6 to 3573:3576
[  175.629062] audit: type=1400 audit(1553676941.318:37): avc:  denied  { append } for  pid=3585 comm="syz-executor.5" path="/root/syzkaller-testdir400339191/syzkaller.M9UONW/37/memory.events" dev="sda1" ino=16547 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ksm_device_t:s0 tclass=file permissive=1
[  175.654608] binder: 3607:3609 unknown command 25346
[  175.713738] binder: 3619:3622 unknown command 25346
[  175.721302] binder: 3619:3622 ioctl c0306201 20000140 returned -22
[  175.725191] binder: 3607:3609 ioctl c0306201 20000140 returned -22
[  175.731557] audit: type=1400 audit(1553676941.318:38): avc:  denied  { relabelfrom } for  pid=3585 comm="syz-executor.5" name="memory.events" dev="sda1" ino=16547 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ksm_device_t:s0 tclass=file permissive=1
08:55:41 executing program 3:
socket$inet6(0xa, 0x3, 0x9)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140))
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x4})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0)
mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
r1 = gettid()
setreuid(0x0, 0x0)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x0)
r2 = memfd_create(&(0x7f0000000a80)='\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18', 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf8d)
setpgid(r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
getresuid(&(0x7f0000000440), 0x0, &(0x7f0000000600)=<r3=>0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x4440, &(0x7f0000000840)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode'}}], [{@uid_eq={'uid'}}, {@fowner_gt={'fowner>', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x75}}, {@subj_user={'subj_user', 0x3d, 'locpuset'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@obj_role={'obj_role', 0x3d, 'mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00'}}, {@audit='audit'}]})
getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1c6270660000d39ea615760fd8b2ee25"], 0x0, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)

[  175.765394] binder: BINDER_SET_CONTEXT_MGR already set
[  175.776374] binder: 3614:3617 unknown command 25346
[  175.792312] binder: 3619:3625 ioctl 40046207 0 returned -16
[  175.792696] binder: release 3607:3623 transaction 60 out, still active
08:55:41 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  175.819937] binder: 3614:3617 ioctl c0306201 20000140 returned -22
[  175.831132] binder: send failed reply for transaction 60, target dead
[  175.845896] binder: send failed reply for transaction 63 to 3619:3622
[  175.858319] binder: 3619:3622 BC_INCREFS_DONE u0000000000000000 no match
08:55:41 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

[  175.879296] binder: 3619:3622 Release 1 refcount change on invalid ref 1 ret -22
[  175.904074] binder: release 3614:3628 transaction 67 out, still active
[  175.927236] binder: 3630:3634 unknown command 25346
[  175.937355] binder: send failed reply for transaction 67, target dead
[  175.948289] binder: 3630:3634 ioctl c0306201 20000140 returned -22
08:55:41 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

08:55:41 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  175.974321] binder: release 3630:3632 transaction 71 out, still active
[  176.006102] binder: send failed reply for transaction 71, target dead
[  176.058878] binder: 3636:3637 unknown command 25346
08:55:41 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  176.079793] binder: 3636:3637 ioctl c0306201 20000140 returned -22
[  176.108730] binder: release 3636:3648 transaction 75 out, still active
[  176.123551] binder: 3641:3644 unknown command 25346
08:55:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

08:55:42 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

08:55:42 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

[  176.144650] binder: 3641:3644 ioctl c0306201 20000140 returned -22
[  176.152404] binder: send failed reply for transaction 75, target dead
[  176.174707] binder: 3646:3647 unknown command 25346
[  176.183709] binder: release 3641:3654 transaction 79 out, still active
08:55:42 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  176.200843] binder: 3646:3647 ioctl c0306201 20000140 returned -22
[  176.215173] binder: send failed reply for transaction 79, target dead
[  176.237552] binder: release 3646:3660 transaction 83 out, still active
08:55:42 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

[  176.263483] binder: 3650:3651 unknown command 25346
[  176.267412] binder: send failed reply for transaction 83, target dead
[  176.268694] binder: 3650:3651 ioctl c0306201 20000140 returned -22
08:55:42 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

[  176.313090] binder: 3656:3659 unknown command 25346
[  176.318349] binder: 3656:3659 ioctl c0306201 20000140 returned -22
[  176.330279] binder: BINDER_SET_CONTEXT_MGR already set
[  176.342543] binder: 3661:3663 unknown command 25346
[  176.350701] binder: release 3650:3668 transaction 87 out, still active
08:55:42 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000, 0x10)
openat$cgroup_ro(r0, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
setresuid(0x0, 0xee01, r1)
keyctl$invalidate(0x15, 0x0)

