745, target dead 10:17:38 executing program 6: r0 = epoll_create1(0x0) r1 = socket(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8010201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) poll(&(0x7f00000001c0), 0x6d7, 0xc9a) [ 236.455623] FAT-fs (loop5): Directory bread(block 2) failed [ 236.455639] FAT-fs (loop5): Directory bread(block 3) failed [ 236.455655] FAT-fs (loop5): Directory bread(block 4) failed [ 236.455670] FAT-fs (loop5): Directory bread(block 5) failed [ 236.455685] FAT-fs (loop5): Directory bread(block 6) failed 10:17:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) creat(&(0x7f0000000000)='./file0\x00', 0xd2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0xff, 0x3, {0x3, 0x0, 0xffffffffffffffff, 0x3, 0x4}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) fsync(r0) 10:17:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f00003c7ff4)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000200000ff010000000000000000000000000001e0000001000000000a0000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000060000000043e53acb3ea5dadda36a00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000"], 0x3}, 0x1}, 0x2a9b01601d2f07a1) 10:17:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r1, r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x1) 10:17:39 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 236.455698] FAT-fs (loop5): Directory bread(block 7) failed [ 236.455741] FAT-fs (loop5): Directory bread(block 8) failed [ 236.455757] FAT-fs (loop5): Directory bread(block 9) failed [ 236.455772] FAT-fs (loop5): Directory bread(block 10) failed [ 236.455786] FAT-fs (loop5): Directory bread(block 11) failed [ 236.469348] attempt to access beyond end of device [ 236.469356] loop5: rw=536870912, want=73, limit=2 [ 236.483644] binder: BINDER_SET_CONTEXT_MGR already set [ 236.483655] binder: 16388:16399 ioctl 40046207 0 returned -16 [ 236.484928] binder_alloc: 16388: binder_alloc_buf, no vma [ 236.484954] binder: 16388:16392 transaction failed 29189/-3, size 0-0 line 3136 [ 236.485032] binder: 16388:16399 ERROR: BC_REGISTER_LOOPER called without request [ 236.515119] binder: undelivered TRANSACTION_ERROR: 29189 [ 236.524306] binder: 16388:16410 got reply transaction with no transaction stack [ 236.524316] binder: 16388:16410 transaction failed 29201/-71, size 0-0 line 2921 [ 236.584026] FAT-fs (loop5): Directory bread(block 2) failed [ 236.584041] FAT-fs (loop5): Directory bread(block 3) failed [ 236.584054] FAT-fs (loop5): Directory bread(block 4) failed [ 236.584067] FAT-fs (loop5): Directory bread(block 5) failed [ 236.584080] FAT-fs (loop5): Directory bread(block 6) failed [ 236.584094] FAT-fs (loop5): Directory bread(block 7) failed [ 236.584137] FAT-fs (loop5): Directory bread(block 8) failed [ 236.584151] FAT-fs (loop5): Directory bread(block 9) failed [ 236.584164] FAT-fs (loop5): Directory bread(block 10) failed [ 236.584177] FAT-fs (loop5): Directory bread(block 11) failed [ 236.587175] attempt to access beyond end of device [ 236.587184] loop5: rw=536870912, want=73, limit=2 [ 236.625186] binder: undelivered TRANSACTION_ERROR: 29190 [ 236.668328] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.738145] binder: 16458:16459 ERROR: BC_REGISTER_LOOPER called without request [ 236.738257] binder: release 16458:16459 transaction 750 out, still active [ 236.738261] binder: undelivered TRANSACTION_COMPLETE [ 236.738346] binder: 16458:16459 transaction failed 29189/0, size 0-0 line 2945 [ 236.738364] binder: send failed reply for transaction 750, target dead [ 236.760622] FAT-fs (loop5): Directory bread(block 2) failed [ 236.760656] FAT-fs (loop5): Directory bread(block 3) failed [ 236.760671] FAT-fs (loop5): Directory bread(block 4) failed [ 236.760693] FAT-fs (loop5): Directory bread(block 5) failed [ 236.760723] FAT-fs (loop5): Directory bread(block 6) failed [ 236.760737] FAT-fs (loop5): Directory bread(block 7) failed [ 236.760784] FAT-fs (loop5): Directory bread(block 8) failed [ 236.760801] FAT-fs (loop5): Directory bread(block 9) failed [ 236.760816] FAT-fs (loop5): Directory bread(block 10) failed [ 236.760831] FAT-fs (loop5): Directory bread(block 11) failed [ 236.762243] binder_alloc: binder_alloc_mmap_handler: 16458 20001000-20004000 already mapped failed -16 [ 236.764888] attempt to access beyond end of device [ 236.764896] loop5: rw=536870912, want=73, limit=2 [ 236.769366] binder: BINDER_SET_CONTEXT_MGR already set [ 236.769378] binder: 16458:16459 ioctl 40046207 0 returned -16 [ 236.769627] binder_alloc: 16458: binder_alloc_buf, no vma [ 236.769649] binder: 16458:16464 transaction failed 29189/-3, size 0-0 line 3136 [ 236.772071] binder: 16458:16461 ERROR: BC_REGISTER_LOOPER called without request [ 236.777981] binder: 16458:16461 got reply transaction with no transaction stack [ 236.777990] binder: 16458:16461 transaction failed 29201/-71, size 0-0 line 2921 [ 236.779456] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.779481] binder: undelivered TRANSACTION_ERROR: 29189 [ 236.779503] binder: undelivered TRANSACTION_ERROR: 29190 [ 236.805736] blk_update_request: 528 callbacks suppressed [ 236.805746] blk_update_request: I/O error, dev loop0, sector 0 [ 236.875417] blk_update_request: I/O error, dev loop0, sector 0 [ 237.114672] binder: 16384:16474 transaction failed 29189/-22, size 24-8 line 3013 [ 237.124480] binder: undelivered TRANSACTION_ERROR: 29189 10:17:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x45, 0x2, [{0x8000, 0xd9, 0x4, 0x0, 0x0, 0x800}, {0x0, 0x40, 0x3}]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) setpriority(0x2, r2, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) accept(r0, 0x0, &(0x7f0000000000)) fcntl$setlease(r0, 0x400, 0x0) 10:17:39 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8b, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0663bbe203000000"], 0xa6bc0bad1c5886f6, 0x0, &(0x7f0000000040)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='&\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:39 executing program 0: r0 = getpgid(0xffffffffffffffff) ioprio_get$pid(0x1, r0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) fchmod(r1, 0x40) 10:17:39 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="be8289e50e272f81e13f1c8ef5be5f482916acd1afaf08de440fab9683f1504ccb9561690f5cb83f126539154401e5109952204a40463d2db12867d5e47dbe82d2fef4c982bb5c86d6", 0x49, 