[  176.356832] binder: 3661:3663 ioctl c0306201 20000140 returned -22
[  176.357561] binder: 3656:3659 ioctl 40046207 0 returned -16
[  176.375334] binder: 3665:3667 unknown command 25346
[  176.384368] binder: send failed reply for transaction 87, target dead
[  176.387793] binder: 3665:3667 ioctl c0306201 20000140 returned -22
08:55:42 executing program 3:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x8001, 0x3, 0x4, 0x8, 0x0, 0xff, 0x1, 0x2, 0x101, 0x6, 0x2, 0x80000000, 0x0, 0x53a, 0x100000000, 0x0, 0x100, 0x3, 0x3, 0xffffffffffffffc0, 0x2f07, 0x8001, 0x5, 0x7, 0x2, 0x4d, 0x3, 0x1000, 0x3, 0x7f, 0x3, 0x20, 0x5, 0x7fff800000000000, 0x6, 0x2, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x14, 0x9, 0x8, 0x3, 0x400, 0x4, 0x3}, r1, 0xd, r0, 0xa)
exit_group(0x0)
clone(0x40000004001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$assume_authority(0x10, r3)

08:55:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

08:55:42 executing program 1:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe2(0x0, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00}\x00'], 0x1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfff, 0x200, 0xcfe6, 0x81}}}, [""]}, 0x30}}, 0x24000000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x2007fff)
write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7)
ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000140)={0x7, 0x1b4c})
sendfile(r0, r5, 0x0, 0x800000000024)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000003c0)={0x6, 0x6, 0x2, 0x2, 0x7950, 0x80000001})
openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
rt_sigsuspend(&(0x7f0000000340), 0x8)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

[  176.425348] binder: BINDER_SET_CONTEXT_MGR already set
[  176.438235] binder: 3656:3673 BC_INCREFS_DONE node 95 has no pending increfs request
[  176.443528] binder: 3665:3667 ioctl 40046207 0 returned -16
[  176.452189] binder: 3656:3673 Release 1 refcount change on invalid ref 1 ret -22
08:55:42 executing program 5:
r0 = gettid()
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x200000001})
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xe4, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x6)
fcntl$setsig(r3, 0xa, 0x12)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x4e20, @local}, {0x0, @broadcast}, 0x20, {0x2, 0x4e22, @remote}, 'bpq0\x00'})
readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/6, 0x6}], 0x1)
dup2(r3, r4)
fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x0, r0})
tkill(r0, 0x16)

08:55:42 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
linkat(r0, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r1, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x1000)
r2 = socket$unix(0x1, 0x104000000000001, 0x0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/162)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
ioctl$sock_proto_private(r2, 0x89e0, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @multicast2}, {0x307, @local}, 0x2, {0x2, 0x4e20, @rand_addr=0x4}, 'eql\x00'})
ioctl(r0, 0x1, &(0x7f0000000180)="40c03dcd9e3d5e5466ec58651b70c40ff4230d5406edfc1de3082caa1f6a82a023f141c88fbc1c35638b1aea679b292f1733361181b9f6fcca4e90dbcf92202185fb6a134274fcc6e46bc912be37c2b79c1b74e74e058a5c43a4a7f29f0081ecd76cf10faafd2661d4d2f48ed91f3ab06870d7")

08:55:42 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
clone(0x80002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
fcntl$setown(r0, 0x8, r2)
pipe(&(0x7f0000000040))
r3 = dup2(r1, r0)
ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000000)={0x0, 0x2})
tkill(r2, 0x20)
wait4(0x0, 0x0, 0x0, 0x0)