0xfffffffffffffffd) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800000000000005) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="fdffffffff02ffff"]], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000190001ae0e0000000000e000ff01000000ec6878ef236c162fc4cb2f0000000000000000000013e000000100000000000000000000000000000000000000000a000000000000006c0eda3caf6fa8ab7771ecfa2b5235376b8df58c4aea6407b4f8816592438fb095", @ANYRES32=0x0, @ANYBLOB="0000000000000002000000000000000000000000000000000043e53acb3ea5dadda36a00000000e80d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b688a75ffc9485ec28c4580000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x101, 0x7, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x401, 0x9, 0x56a3f6e0, 0x8, 0x9ec, 0xfffffffffffffffd, 0x7, 0x1, 0xa74, 0x8, 0x7, 0xff, 0x8001, 0x4, 0x35, 0x4e2, 0x10001, 0xe8, 0x2, 0x0, 0x9, 0x8000, 0x7, 0x1, 0x8001, 0x562f, 0x80000001, 0x9, 0x0, 0x200, 0x0, @perf_config_ext={0x100000000, 0x4}, 0x4080, 0xc30, 0x8, 0x3, 0x8, 0x5, 0x100}, r3, 0xe, r2, 0x1) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x2, 0x7, 0x8, 0x4, 0xfff, 0x9, 0x6, 0x9, 0x2}}, 0x43) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) pipe(&(0x7f00000001c0)) 10:17:39 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 237.184442] binder: undelivered TRANSACTION_ERROR: 29189 [ 237.222195] binder: 16485:16488 got transaction to context manager from process owning it 10:17:39 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4480, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x725) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:39 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mount$9p_virtio(&(0x7f0000000100)='@&:.em0.posix_acl_accessmime_type\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x40, &(0x7f00000002c0)={'trans=virtio,', {[{@privport='privport', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@version_L='version=9p2000.L', 0x2c}]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 237.239954] binder: BINDER_SET_CONTEXT_MGR already set [ 237.239962] binder: 16476:16493 ioctl 40046207 0 returned -16 [ 237.240097] binder_alloc: 16485: binder_alloc_buf, no vma 10:17:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r0, &(0x7f0000000000), 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', r1}) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:39 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 237.240116] binder: 16476:16493 transaction failed 29189/-3, size 0-0 line 3136 [ 237.240545] binder: 16476:16493 ERROR: BC_REGISTER_LOOPER called without request [ 237.246620] FAT-fs (loop5): Directory bread(block 2) failed [ 237.246634] FAT-fs (loop5): Directory bread(block 3) failed [ 237.246646] FAT-fs (loop5): Directory bread(block 4) failed [ 237.246658] FAT-fs (loop5): Directory bread(block 5) failed [ 237.246668] FAT-fs (loop5): Directory bread(block 6) failed [ 237.246679] FAT-fs (loop5): Directory bread(block 7) failed [ 237.246715] FAT-fs (loop5): Directory bread(block 8) failed [ 237.246730] FAT-fs (loop5): Directory bread(block 9) failed [ 237.246743] FAT-fs (loop5): Directory bread(block 10) failed [ 237.246757] FAT-fs (loop5): Directory bread(block 11) failed [ 237.250199] attempt to access beyond end of device [ 237.250206] loop5: rw=536870912, want=73, limit=2 [ 237.288933] binder: BINDER_SET_CONTEXT_MGR already set [ 237.288941] binder: 16496:16501 ioctl 40046207 0 returned -16 [ 237.289346] binder_alloc: 16485: binder_alloc_buf, no vma [ 237.289365] binder: 16496:16501 transaction failed 29189/-3, size 0-0 line 3136 [ 237.289722] binder: 16496:16501 unknown command -491035898 [ 237.289730] binder: 16496:16501 ioctl c0306201 20000240 returned -22 [ 237.290584] binder: undelivered TRANSACTION_ERROR: 29189 [ 237.291333] binder: 16496:16501 got reply transaction with no transaction stack [ 237.291341] binder: 16496:16501 transaction failed 29201/-71, size 0-0 line 2921 [ 237.312510] binder_alloc: binder_alloc_mmap_handler: 16496 20001000-20004000 already mapped failed -16 [ 237.313708] binder: BINDER_SET_CONTEXT_MGR already set [ 237.313718] binder: 16496:16501 ioctl 40046207 0 returned -16 [ 237.315551] binder_alloc: 16485: binder_alloc_buf, no vma [ 237.315571] binder: 16496:16513 transaction failed 29189/-3, size 0-0 line 3136 [ 237.323365] binder: 16496:16501 unknown command -491035898 [ 237.323373] binder: 16496:16501 ioctl c0306201 20000240 returned -22 [ 237.323400] binder: undelivered TRANSACTION_ERROR: 29189 [ 237.325881] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.409540] FAT-fs (loop5): Directory bread(block 2) failed [ 237.409554] FAT-fs (loop5): Directory bread(block 3) failed [ 237.409566] FAT-fs (loop5): Directory bread(block 4) failed [ 237.409578] FAT-fs (loop5): Directory bread(block 5) failed [ 237.409589] FAT-fs (loop5): Directory bread(block 6) failed [ 237.409601] FAT-fs (loop5): Directory bread(block 7) failed [ 237.409639] FAT-fs (loop5): Directory bread(block 8) failed [ 237.409654] FAT-fs (loop5): Directory bread(block 9) failed [ 237.409667] FAT-fs (loop5): Directory bread(block 10) failed [ 237.409680] FAT-fs (loop5): Directory bread(block 11) failed [ 237.412214] attempt to access beyond end of device [ 237.412220] loop5: rw=536870912, want=73, limit=2 [ 237.622933] binder: 16485:16488 transaction failed 29201/-22, size 24-8 line 3004 [ 237.635820] binder: BINDER_SET_CONTEXT_MGR already set [ 237.641126] binder: 16485:16541 ioctl 40046207 0 returned -16 [ 237.648230] binder_alloc: 16485: binder_alloc_buf, no vma [ 237.653806] binder: 16485:16541 transaction failed 29189/-3, size 24-8 line 3136 [ 237.662660] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.704852] binder: undelivered TRANSACTION_ERROR: 29189 [ 238.028966] binder: 16476:16543 got reply transaction with no transaction stack [ 238.036672] binder: 16476:16543 transaction failed 29201/-71, size 0-0 line 2921 10:17:40 executing program 6: r0 = socket(0x2, 0x80000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x7f) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000300)=""/19) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000340)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'ip_vti0\x00'}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x3, 0x100}) gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x402084}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200100001d00100c2abd7000fcdbdf2510000a0027bd70002cbd700000010000900003006c7a6a680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYBLOB="020000002c00170004000000fbffffff29bd700027bd700027bd7000010000000600000004000000010000000200000028001a00fe8000000000000000000000000000aae00000010000000000000000000000000a00030908000400654d001e51126949eafd074d"], 0x2}, 0x1, 0x0, 0x0, 0x20000000}, 0xc081) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) read(r4, &(0x7f0000000000)=""/11, 0xb) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x40000000000e7fd, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404010a0200027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@nocase='nocase', 0x2c}]}) 10:17:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x400000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, "04ecd41ab3adc0a8e7746de9cb6858946b0b955c0fd4a3d07101f25cd3794f618b77f43fabc6470d008f17cda1e75622aa9a1ce136d100a0e68d8e5af9a0f687", "070495ca85a303edd878ce553a54cf960e777d3c462679a8dbd83a14d7552b9c", [0x9, 0x6]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) 10:17:40 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x80, 0x80000000, 0x4b, 0xffff}, 0x10) 10:17:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:40 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='po\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x400000000000001) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = request_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)='vboxnet1\x00', 0x0) request_key(&(0x7f00000003c0)='pkcs7_test\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)='cpusetsecurityposix_acl_access%\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x800, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x0) mq_timedreceive(r2, &(0x7f0000000580)=""/218, 0xda, 0x23d, 0x0) r3 = add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="9ee54501bf53da8eda9cfaf638a5229c58af75a007fefc628beaa682b928ca49972095e09b7d09d1e2e888156e84d79311b9609548c84c87658c33cb7e8da2fae1a0477ca4c71bd56e88c867d3743384f6afc458e225b0235bba60b942ff496d739f7c63fb71245ff2cd9a30308de64492261dd7e3fbb9e41b4d8de7d0746980f603d28c0230ffaad29f6427b0dad10392046c0c36f10c1c5e407ab5f95cf35d83ebe8f0e30be040c5c5", 0xaa, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="946f6f32df0eca853088441a6b01a8053f27bee13852d40584ddf98a302ab1cb5df272c38e0729abacdd154f87ceaa98", 0x30, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000160000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioprio_get$pid(0x0, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 238.148770] binder: undelivered TRANSACTION_ERROR: 29189 [ 238.157255] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.184810] FAT-fs (loop5): Directory bread(block 2) failed 10:17:40 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x14) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=@allocspi={0x26c, 0x16, 0x100, 0x70bd2b, 0x25dfdbfc, {{{@in=@multicast2=0xe0000002, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e20, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x852abda3e8f465dd, 0xaf, r1, r2}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d3, 0x3e}, @in6=@ipv4={[], [0xff, 0xff], @rand_addr=0xffffffff}, {0xec5, 0x6, 0x10000, 0x793c, 0x3, 0x3ac6, 0x80000001, 0x40}, {0xffffffffffff948d, 0x0, 0x3, 0x5}, {0x8000, 0x65b, 0x55}, 0x70bd29, 0x3502, 0xa, 0x7, 0xf3bc, 0x1}, 0x8000, 0xfff}, [@srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, [], 0x1e}}, @ipv6_hthresh={0x8, 0x4, {0x0, 0x3c}}, @etimer_thresh={0x8, 0xc, 0x81}, @sec_ctx={0xa4, 0x8, {0x9e, 0x8, 0x1, 0x100, 0x96, "038850303e45fa200301d5c5aca64c7876b142b44b5c1dfa24b0f901037309c0826ac2b95b1e5d806a6651ee1259fa0bcf8c3c926b4aadc6cd58072cf6249443003ed4841ccb05afa000e88012c3cbe734b26a759053d39ddbf9e8b945b79ccf02bd950ba57d93c3f2095ac5ceac3c41d9e9e9e62323cee1daa02c67438a9a8037822d079978e371387b5676930f8f4f247e64c35b4e"}}, @sec_ctx={0x74, 0x8, {0x70, 0x8, 0x1, 0x6, 0x68, "7a8e5df6739541dca495904cb6b2c2be0d64dff8965ff37397550255533a174fd0a48002b43da17d636c5592b7fbd8af6ce5750f56667e5daf11aac1c1ca0987dadb93e5ff6f17099a8e22acc732c4b66ef0c412c0465645e116edb661c2a2ce3feca18cc34a10ad"}}, @lifetime_val={0x24, 0x9, {0xd1, 0x662, 0x1e, 0x50}}, @coaddr={0x14, 0xe, @in6=@mcast2={0xff, 0x2, [], 0x1}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 10:17:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000008000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4001, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x3935, 0xffff, 0x0, 0x8, 0x1bc5eaca, 0x10000}) 10:17:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffff, 0x259, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e30000000000000000d81648196997c61780cd45e6269ae3e44629e09ddf10110000000000000000008000", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 238.202062] FAT-fs (loop5): Directory bread(block 3) failed [ 238.205944] binder: 16554:16560 transaction failed 29189/-22, size 6144-2048 line 3013 10:17:40 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) sendto$unix(r0, &(0x7f0000000100)="ec8f0839e54eca3fadb9e596dc30add756bb72e0ffa9d87b09ab", 0x1a, 0x10, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 10:17:40 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6, @in=@local}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000240)=""/91) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x10, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0xffffffff}, 0x2c}, {@common=@loose='loose', 0x2c}]}}) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 238.227978] binder: 16554:16566 transaction failed 29189/-22, size 6144-2048 line 3013 [ 238.229350] binder: undelivered TRANSACTION_ERROR: 29189 [ 238.229377] binder: undelivered TRANSACTION_ERROR: 29189 [ 238.253146] binder: 16545:16571 unknown command 0 [ 238.253154] binder: 16545:16571 ioctl c0306201 20000180 returned -22 [ 238.253218] binder: 16545:16571 ERROR: BC_REGISTER_LOOPER called without request [ 238.318823] FAT-fs (loop5): Directory bread(block 4) failed [ 238.330773] binder: 16579:16580 got transaction with invalid offset (0, min 0 max 24) or object. [ 238.330805] binder: 16579:16580 transaction failed 29201/-22, size 24-8 line 3199 [ 238.337440] binder: 16579:16580 got transaction with invalid offset (0, min 0 max 24) or object. [ 238.337475] binder: 16579:16580 transaction failed 29201/-22, size 24-8 line 3199 [ 238.338926] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.377730] FAT-fs (loop5): Directory bread(block 5) failed [ 238.383461] FAT-fs (loop5): Directory bread(block 6) failed [ 238.389166] FAT-fs (loop5): Directory bread(block 7) failed [ 238.395149] FAT-fs (loop5): Directory bread(block 8) failed [ 238.400856] FAT-fs (loop5): Directory bread(block 9) failed [ 238.406766] FAT-fs (loop5): Directory bread(block 10) failed [ 238.412610] FAT-fs (loop5): Directory bread(block 11) failed [ 238.426087] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.488828] attempt to access beyond