08:55:42 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  176.997603] binder: release 3656:3659 transaction 94 out, still active
[  177.028353] binder: 3714:3715 unknown command 25346
[  177.033671] binder: 3714:3715 ioctl c0306201 20000140 returned -22
08:55:42 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  177.043687] binder: BINDER_SET_CONTEXT_MGR already set
[  177.049213] binder: 3714:3715 ioctl 40046207 0 returned -16
[  177.049620] binder: send failed reply for transaction 91 to 3661:3663
[  177.057801] binder: 3714:3715 transaction failed 29189/-22, size 24-8 line 3117
[  177.073939] binder: 3714:3715 BC_INCREFS_DONE u0000000000000000 no match
[  177.075287] binder: send failed reply for transaction 94, target dead
[  177.093548] binder: send failed reply for transaction 97 to 3665:3667
[  177.111922] binder: undelivered TRANSACTION_COMPLETE
[  177.118571] binder: 3716:3718 unknown command 25346
[  177.123994] binder: undelivered TRANSACTION_ERROR: 29189
[  177.124906] binder: 3716:3718 ioctl c0306201 20000140 returned -22
08:55:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:43 executing program 5:
clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x38)
sched_setparam(0x0, &(0x7f0000000080)=0x7)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xc820, 0xffffffffffffffff)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
personality(0xe40000f)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="43ed659967325241599ea43fc9de1ad7140bac63510f993e04051babbeb2d8a3d411de2943547806af3aea3903027377ea83f78141bf3c3b2eacb63dfadb3aa70299082204e26d0bd33e72efe37359e9c6f78171bbbb32b3892b49ca939d82e51bc00e17d8b43187f04526612e247ba57cd032e1dab0f21fa90df57e0647e6f573bfd9a976d7ace44f16c74da59d309f00162028f8b21fce49ded7b13ba5bf3d515475b7b7b4b26f968f779bd26b0366a4a690f41235509e05cfa008b3d25f1c1c5e66"}, 0x10)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$f2fs(&(0x7f0000000300)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x2, &(0x7f0000000480)=[{&(0x7f0000000380)="5728a1c10afb33d4cbb85a59430b1ce5897457ee035e10c3a4cf9d77fef8fdfbbf21b56fded55c4789435147f6b6fc07bf59627d76ab77469d01360a7e4502606a2d1daf7f2333e9918a9cce75606ae26493243b2134f393e18525ae8251b99fe6872f684fca7eaac6d454516f9e817ba9876683958e39ddd5c86f8b00b1e19d61ae", 0x82, 0x101}, {&(0x7f0000000440)="b571602e5f103f2070f425b4c509fa4cb2886ac296247991bf8dd4d48710dfb6abfaf58f956723998cf984fefbe8", 0x2e}], 0x1000000, &(0x7f0000000580)={[{@usrquota={'usrquota', 0x3d, '{vboxnet1(trusted}nodev{$)'}}, {@nodiscard='nodiscard'}, {@acl='acl'}, {@usrquota={'usrquota'}}, {@nodiscard='nodiscard'}, {@background_gc_on='background_gc=on'}, {@prjquota={'prjquota', 0x3d, 'userem0'}}, {@inline_xattr='inline_xattr'}], [{@obj_role={'obj_role'}}, {@appraise='appraise'}, {@euid_lt={'euid<', r2}}]})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0x9, 0x6, {0x57, 0x3, 0x18, {0x6, 0x1000000000000001}, {0x5f5, 0x5}, @rumble={0x6, 0x1}}, {0x55, 0x800401, 0x80000001, {0xff, 0x40000000000140}, {0x2, 0x4}, @cond=[{0x0, 0xfa6f, 0x4, 0x7, 0x9, 0x92a}, {0x6, 0x2, 0x1, 0x10001, 0x6, 0xffff}]}})
ptrace$cont(0x20, 0x0, 0x0, 0x0)

08:55:43 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

08:55:43 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  177.141472] binder: 3716:3718 transaction failed 29189/-22, size 24-8 line 3117
[  177.198251] binder: 3722:3726 unknown command 25346
[  177.215795] binder: 3722:3726 ioctl c0306201 20000140 returned -22
[  177.216564] binder: 3725:3727 unknown command 25346
[  177.227825] binder: 3725:3727 ioctl c0306201 20000140 returned -22
[  177.237527] binder: 3729:3730 unknown command 25346
[  177.243482] binder: BINDER_SET_CONTEXT_MGR already set
[  177.243512] binder: 3725:3727 ioctl 40046207 0 returned -16
[  177.255701] binder: 3729:3730 ioctl c0306201 20000140 returned -22
[  177.279405] binder: 3722:3731 BC_INCREFS_DONE node 104 has no pending increfs request
[  177.962833] binder: release 3725:3727 transaction 106 out, still active
[  177.969653] binder: unexpected work type, 4, not freed
[  177.975661] binder: undelivered TRANSACTION_COMPLETE
[  177.981761] binder: release 3722:3726 transaction 103 out, still active
[  177.990397] binder: send failed reply for transaction 103, target dead
[  177.997739] binder: send failed reply for transaction 106, target dead
[  178.005119] binder: send failed reply for transaction 109 to 3729:3730
[  178.016975] binder: undelivered TRANSACTION_COMPLETE
[  178.022622] binder: undelivered TRANSACTION_ERROR: 29189
08:55:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 1:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe2(0x0, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00}\x00'], 0x1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfff, 0x200, 0xcfe6, 0x81}}}, [""]}, 0x30}}, 0x24000000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x2007fff)
write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7)
ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000140)={0x7, 0x1b4c})
sendfile(r0, r5, 0x0, 0x800000000024)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000003c0)={0x6, 0x6, 0x2, 0x2, 0x7950, 0x80000001})
openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
rt_sigsuspend(&(0x7f0000000340), 0x8)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

08:55:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:45 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  179.511434] binder: 3743:3747 unknown command 25346
[  179.530920] binder: 3743:3747 ioctl c0306201 20000140 returned -22
[  179.538461] binder: 3746:3748 transaction failed 29189/-22, size 24-8 line 3117
[  179.541529] binder: 3744:3749 unknown command 25346
08:55:45 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  179.583013] binder: 3744:3749 ioctl c0306201 20000140 returned -22
[  179.593740] binder: BINDER_SET_CONTEXT_MGR already set
[  179.609132] binder: 3744:3757 ioctl 40046207 0 returned -16
08:55:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