end of device [ 238.494675] loop5: rw=536870912, want=73, limit=2 [ 238.988663] binder: 16545:16613 got reply transaction with no transaction stack [ 238.996241] binder: 16545:16613 transaction failed 29201/-71, size 0-0 line 2921 [ 239.109420] binder_alloc: binder_alloc_mmap_handler: 16545 20001000-20004000 already mapped failed -16 [ 239.124590] binder: BINDER_SET_CONTEXT_MGR already set [ 239.129912] binder: 16545:16613 ioctl 40046207 0 returned -16 [ 239.131662] binder: 16545:16617 unknown command 0 [ 239.131684] binder: 16545:16617 ioctl c0306201 20000180 returned -22 [ 239.135260] binder: 16545:16617 ERROR: BC_REGISTER_LOOPER called without request [ 239.154975] binder: undelivered TRANSACTION_ERROR: 29201 10:17:41 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x168, 0xfffffffffffffea5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:41 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8100, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xa42}, {0xa, 0x4e20, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x84f}, 0x4e10, [0x1, 0xfffffffffffffff9, 0x5, 0x8, 0x1, 0x8, 0x21, 0x4171444b]}, 0x5c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x84042, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000080)=0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x0, 0x3, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x3, 0x7, 0x3, 0x100000000}}) socketpair(0x8, 0x3, 0x9, &(0x7f0000000080)) 10:17:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x4, 0x5, 0x6, 0xb3e, 0x37, r2}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x7, &(0x7f0000000140)={0x2}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:41 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_thread_area(&(0x7f0000000000)={0xfff, 0x0, 0x4000, 0x2, 0x4, 0xffffffff, 0x4, 0x0, 0x7, 0x839}) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp(0x0, 0x1, &(0x7f0000000340)={0x7, &(0x7f0000000100)=[{0x5, 0x4, 0x1000, 0xffffffffffffffbb}, {0x9, 0x3, 0x0, 0x5}, {0x401, 0x1, 0x3, 0xffffffff}, {0x6, 0x1f, 0x7, 0x3}, {0x4, 0x0, 0x1000, 0x3}, {0x1, 0x800000000000000, 0x7f, 0xfffffffffffffff7}, {0xad1, 0x20, 0x5, 0x2a9c0c39}]}) fchown(r0, r1, r2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000300)=0xc) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 239.270593] FAT-fs (loop5): Directory bread(block 2) failed [ 239.282227] binder: 16633:16638 transaction failed 29189/-22, size 24-8 line 3013 [ 239.284005] binder: 16630:16644 ERROR: BC_REGISTER_LOOPER called without request [ 239.284127] binder: release 16630:16644 transaction 771 out, still active 10:17:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:41 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 239.284132] binder: undelivered TRANSACTION_COMPLETE [ 239.284231] binder: 16630:16644 transaction failed 29189/0, size 0-0 line 2945 [ 239.284251] binder: send failed reply for transaction 771, target dead 10:17:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = getpgid(0x0) ptrace$peekuser(0x3, r1, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x23) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=r0]], 0x3}, 0x1}, 0x100000000) 10:17:41 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 239.300602] binder: 16633:16645 got transaction with invalid offset (0, min 0 max 24) or object. [ 239.300632] binder: 16633:16645 transaction failed 29201/-22, size 24-8 line 3199 [ 239.302293] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.302893] binder_alloc: binder_alloc_mmap_handler: 16630 20001000-20004000 already mapped failed -16 [ 239.304081] binder: BINDER_SET_CONTEXT_MGR already set [ 239.304090] binder: 16630:16644 ioctl 40046207 0 returned -16 [ 239.304140] binder_alloc: 16630: binder_alloc_buf, no vma [ 239.304157] binder: 16630:16648 transaction failed 29189/-3, size 0-0 line 3136 [ 239.305331] binder: 16630:16644 ERROR: BC_REGISTER_LOOPER called without request [ 239.305351] binder: undelivered TRANSACTION_ERROR: 29189 10:17:41 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x168, 0xfffffffffffffea5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x68, 0x0, &(0x7f0000000300), 0x76, 0x0, &(0x7f0000000040)="14b17c4fc04dbc1c4dd10b702485d21ad2b6f8b5e6df859a8644661aa1d6f5209895f0c9e1c0934e9f9211138dfe252a70afa03f9a333e940a1015d78f4b0a54c9da94a21b0e5a97e3fc2c3a70a8fa62608f966663f9de99523446d96aebfb7b94dcdc59301dc5c650bb000000000000000000000000"}) 10:17:41 executing program 2: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xab95) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0x4, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="7ebb591365a4db2c995aceb553fc838d6f0063ce1f1e889557dc90bf008059f49e33d7ddefd87acfb943355b3430d4615304ea799896cd6963860ae288942dad82dfcbde748394048bbe289bdd47a9a57763ee234e0a910e3b285853084193e854b3", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0]], 0x3}, 0x1}, 0xffffffffffffffff) 10:17:41 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:41 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 239.307813] binder: undelivered TRANSACTION_ERROR: 29190 [ 239.337319] binder: undelivered TRANSACTION_ERROR: 29201 [ 239.391261] binder: 16660:16666 transaction failed 29189/-22, size 24-8 line 3013 [ 239.393808] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.393858] binder: 16660:16666 transaction failed 29189/-22, size 24-8 line 3013 [ 239.407354] binder: 16654:16670 transaction failed 29189/-22, size 0-0 line 3013 [ 239.417917] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.434220] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.442633] binder: 16654:16670 transaction failed 29189/-22, size 0-0 line 3013 [ 239.445852] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.573365] binder: 16694:16703 unknown command 0 [ 239.573374] binder: 16694:16703 ioctl c0306201 20000440 returned -22 [ 239.581668] binder: 16694:16703 unknown command 0 [ 239.581678] binder: 16694:16703 ioctl c0306201 20000440 returned -22 [ 239.681036] FAT-fs (loop5): Directory bread(block 3) failed [ 239.686776] FAT-fs (loop5): Directory bread(block 4) failed [ 239.692526] FAT-fs (loop5): Directory bread(block 5) failed [ 239.698227] FAT-fs (loop5): Directory bread(block 6) failed [ 239.704161] FAT-fs (loop5): Directory bread(block 7) failed [ 239.709900] FAT-fs (loop5): Directory bread(block 8) failed [ 239.715678] FAT-fs (loop5): Directory bread(block 9) failed [ 239.721386] FAT-fs (loop5): Directory bread(block 10) failed [ 239.727219] FAT-fs (loop5): Directory bread(block 11) failed [ 239.737629] attempt to access beyond end of device 