08:55:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

08:55:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

08:55:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  180.260334] binder: release 3743:3747 transaction 114 out, still active
[  180.270286] binder: send failed reply for transaction 114, target dead
[  180.278553] binder: send failed reply for transaction 117 to 3744:3749
[  180.285638] binder: send failed reply for transaction 120 to 3760:3761
[  180.300921] binder: undelivered TRANSACTION_ERROR: 29189
08:55:46 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:46 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:46 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  180.411675] binder: 3781:3785 unknown command 25346
08:55:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  180.431760] binder: 3781:3785 ioctl c0306201 20000140 returned -22
[  180.432994] binder: 3782:3787 unknown command 25346
[  180.440513] binder: 3780:3788 transaction failed 29189/-22, size 24-8 line 3117
[  180.458893] binder: 3786:3790 unknown command 25346
[  180.472460] binder: 3782:3787 ioctl c0306201 20000140 returned -22
08:55:46 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  180.479035] binder: BINDER_SET_CONTEXT_MGR already set
[  180.484486] binder: 3786:3790 ioctl c0306201 20000140 returned -22
[  180.491498] binder: 3782:3794 ioctl 40046207 0 returned -16
[  180.501463] binder: BINDER_SET_CONTEXT_MGR already set
08:55:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  180.524143] binder: 3786:3790 ioctl 40046207 0 returned -16
08:55:46 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  180.568847] binder: release 3786:3800 transaction 131 out, still active
[  180.582512] binder: release 3797:3799 transaction 134 out, still active
[  180.633703] binder: release 3804:3805 transaction 137 out, still active
08:55:46 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  180.677501] binder: 3808:3809 unknown command 25346
[  180.690863] binder: 3808:3809 ioctl c0306201 20000140 returned -22
[  180.708827] binder: BINDER_SET_CONTEXT_MGR already set
[  180.717318] binder: 3808:3809 ioctl 40046207 0 returned -16
[  180.741450] binder: release 3813:3814 transaction 143 out, still active
08:55:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  181.145649] binder: release 3781:3785 transaction 125 out, still active
[  181.164978] binder: release 3782:3787 transaction 128 out, still active
[  181.175264] binder: unexpected work type, 4, not freed
[  181.198200] binder: undelivered TRANSACTION_COMPLETE
[  181.218556] binder: send failed reply for transaction 125, target dead
[  181.222132] binder: 3822:3823 unknown command 25346
[  181.239555] binder: send failed reply for transaction 128, target dead
[  181.252449] binder: 3822:3823 ioctl c0306201 20000140 returned -22
08:55:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  181.263431] binder: 3825:3831 transaction failed 29189/-22, size 24-8 line 3117
[  181.266254] binder: send failed reply for transaction 131, target dead
[  181.290942] binder: send failed reply for transaction 134, target dead
[  181.302742] binder: 3828:3832 unknown command 25346
[  181.308673] binder: send failed reply for transaction 137, target dead
08:55:47 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  181.308775] binder: send failed reply for transaction 140 to 3808:3809
[  181.308803] binder: send failed reply for transaction 143, target dead
[  181.346945] binder: 3828:3832 ioctl c0306201 20000140 returned -22
[  181.367279] binder: BINDER_SET_CONTEXT_MGR already set
[  181.388231] binder: 3828:3840 ioctl 40046207 0 returned -16
08:55:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  181.431494] binder: release 3842:3846 transaction 154 out, still active
[  181.463230] binder: 3843:3844 unknown command 25346
[  181.477020] binder: 3843:3844 ioctl c0306201 20000140 returned -22
[  181.501507] binder: BINDER_SET_CONTEXT_MGR already set
[  181.507190] binder: 3843:3844 ioctl 40046207 0 returned -16
08:55:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:47 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  181.975057] binder: release 3822:3823 transaction 148 out, still active
[  181.984489] binder: send failed reply for transaction 148, target dead
[  181.991917] binder: send failed reply for transaction 151 to 3828:3832
[  182.002135] binder: send failed reply for transaction 154, target dead
[  182.017803] binder: send failed reply for transaction 157 to 3843:3844
08:55:47 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.126729] binder: 3855:3856 unknown command 25346
[  182.145580] binder: 3855:3856 ioctl c0306201 20000140 returned -22
[  182.165695] binder: 3859:3864 unknown command 25346
08:55:48 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.187860] binder: 3859:3864 ioctl c0306201 20000140 returned -22
[  182.199140] binder: 3866:3868 unknown command 25346
[  182.213015] binder: 3866:3868 ioctl c0306201 20000140 returned -22
[  182.226244] binder: release 3859:3870 transaction 164 out, still active
08:55:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.242027] binder: BINDER_SET_CONTEXT_MGR already set
08:55:48 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.263478] binder: 3866:3868 ioctl 40046207 0 returned -16
[  182.296046] binder: release 3866:3872 transaction 167 out, still active
[  182.316975] binder: release 3879:3882 transaction 170 out, still active
08:55:48 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.820495] binder: release 3855:3856 transaction 161 out, still active
[  182.832966] binder: send failed reply for transaction 161, target dead
[  182.840925] binder: send failed reply for transaction 164, target dead
[  182.859230] binder: send failed reply for transaction 167, target dead
08:55:48 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.881637] binder: send failed reply for transaction 170, target dead
[  182.908582] binder: send failed reply for transaction 173 to 3885:3886
08:55:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.945428] binder: 3895:3896 unknown command 25346
[  182.953816] binder: 3890:3900 transaction failed 29189/-22, size 24-8 line 3117
[  182.968245] binder: 3891:3898 unknown command 25346
[  182.974126] binder: 3895:3896 ioctl c0306201 20000140 returned -22
[  182.983541] binder: 3891:3898 ioctl c0306201 20000140 returned -22
08:55:48 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  182.992292] binder: BINDER_SET_CONTEXT_MGR already set
[  182.998471] binder: 3891:3898 ioctl 40046207 0 returned -16
08:55:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:48 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  183.047848] binder: release 3905:3908 transaction 184 out, still active
[  183.102181] binder: release 3912:3914 transaction 187 out, still active
[  183.147943] binder: release 3919:3920 transaction 190 out, still active
08:55:49 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:49 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  183.665331] binder: release 3895:3896 transaction 178 out, still active
[  183.672899] binder: unexpected work type, 4, not freed
[  183.678655] binder: undelivered TRANSACTION_COMPLETE
[  183.685050] binder: send failed reply for transaction 178, target dead
[  183.717719] binder: send failed reply for transaction 181 to 3891:3898
[  183.742477] binder: 3924:3933 transaction failed 29189/-22, size 24-8 line 3117
[  183.757417] binder: send failed reply for transaction 184, target dead
08:55:49 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  183.775404] binder: send failed reply for transaction 187, target dead
[  183.789496] binder: 3926:3932 transaction failed 29189/-22, size 24-8 line 3117
[  183.795418] binder: send failed reply for transaction 190, target dead
[  183.809916] binder: undelivered TRANSACTION_COMPLETE
08:55:49 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  183.854793] binder: 3929:3934 unknown command 25346
[  183.865467] binder: undelivered TRANSACTION_ERROR: 29189