10:17:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634800"], 0x0, 0x0, &(0x7f0000002000)}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x2a02, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)=""/175) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001f7ffffff000000eefffe0100000000000000000000000003e0000001000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) 10:17:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) signalfd(r0, &(0x7f0000000000)={0x5}, 0x8) 10:17:42 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:42 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x168, 0xfffffffffffffea5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) write$P9_RCREATE(r2, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x0, 0x1}, 0x2}}, 0x18) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x3, 0x3e, 0x1, 0x39, 0x40, 0x51, 0x81, 0x6, 0x38, 0x2, 0x800, 0x6, 0x1de9}, [{0x7, 0x1f, 0x0, 0x1, 0xfff, 0x8, 0x3, 0x4}], "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"}, 0x1078) 10:17:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', &(0x7f0000000200)='+selinux\x00', &(0x7f0000000240)='/selinux/avc/cache_stats\x00', &(0x7f0000000280)='/selinux/avc/cache_stats\x00', &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', &(0x7f0000000300)='^securitynodevproc\x00', &(0x7f0000000340)='/selinux/avc/cache_stats\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='/selinux/avc/cache_stats\x00', &(0x7f0000000400)='\x00']) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x7fff) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) [ 239.742630] loop5: rw=536870912, want=73, limit=2 [ 239.760387] binder: 16717:16718 unknown command 4743953 10:17:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ftruncate(r0, 0x7fffffff) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="7dd76d51b4711f00002000000000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000623d72cfed740a25aa7d975b64d9f0843a344ec12ab6c944586beff7c67469ed3eb9dcad00020000000000008818b4a96fe1563bb9ebd67c5f49b97cb9911758dac435e649f8328b562c0d3ffaffc26722b527aec07dff62f1237de6f3412f1d78b392c3138248d02f7ec4b96372cdcddaef3242e5e45f26c283913e69d770c726113ab46b422e1c680ee1a0bf28c520810bf2847ed6ece9117e846aff8935e23d4d7c189999d07199fd818522cedd5d2c623734057229f8923e29"]], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:42 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x168, 0xfffffffffffffea5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:42 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 239.771030] binder_alloc: 16717: binder_alloc_buf, no vma [ 239.771049] binder: 16716:16725 transaction failed 29189/-3, size 24-8 line 3136 [ 239.772344] binder_alloc: 16717: binder_alloc_buf, no vma [ 239.772365] binder: 16716:16729 transaction failed 29189/-3, size 24-8 line 3136 [ 239.774959] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.774992] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.826498] binder: 16717:16718 ioctl c0306201 20000180 returned -22 10:17:42 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) 10:17:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) [ 239.844047] binder: BINDER_SET_CONTEXT_MGR already set 10:17:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xcd, 0x100) sendfile(r0, r0, &(0x7f0000000180), 0x9) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x10, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x828010, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e21,access=user,version=9p2000.L,version=9t2000.L,access=user,\x00']) 10:17:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x400000) memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) 10:17:42 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) [ 239.871344] FAT-fs (loop5): Directory bread(block 2) failed [ 239.871360] FAT-fs (loop5): Directory bread(block 3) failed [ 239.871374] FAT-fs (loop5): Directory bread(block 4) failed [ 239.871388] FAT-fs (loop5): Directory bread(block 5) failed [ 239.871402] FAT-fs (loop5): Directory bread(block 6) failed [ 239.871415] FAT-fs (loop5): Directory bread(block 7) failed [ 239.871460] FAT-fs (loop5): Directory bread(block 8) failed [ 239.871477] FAT-fs (loop5): Directory bread(block 9) failed [ 239.871492] FAT-fs (loop5): Directory bread(block 10) failed [ 239.871507] FAT-fs (loop5): Directory bread(block 11) failed [ 239.875846] attempt to access beyond end of device [ 239.875860] loop5: rw=536870912, want=73, limit=2 [ 239.887035] binder: 16740:16751 transaction failed 29189/-22, size 24-8 line 3013 [ 239.910777] binder: 16717:16718 ERROR: BC_REGISTER_LOOPER called without request [ 239.917476] binder: 16740:16755 transaction failed 29189/-22, size 24-8 line 3013 [ 239.918833] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.984076] FAT-fs (loop5): Directory bread(block 2) failed [ 239.984090] FAT-fs (loop5): Directory bread(block 3) failed [ 239.984104] FAT-fs (loop5): Directory bread(block 4) failed [ 239.984115] FAT-fs (loop5): Directory bread(block 5) failed [ 239.984126] FAT-fs (loop5): Directory bread(block 6) failed [ 239.984138] FAT-fs (loop5): Directory bread(block 7) failed [ 239.984178] FAT-fs (loop5): Directory bread(block 8) failed [ 239.984191] FAT-fs (loop5): Directory bread(block 9) failed [ 239.984203] FAT-fs (loop5): Directory bread(block 10) failed [ 239.984215] FAT-fs (loop5): Directory bread(block 11) failed [ 239.987264] attempt to access beyond end of device [ 239.987273] loop5: rw=536870912, want=73, limit=2 [ 240.132787] binder: 16737:16739 ioctl 40046207 0 returned -16 [ 240.132826] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.146959] binder_alloc: 16717: binder_alloc_buf, no vma [ 240.152817] binder: 16737:16739 transaction failed 29189/-3, size 0-0 line 3136 [ 240.163840] binder: BINDER_SET_CONTEXT_MGR already set [ 240.169194] binder: 16737:16777 ioctl 40046207 0 returned -16 [ 240.176628] binder_alloc: 16717: binder_alloc_buf, no vma [ 240.182468] binder: 16737:16739 transaction failed 29189/-3, size 0-0 line 3136 [ 240.195462] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.200973] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.565380] binder: 16717:16779 got reply transaction with no transaction stack [ 240.572929] binder: 16717:16779 transaction failed 29201/-71, size 0-0 line 2921 10:17:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 10:17:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1741, 0x0, "ae8c2f3360499ca34730d8c80c7cf404d6cadbc5cae8769c41ce8bda73b905500800000000000000cdf233f700000000000000000000ffff00", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) 10:17:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={0x0}) dup3(r0, r1, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x0, 0x4}, @increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r3}, @dead_binder_done={0x40086310, 0x3}, @acquire_done={0x40106309, r4, 0x3}], 0xa4, 0x0, &(0x7f0000000380)="6ad2984dba14bea3fdf00976cc19a22f65b9e74732a0379259950382f4ae7840f4f16b5e0a2b5dbd50e914f430cf00412fa73bef397444ea2ecc0fb8ee14f1d4d42e9b2943c61e1893a97bdb5bcd0d0399fba41773046c5333579d751c5cd5ea28d8ee81196a416bc0282f40caf0f503740dfa0dfccd45ffe57980a3c969b576d85bcf11a9e3cd1de35f7675131ae1d8c3f64fecb7e04854cba1852f6fc0d9c41ca22fdd"}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:17:43 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000) fadvise64(r1, 0x0, 0x0, 0x4) 10:17:43 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/sequencer2\x00', 0x2, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000001880)=[0xee00, 0xee01, 0xee01, 0xee00]) fchown(r0, r1, r2) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x200000000000000, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbed83278b38ee1717a1b00000000000000000200"}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) recvmmsg(0xffffffffffffff9c, &(0x7f0000005240)=[{{&(0x7f0000000380)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/207, 0xcf}, {&(0x7f0000001500)=""/107, 0x6b}], 0x4, &(0x7f00000015c0)=""/36, 0x24, 0x8}, 0x5}, {{&(0x7f0000001600)=@pppoe, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)=""/223, 0xdf}], 0x1, &(0x7f00000017c0), 0x0, 0x40}, 0x1f}, {{&(0x7f0000001800)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001880)}], 0x1, &(0x7f0000001900)=""/1, 0x1, 0x6}, 0x101}, {{&(0x7f0000001940)=@un=@abs, 0x80, &(0x7f0000004c40)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/27, 0x1b}, {&(0x7f0000003a40)=""/199, 0xc7}, {&(0x7f0000003b40)=""/214, 0xd6}, {&(0x7f0000003c40)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0xfffffffffffffc5a}, 0x1}, {{&(0x7f0000004cc0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004d40)=""/107, 0x6b}], 0x1, &(0x7f0000004e00)=""/240, 0xf0, 0xffffffff}, 0x3f}, {{&(0x7f0000004f00)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f80)=""/132, 0x84}, {&(0x7f0000005040)=""/26, 0x1a}, {&(0x7f0000005080)=""/114, 0x72}, {&(0x7f0000005100)=""/115, 0x73}], 0x4, &(0x7f00000051c0)=""/116, 0x74, 0x20}}], 0x6, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f00000053c0)={@loopback=0x7f000001, @broadcast=0xffffffff, r7}, 0xc) setregid(r4, r5) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000005480)={0xfffffffffffffff9, {0x2, 0x4e24}, {0x2, 0x4e24}, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x228, 0x2, 0x2, 0xf5, 0x1, &(0x7f00000029c0)='team_slave_0\x00', 0x1, 0x3f, 0x1}) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x1, 0x10010, r6, 0x0) accept$inet(r0, &(0x7f0000005500), &(0x7f0000005540)=0x10) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) 10:17:43 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:43 executing program 2: r0 = socket(0x9, 0xb, 0xe9) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0x9, {{0x2, 0x4e20, @multicast2=0xe0000002}}, {{0x2, 0x4e23, @loopback=0x7f000001}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000640)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000008c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x22a0108}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)=@polexpire={0x2b0, 0x1b, 0x2, 0x70bd2d, 0x25dfdbfb, {{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6, 0x4e22, 0x3, 0x4e23, 0xfffffffffffff531, 0xa, 0xa0, 0x80, 0x33, r1, r2}, {0x6, 0x5, 0x1, 0x0, 0xffffffff, 0x2, 0x9, 0x3}, {0x9, 0x8, 0x7, 0x20}, 0xcec, 0x6e6bb1, 0x2, 0x0, 0x2}, 0xffffffff}, [@policy={0xac, 0x7, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e22, 0x8001, 0x4e21, 0x12c3, 0x2, 0x80, 0x80, 0x0, r3, r4}, {0x7, 0x4c3a54bd, 0x40, 0x1f, 0x3ff, 0x1, 0x80000000, 0x7}, {0xffffffffffffffff, 0x8, 0xb551, 0x759ab8f8}, 0x4, 0x6e6bb6, 0x0, 0x1, 0x3, 0x3}}, @lifetime_val={0x24, 0x9, {0x80eb, 0x1, 0x4, 0xffff}}, @output_mark={0x8, 0x1d, 0x8001}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x80000000}}, @offload={0xc, 0x1c, {r5, 0x3}}, @algo_aead={0x80, 0x12, {{'gcm_base(ctr-blowfish-asm,rmd256-generic)\x00'}, 0x190, 0x80, "6c72c767c4fe7bfdd0a2b2dbdf6f3a183d5339766eb21afa912ff892516b46eb227676f2b3826d8341bbd2ef50eaa1bf69e3"}}, @replay_thresh={0x8, 0xb, 0x8}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd29, 0x1af}}, @algo_auth={0x68, 0x1, {{'sm3\x00'}, 0xe8, "8a2c056a10e2287ccc2258be99128b1289bd7aee9208e33a1bf35f43d1"}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000940)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000300)=0x4) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_group_source_req(r6, 0x0, 0x0, &(0x7f0000000080)={0x1, {{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e24, @broadcast=0xffffffff}}}, 0x108) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000900)={'veth0_to_bond\x00', 0x7}) ioctl$KDSKBLED(r6, 0x4b65, 0x10000) [ 240.688402] binder: BINDER_SET_CONTEXT_MGR already set [ 240.693785] binder: 16717:16780 unknown command 4743953 [ 240.693794] binder: 16717:16780 ioctl c0306201 20000180 returned -22 [ 240.706054] binder: 16717:16781 ERROR: BC_REGISTER_LOOPER called without request [ 240.713844] binder: 16717:16779 ioctl 40046207 0 returned -16 [ 240.720412] binder: undelivered TRANSACTION_ERROR: 29201 10:17:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00d3000000000000000000000000002d0000000000000000000043e53acb3ea5dadda36a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) socketpair(0xa, 0x6, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r3, 0x101, 0x70bd29, 0x25dfdbfd, {0xb}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbc1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xc}}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) fadvise64(r1, 0x0, 0x2, 0x0) connect(r1, &(0x7f00000001c0)=@ethernet, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xffffffffffffff07) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000180)=r4) 10:17:43 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:43 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffffffffffffff5a, 0x80) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, 0x1, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6e3dbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8a8e8bcdb1cdd233f71500", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 240.792181] binder: 16782:16791 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 240.811232] binder: 