[  183.866313] binder: 3927:3936 unknown command 25346
[  183.877426] binder: 3942:3944 transaction failed 29189/-22, size 24-8 line 3117
[  183.896252] binder: 3929:3934 ioctl c0306201 20000140 returned -22
[  183.901610] binder: 3927:3936 ioctl c0306201 20000140 returned -22
[  183.903843] binder: 3929:3939 transaction failed 29189/-22, size 24-8 line 3117
[  183.937865] binder: release 3927:3940 transaction 198 out, still active
08:55:49 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:49 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:49 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  183.962372] binder: send failed reply for transaction 198, target dead
[  184.025563] binder: 3949:3950 transaction failed 29189/-22, size 24-8 line 3117
[  184.055744] binder: 3952:3958 transaction failed 29189/-22, size 24-8 line 3117
08:55:49 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  184.118441] binder: 3956:3962 unknown command 25346
[  184.154480] binder: 3956:3962 ioctl c0306201 20000140 returned -22
[  184.155339] binder: 3960:3963 unknown command 25346
[  184.171318] binder: 3956:3976 transaction failed 29189/-22, size 24-8 line 3117
[  184.201237] binder: 3960:3966 transaction failed 29189/-22, size 24-8 line 3117
08:55:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  184.215300] binder: 3960:3963 ioctl c0306201 20000140 returned -22
[  184.233762] binder: 3967:3974 transaction failed 29189/-22, size 24-8 line 3117
08:55:50 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  184.265319] binder: 3972:3977 transaction failed 29189/-22, size 24-8 line 3117
08:55:50 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  184.363077] binder: 3980:3993 unknown command 25346
[  184.379032] binder: 3986:3996 unknown command 25346
[  184.401415] binder: 3980:3993 ioctl c0306201 20000140 returned -22
[  184.408228] binder: 3986:3996 ioctl c0306201 20000140 returned -22
[  184.418993] binder: 3980:3983 transaction failed 29189/-22, size 24-8 line 3117
[  184.432999] binder: 3986:3987 transaction failed 29189/-22, size 24-8 line 3117
[  184.435333] binder: 3990:3994 transaction failed 29189/-22, size 24-8 line 3117
[  184.449437] binder: 3991:3995 transaction failed 29189/-22, size 24-8 line 3117
08:55:50 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  184.648521] binder: release 4005:4010 transaction 215 out, still active
[  184.654944] binder: 4009:4013 unknown command 25346
[  184.684544] binder: 4009:4013 ioctl c0306201 20000140 returned -22
08:55:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:50 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  184.694499] binder: release 4014:4016 transaction 218 out, still active
08:55:50 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:50 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  184.732750] binder: release 4009:4021 transaction 221 out, still active
08:55:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  184.812828] binder: release 4022:4023 transaction 224 out, still active
[  184.893927] binder: BINDER_SET_CONTEXT_MGR already set
[  184.900567] binder: 4030:4032 ioctl 40046207 0 returned -16
08:55:51 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  185.338585] binder: release 4004:4007 transaction 212 out, still active
[  185.351556] binder: send failed reply for transaction 212, target dead
[  185.360397] binder: send failed reply for transaction 215, target dead
[  185.386657] binder: send failed reply for transaction 218, target dead
[  185.407707] binder: send failed reply for transaction 221, target dead
[  185.418710] binder: 4041:4050 transaction failed 29189/-22, size 24-8 line 3117
08:55:51 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  185.435059] binder: send failed reply for transaction 224, target dead
08:55:51 executing program 0:
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  185.494959] binder: send failed reply for transaction 227 to 4030:4032
[  185.534194] binder: release 4053:4055 transaction 235 out, still active
[  185.569508] binder: send failed reply for transaction 232 to 4047:4052
[  185.578410] binder: send failed reply for transaction 235, target dead
[  185.586178] binder: send failed reply for transaction 238 to 4060:4063
[  185.608549] binder: undelivered TRANSACTION_ERROR: 29189
08:55:51 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:51 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:51 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 0:
creat(0x0, 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  185.614881] binder: undelivered TRANSACTION_ERROR: 29189
[  185.663034] binder: 4074:4076 transaction failed 29189/-22, size 24-8 line 3117
08:55:51 executing program 0:
creat(0x0, 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  185.745581] binder: release 4069:4073 transaction 243 out, still active
[  185.766049] binder: release 4081:4085 transaction 246 out, still active
08:55:51 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:51 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  185.795309] binder: send failed reply for transaction 243, target dead
[  185.835660] binder: send failed reply for transaction 246, target dead
[  185.879696] binder: release 4087:4089 transaction 253 out, still active
[  185.899788] binder: release 4091:4095 transaction 255 out, still active
[  185.928921] binder: BINDER_SET_CONTEXT_MGR already set
[  185.936416] binder: 4092:4096 ioctl 40046207 0 returned -16
[  185.945957] binder: release 4092:4096 transaction 259 out, still active
08:55:52 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:52 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:52 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:52 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:52 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  186.457493] binder: release 4075:4078 transaction 250 out, still active
[  186.480975] binder: send failed reply for transaction 250, target dead
08:55:52 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  186.508997] binder: send failed reply for transaction 255, target dead
08:55:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  186.556179] binder: send failed reply for transaction 253, target dead
[  186.565658] binder: 4103:4108 transaction failed 29189/-22, size 24-8 line 3117
[  186.595500] binder: 4105:4112 transaction failed 29189/-22, size 24-8 line 3117
08:55:52 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:52 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:52 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  186.605081] binder: send failed reply for transaction 259, target dead
08:55:52 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  186.754223] binder: release 4127:4131 transaction 268 out, still active
[  186.773869] binder: release 4130:4132 transaction 271 out, still active
08:55:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:53 executing program 0:
creat(0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  187.308884] binder: release 4111:4113 transaction 265 out, still active
[  187.324000] binder: send failed reply for transaction 265, target dead
08:55:53 executing program 0:
creat(0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  187.354388] binder: send failed reply for transaction 268, target dead
08:55:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  187.397520] binder: 4140:4146 transaction failed 29189/-22, size 24-8 line 3117
[  187.410590] binder: send failed reply for transaction 271, target dead
08:55:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 0:
creat(0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  187.487688] binder: 4145:4147 unknown command 25346
[  187.526874] binder: 4145:4147 ioctl c0306201 20000140 returned -22
[  187.537862] binder: release 4159:4163 transaction 279 out, still active
[  187.563920] binder: release 4145:4153 transaction 276 out, still active
08:55:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:53 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

08:55:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  187.601684] binder: send failed reply for transaction 276, target dead
[  187.626822] binder: send failed reply for transaction 279, target dead
[  187.638536] binder: 4172:4177 ioctl c0306201 0 returned -14
08:55:53 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

08:55:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  187.663438] binder: 4173:4179 transaction failed 29189/-22, size 24-8 line 3117
08:55:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  187.729758] binder: 4184:4189 ioctl c0306201 0 returned -14
[  187.733989] binder: 4176:4188 unknown command 25346
08:55:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  187.770428] binder: 4176:4188 ioctl c0306201 20000140 returned -22
[  187.798529] binder: release 4176:4181 transaction 284 out, still active
08:55:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:53 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  187.834253] binder: send failed reply for transaction 284, target dead
[  187.843308] binder: 4195:4197 transaction failed 29189/-22, size 24-8 line 3117
[  187.853237] binder: 4200:4201 ioctl c0306201 0 returned -14
08:55:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  187.952243] binder: 4205:4208 unknown command 25346
[  187.968859] binder: 4216:4217 transaction failed 29189/-22, size 24-8 line 3117
[  187.979375] binder: 4203:4218 transaction failed 29189/-22, size 24-8 line 3117
[  187.979869] binder: 4205:4208 ioctl c0306201 20000140 returned -22
08:55:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:53 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