16782:16791 IncRefs 0 refcount change on invalid ref 1 ret -22 10:17:43 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = memfd_create(&(0x7f00000004c0)='posix_acl_access\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x20}, {0xa, 0x4e20, 0x8, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100}, 0x6f97, [0x7, 0x7ff, 0x9, 0xfdf2, 0x7, 0x9, 0x7ff, 0x3]}, 0x5c) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x9, 0xff}) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea105cff1448d9b171416891550588dd6cadbc5cae8769c41ce8bda73b90550e9c527dc36aa9cc80b8b8e8bcdb1cdf233f700", "3295b1a2e6e3c801d70000721febd81648196997c61780b3e546d3cda407269a8f58afb1e04bd37b4100000000008000000000000700", "6de38ccad2efbcd832dd5d6a69b41720881550e07023c0ba5578b38ee5717a1b"}) [ 240.823042] binder: 16804:16810 ERROR: BC_REGISTER_LOOPER called without request [ 240.823341] binder: release 16804:16810 transaction 788 out, still active [ 240.823345] binder: undelivered TRANSACTION_COMPLETE 10:17:43 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e00061a6fe48f714e702cf7e47c3a6cac8ae0001000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 10:17:43 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 10:17:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x2) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00000001c0)="f0441d5fd4cf1bf9025704000000052540b763af8261420113c8e4c2f3f4f49699b7df0016833cb8dd3f3a8f8f507ae2aa23a7b83b55034c9d5f3c72eaefd2f68dbdf3fe3877340d"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdc5, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 240.823526] binder: 16804:16810 transaction failed 29189/0, size 0-0 line 2945 [ 240.823703] binder: send failed reply for transaction 788, target dead 10:17:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000043e53acb3ea5dadda36a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021810000000000000000"], 0x3}, 0x1}, 0x0) ioctl$TIOCNXCL(r0, 0x540d) [ 240.848873] binder_alloc: binder_alloc_mmap_handler: 16804 20001000-20004000 already mapped failed -16 [ 240.851128] binder: BINDER_SET_CONTEXT_MGR already set [ 240.851138] binder: 16804:16810 ioctl 40046207 0 returned -16 [ 240.851193] binder_alloc: 16804: binder_alloc_buf, no vma [ 240.851213] binder: 16804:16814 transaction failed 29189/-3, size 0-0 line 3136 [ 240.854787] binder: 16804:16810 ERROR: BC_REGISTER_LOOPER called without request [ 240.854815] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.858685] binder: undelivered TRANSACTION_ERROR: 29190 [ 241.050222] binder: 16848:16858 ERROR: BC_REGISTER_LOOPER called without request [ 241.050322] binder: release 16848:16858 transaction 792 out, still active [ 241.050326] binder: undelivered TRANSACTION_COMPLETE [ 241.050675] binder_alloc: binder_alloc_mmap_handler: 16848 20001000-20004000 already mapped failed -16 [ 241.050731] binder: BINDER_SET_CONTEXT_MGR already set [ 241.050738] binder: 16848:16858 ioctl 40046207 0 returned -16 [ 241.050800] binder_alloc: 16848: binder_alloc_buf, no vma [ 241.050819] binder: 16848:16858 transaction failed 29189/-3, size 0-0 line 3136 [ 241.050964] binder: 16848:16858 ERROR: BC_REGISTER_LOOPER called without request [ 241.059385] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.059415] binder: release 16848:16858 transaction 792 in, still active [ 241.059421] binder: send failed reply for transaction 792, target dead [ 241.185086] binder: 16782:16791 BC_FREE_BUFFER u0000000000000000 no match [ 241.194369] binder: 16782:16791 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 241.204919] binder: 16782:16791 BC_ACQUIRE_DONE u0000000000000000 no match [ 241.664195] binder: 16782:16867 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 241.671433] binder: 16782:16867 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 241.679624] binder: 16782:16867 BC_FREE_BUFFER u0000000000000000 no match [ 241.687643] binder: 16782:16867 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 241.695368] binder: 16782:16867 BC_ACQUIRE_DONE u0000000000000000 no match 10:17:44 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10) 10:17:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @remote}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@multicast2=0xe0000002, 0x4e20, 0xffffffff, 0x4e21, 0xc6, 0xa, 0xa0, 0xa0, 0x21, r2, r3}, {0xffffffff, 0x0, 0x97, 0xfffffffffffffffc, 0x8d4, 0x400, 0x8000, 0x4}, {0x9, 0x3ff, 0x42, 0x2}, 0x4, 0x6e6bb7, 0x2, 0x1, 0x3}, {{@in=@multicast2=0xe0000002, 0x4d4, 0x6c}, 0xa, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x34ff, 0x3, 0x3, 0x100, 0x1, 0x9}}, 0xe8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x837) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x100000000000, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, r4}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000050000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}, 0x1}, 0x0) [ 429.351729] INFO: task syz-executor5:3872 blocked for more than 140 seconds. [ 429.358961] Not tainted 4.9.113-g47bbcd6 #10 [ 429.364827] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.373046] syz-executor5 D27720 3872 1 0x00000004 [ 429.378806] ffff8801d94dc800 0000000000000000 ffff8801bd08d500 ffff8801d9a39800 [ 429.390187] ffff8801db321c18 ffff88019f88fb40 ffffffff839e909d 0000000000000002 [ 429.398489] 0000000041b58ab3 ffffffff843bbae3 00ffffff81221550 ffff8801db3224e8 [ 429.406779] Call Trace: [ 429.409360] [] ? __schedule+0x64d/0x1bd0 [ 429.415365] [] schedule+0x7f/0x1b0 [ 429.420552] [] wb_wait_for_completion+0x149/0x1b0 [ 429.427340] [] ? __writeback_single_inode+0x1020/0x1020 [ 429.434698] [] ? wb_queue_work+0x156/0x370 [ 429.440582] [] ? prepare_to_wait_event+0x450/0x450 [ 429.447575] [] ? _raw_spin_unlock_bh+0x30/0x40 [ 429.454050] [] ? wb_queue_work+0x156/0x370 [ 429.459924] [] __writeback_inodes_sb_nr+0x207/0x300 [ 429.466814] [] ? wb_wait_for_completion+0x1b0/0x1b0 [ 429.473689] [] ? _find_next_bit.part.0+0xe0/0x120 [ 429.480174] [] ? get_nr_dirty_inodes+0xcf/0x140 [ 429.486773] [] ? dput.part.29+0x2a/0x7b0 [ 429.493316] [] writeback_inodes_sb+0x27/0x30 [ 429.499371] [] sync_filesystem+0x93/0x240 [ 429.505430] [] generic_shutdown_super+0x75/0x300 [ 429.512056] [] kill_block_super+0x9f/0x120 [ 429.517932] [] deactivate_locked_super+0x75/0xd0 [ 429.524587] [] deactivate_super+0x91/0xd0 [ 429.530464] [] cleanup_mnt+0xb2/0x160 [ 429.536200] [] __cleanup_mnt+0x16/0x20 [ 429.541937] [] task_work_run+0x10c/0x180 [ 429.547641] [] exit_to_usermode_loop+0xfc/0x120 [ 429.554379] [] do_syscall_64+0x364/0x490 [ 429.560083] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 429.567231] [ 429.567231] Showing all locks held in the system: [ 429.573764] 2 locks held by khungtaskd/519: [ 429.578072] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 429.586848] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 429.596565] 2 locks held by getty/3774: [ 429.600534] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 429.609884] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 429.620598] 1 lock held by syz-executor5/3872: [ 429.625192] #0: (&type->s_umount_key#47){+.