[  188.030800] binder_alloc: 4205: binder_alloc_buf, no vma
[  188.069220] binder: 4205:4222 transaction failed 29189/-3, size 24-8 line 3254
08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  188.104737] binder_alloc: 4205: binder_alloc_buf, no vma
[  188.121386] binder: 4225:4226 transaction failed 29189/-22, size 24-8 line 3117
08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  188.154214] binder: 4229:4230 transaction failed 29189/-3, size 24-8 line 3254
08:55:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

[  188.276791] binder: 4247:4251 transaction failed 29189/-22, size 24-8 line 3117
[  188.293699] binder: 4237:4241 unknown command 25346
[  188.314629] binder: 4243:4257 transaction failed 29189/-22, size 24-8 line 3117
08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  188.317621] binder: 4237:4241 ioctl c0306201 20000140 returned -22
[  188.338402] binder_alloc: 4237: binder_alloc_buf, no vma
[  188.348970] binder: 4237:4248 transaction failed 29189/-3, size 24-8 line 3254
08:55:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  188.482155] binder: 4275:4278 transaction failed 29189/-22, size 0-8 line 3117
[  188.512958] binder: 4273:4279 transaction failed 29189/-22, size 24-8 line 3117
[  188.513584] binder: 4265:4270 unknown command 25346
08:55:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  188.526403] binder: undelivered TRANSACTION_ERROR: 29189
[  188.545269] binder: 4269:4271 transaction failed 29189/-22, size 24-8 line 3117
[  188.557706] binder: 4265:4270 ioctl c0306201 20000140 returned -22
[  188.570759] binder_alloc: 4265: binder_alloc_buf, no vma
08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  188.577569] binder: 4265:4280 transaction failed 29189/-3, size 24-8 line 3254
[  188.599597] binder_alloc: 4265: binder_alloc_buf, no vma
08:55:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  188.626525] binder_alloc: 4265: binder_alloc_buf, no vma
[  188.634477] binder: 4286:4290 transaction failed 29189/-3, size 0-8 line 3254
[  188.648475] binder: 4289:4291 transaction failed 29189/-3, size 24-8 line 3254
[  188.665451] binder: undelivered TRANSACTION_ERROR: 29189
08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  188.749514] binder: 4306:4310 transaction failed 29189/-22, size 24-8 line 3117
[  188.763398] binder: 4302:4309 transaction failed 29189/-22, size 0-8 line 3117
08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 3:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  188.802223] binder: 4293:4296 transaction failed 29189/-22, size 24-8 line 3117
[  188.807955] binder: 4299:4301 unknown command 25346
[  188.820668] binder: 4316:4317 transaction failed 29189/-22, size 24-8 line 3117
[  188.832296] binder: undelivered TRANSACTION_ERROR: 29189
[  188.838533] binder: 4299:4301 ioctl c0306201 20000140 returned -22
08:55:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 3:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  188.863402] binder: 4299:4311 transaction failed 29189/-22, size 24-8 line 3117
08:55:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 3:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  188.926544] binder: 4324:4329 transaction failed 29189/-22, size 0-8 line 3117
[  188.958640] binder: 4327:4332 transaction failed 29189/-22, size 24-8 line 3117
[  188.963290] binder: undelivered TRANSACTION_ERROR: 29189
08:55:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.007514] binder: 4325:4331 transaction failed 29189/-22, size 24-8 line 3117
[  189.040638] binder: 4342:4343 transaction failed 29189/-22, size 0-8 line 3117
08:55:54 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  189.068252] binder: undelivered TRANSACTION_ERROR: 29189
[  189.087753] binder: 4334:4336 unknown command 25346
08:55:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.123177] binder: 4334:4336 ioctl c0306201 20000140 returned -22
[  189.131208] binder: 4334:4344 transaction failed 29189/-22, size 24-8 line 3117
[  189.134203] binder: 4349:4353 transaction failed 29189/-22, size 24-8 line 3117
[  189.148439] binder: 4351:4354 transaction failed 29189/-22, size 24-8 line 3117
[  189.160996] binder: 4355:4358 transaction failed 29189/-22, size 0-8 line 3117
08:55:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.194893] binder: undelivered TRANSACTION_ERROR: 29189
08:55:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.246589] binder: 4361:4366 transaction failed 29189/-22, size 24-8 line 3117
08:55:55 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  189.317494] binder: 4363:4372 unknown command 25346
[  189.323218] binder: 4363:4372 ioctl c0306201 20000140 returned -22
[  189.341022] binder: 4363:4367 transaction failed 29189/-22, size 24-8 line 3117
08:55:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.403974] binder: 4375:4384 transaction failed 29189/-22, size 24-8 line 3117
[  189.410049] binder: 4376:4381 transaction failed 29189/-22, size 24-8 line 3117
[  189.427365] binder: 4378:4383 transaction failed 29189/-22, size 24-8 line 3117
08:55:55 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.524067] binder: 4390:4394 transaction failed 29189/-22, size 24-8 line 3117
[  189.537260] binder: 4393:4397 transaction failed 29189/-22, size 24-8 line 3117
08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  189.565687] binder_alloc: 4382: binder_alloc_buf failed to map pages in userspace, no vma
08:55:55 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.622904] binder: 4391:4395 transaction failed 29189/-3, size 24-8 line 3254
[  189.636457] binder: 4402:4408 transaction failed 29189/-22, size 24-8 line 3117
[  189.649007] binder: 4404:4409 transaction failed 29189/-22, size 24-8 line 3117
08:55:55 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.719362] binder: 4416:4417 transaction failed 29189/-22, size 24-0 line 3117
08:55:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