+...}, at: [] deactivate_super+0x89/0xd0 [ 429.635371] [ 429.636983] ============================================= [ 429.636983] [ 429.645156] NMI backtrace for cpu 0 [ 429.648781] CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.113-g47bbcd6 #10 [ 429.656054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.665396] ffff8801d97bfd08 ffffffff81eb32a9 0000000000000000 0000000000000000 [ 429.673423] 0000000000000000 0000000000000001 ffffffff810b9bd0 ffff8801d97bfd40 [ 429.681457] ffffffff81ebe5a7 0000000000000000 0000000000000000 0000000000000003 [ 429.689493] Call Trace: [ 429.692066] [] dump_stack+0xc1/0x128 [ 429.697414] [] ? irq_force_complete_move+0x320/0x320 [ 429.704151] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 429.710636] [] ? irq_force_complete_move+0x320/0x320 [ 429.717373] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 429.724458] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 429.731456] [] watchdog+0x6b4/0xa20 [ 429.736717] [] ? watchdog+0x11c/0xa20 [ 429.742153] [] kthread+0x26d/0x300 [ 429.748199] [] ? reset_hung_task_detector+0x20/0x20 [ 429.754854] [] ? kthread_park+0xa0/0xa0 [ 429.760462] [] ? kthread_park+0xa0/0xa0 [ 429.766071] [] ? kthread_park+0xa0/0xa0 [ 429.771681] [] ret_from_fork+0x5c/0x70 [ 429.777389] Sending NMI from CPU 0 to CPUs 1: [ 429.782556] NMI backtrace for cpu 1 [ 429.786175] CPU: 1 PID: 4851 Comm: kworker/u4:5 Not tainted 4.9.113-g47bbcd6 #10 [ 429.793682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.803012] Workqueue: writeback wb_workfnc (flush-7:5)c [ 429.808609] task: ffff8801b6703000 task.stack: ffff88019ac00000 [ 429.814641] RIP: 0010:[] c [] __lock_acquire+0xa09/0x4070 [ 429.823363] RSP: 0018:ffff88019ac07458 EFLAGS: 00000046 [ 429.828785] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000000000000 [ 429.836037] RDX: 1ffff10036ce0718 RSI: ffff8801b6703918 RDI: 0000000000000000 [ 429.843284] RBP: ffff88019ac074c8 R08: ffff8801b6703938 R09: 0000000000000001 [ 429.850535] R10: ffff8801b6703000 R11: 1ffff10036ce0722 R12: ffff8801b6703000 [ 429.857779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 429.865025] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 429.873224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.879081] CR2: 00007fa405680348 CR3: 000000000461e000 CR4: 00000000001606f0 [ 429.886326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 429.893573] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 429.900831] Stack: [ 429.902957] ffffffff8123ac90c 0000000000000000c ffffffff81438be0c ffff880100000000c [ 429.911159] 0000000000000000c ffff88019ac074f0c ffffffff81ec2ed7c 0000000000000000c [ 429.919366] 00000000846defa0c ffff8801cbfd94c8c 0000000000000001c dffffc0000000000c [ 429.927566] Call Trace: [ 429.930121] [] ? lock_acquire+0x130/0x3e0 [ 429.935892] [] ? add_to_page_cache_lru+0x2a0/0x2a0 [ 429.942445] [] ? __radix_tree_lookup+0x1b7/0x2f0 [ 429.948822] [] find_get_entry+0x4a/0x540 [ 429.954501] [] ? add_to_page_cache_lru+0x2a0/0x2a0 [ 429.961052] [] pagecache_get_page+0x4b/0x720 [ 429.967094] [] __find_get_block_slow+0xc2/0x330 [ 429.973385] [] __find_get_block+0x23e/0x4c0 [ 429.979339] [] __getblk_gfp+0x189/0x710 [ 429.986159] [] ? blk_finish_plug+0x44/0xb0 [ 429.992103] [] __bread_gfp+0x2d/0x270 [ 429.997533] [] __fat_write_inode+0x2ab/0x980 [ 430.003568] [] ? fat_calc_dir_size+0x270/0x270 [ 430.009769] [] ? __lock_is_held+0xa2/0xf0 [ 430.015547] [] fat_write_inode+0x79/0x170 [ 430.021317] [] __writeback_single_inode+0x86d/0x1020 [ 430.028050] [] writeback_sb_inodes+0x4ac/0xe70 [ 430.034253] [] ? inode_to_wb_and_lock_list+0xf0/0xf0 [ 430.040977] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 430.047787] [] ? queue_io+0x1f9/0x4e0 [ 430.053209] [] wb_writeback+0x2cf/0xbd0 [ 430.058814] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 430.065633] [] ? writeback_inodes_wb.constprop.41+0x190/0x190 [ 430.073139] [] ? mark_held_locks+0xc7/0x130 [ 430.079082] [] wb_workfn+0x20e/0xdb0 [ 430.084417] [] ? inode_wait_for_writeback+0x40/0x40 [ 430.091060] [] ? __lock_is_held+0xa2/0xf0 [ 430.096829] [] process_one_work+0x7e1/0x1500 [ 430.102869] [] ? process_one_work+0x728/0x1500 [ 430.109073] [] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 430.115534] [] worker_thread+0xd6/0x10a0 [ 430.121217] [] ? __schedule+0x655/0x1bd0 [ 430.126897] [] kthread+0x26d/0x300 [ 430.132058] [] ? process_one_work+0x1500/0x1500 [ 430.138348] [] ? kthread_park+0xa0/0xa0 [ 430.143944] [] ? kthread_park+0xa0/0xa0 [ 430.149540] [] ? kthread_park+0xa0/0xa0 [ 430.155143] [] ret_from_fork+0x5c/0x70 [ 430.160661] Code: c00 c00 c00 c44 c89 cc8 c48 c8b c8c c24 c78 c01 c00 c00 c65 c48 c33 c0c c25 c28 c00 c00 c00 c0f c85 c17 c27 c00 c00 c48 c8d c65 cd8 c5b c41 c5c c41 c5d c41 c5e c41 c5f c5d c c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c4c c89 cf2 c48 cc1 cea c03 c80 c3c c02 c [ 430.193933] Kernel panic - not syncing: hung_task: blocked tasks [ 430.200092] CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.113-g47bbcd6 #10 [ 430.207348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.216687] ffff8801d97bfcc8 ffffffff81eb32a9 ffffffff83c8bc20 00000000ffffffff [ 430.224720] 0000000000000000 0000000000000000 dffffc0000000000 ffff8801d97bfd88 [ 430.232761] ffffffff81421a55 0000000041b58ab3 ffffffff843bb788 ffffffff81421896 [ 430.240798] Call Trace: [ 430.243372] [] dump_stack+0xc1/0x128 [ 430.248746] [] panic+0x1bf/0x3bc [ 430.253749] [] ? add_taint.cold.6+0x16/0x16 [ 430.259705] [] ? ___preempt_schedule+0x16/0x18 [ 430.265924] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 430.273184] [] watchdog+0x6c5/0xa20 [ 430.278624] [] ? watchdog+0x11c/0xa20 [ 430.284061] [] kthread+0x26d/0x300 [ 430.289237] [] ? reset_hung_task_detector+0x20/0x20 [ 430.295902] [] ? kthread_park+0xa0/0xa0 [ 430.301513] [] ? kthread_park+0xa0/0xa0 [ 430.307124] [] ? kthread_park+0xa0/0xa0 [ 430.312732] [] ret_from_fork+0x5c/0x70 [ 430.318993] Dumping ftrace buffer: [ 430.322599] (ftrace buffer empty) [ 430.326291] Kernel Offset: disabled [ 430.329912] Rebooting in 86400 seconds..