[  189.761065] binder: undelivered TRANSACTION_ERROR: 29189
[  189.771202] binder_alloc: 4407: binder_alloc_buf failed to map pages in userspace, no vma
08:55:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.819349] binder: 4421:4429 transaction failed 29189/-22, size 24-8 line 3117
[  189.825033] binder: 4420:4425 transaction failed 29189/-3, size 24-8 line 3254
[  189.848927] binder: 4432:4435 transaction failed 29189/-22, size 24-0 line 3117
08:55:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

[  189.880162] binder: undelivered TRANSACTION_ERROR: 29189
08:55:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  189.947602] binder_alloc: 4427: binder_alloc_buf failed to map pages in userspace, no vma
[  189.986768] binder: 4447:4450 transaction failed 29189/-22, size 24-8 line 3117
08:55:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  189.988776] binder: 4439:4442 transaction failed 29189/-22, size 24-8 line 3117
[  190.006008] binder: 4445:4449 transaction failed 29189/-3, size 24-0 line 3254
[  190.024795] binder: undelivered TRANSACTION_ERROR: 29189
08:55:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.078859] binder: 4461:4464 transaction failed 29189/-22, size 24-0 line 3117
[  190.083027] binder: 4451:4454 unknown command 25346
08:55:56 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

[  190.121446] binder: 4463:4465 transaction failed 29189/-22, size 24-8 line 3117
[  190.122608] binder: undelivered TRANSACTION_ERROR: 29189
[  190.124941] binder: 4451:4454 ioctl c0306201 20000140 returned -22
[  190.152236] binder: release 4451:4459 transaction 341 out, still active
08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.185937] binder: release 4467:4469 transaction 344 out, still active
[  190.215785] binder_alloc: 4451: binder_alloc_buf, no vma
[  190.218393] binder: send failed reply for transaction 341, target dead
08:55:56 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.236351] binder: 4474:4475 transaction failed 29189/-3, size 24-0 line 3254
[  190.243306] binder: 4477:4481 transaction failed 29189/-22, size 24-8 line 3117
[  190.266462] binder: send failed reply for transaction 344, target dead
08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.300444] binder: undelivered TRANSACTION_ERROR: 29189
[  190.325523] binder: 4479:4490 unknown command 25346
[  190.338202] binder: 4484:4487 transaction failed 29189/-22, size 24-8 line 3117
08:55:56 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:56 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.354415] binder: 4479:4490 ioctl c0306201 20000140 returned -22
[  190.378066] binder: release 4492:4494 transaction 354 out, still active
[  190.390419] binder: release 4479:4482 transaction 351 out, still active
[  190.441478] binder: send failed reply for transaction 351, target dead
[  190.458598] binder: 4501:4507 transaction failed 29189/-22, size 24-8 line 3117
08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.481820] binder: send failed reply for transaction 354, target dead
[  190.486358] binder: 4505:4509 unknown command 25346
[  190.494552] binder: send failed reply for transaction 357 to 4496:4499
[  190.509888] binder: 4505:4509 ioctl c0306201 20000140 returned -22
08:55:56 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:55:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.526896] binder: 4506:4510 transaction failed 29189/-22, size 24-8 line 3117
[  190.527380] binder: undelivered TRANSACTION_COMPLETE
[  190.561173] binder: undelivered TRANSACTION_ERROR: 29189
08:55:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:56 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.637885] binder: release 4525:4526 transaction 367 out, still active
[  190.655700] binder: send failed reply for transaction 361 to 4505:4513
[  190.656404] binder: 4521:4530 transaction failed 29189/-22, size 24-8 line 3117
08:55:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.713746] binder: send failed reply for transaction 364 to 4515:4516
[  190.728503] binder: 4531:4533 unknown command 25346
[  190.737821] binder: 4535:4538 transaction failed 29189/-22, size 24-8 line 3117
[  190.749612] binder: send failed reply for transaction 367, target dead
08:55:56 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.768597] binder: 4531:4533 ioctl c0306201 20000140 returned -22
[  190.774381] binder: 4532:4534 unknown command 25346
[  190.779261] binder: undelivered TRANSACTION_ERROR: 29189
[  190.795838] binder: undelivered TRANSACTION_COMPLETE
[  190.803894] binder: 4532:4534 ioctl c0306201 20000140 returned -22
[  190.810528] binder: undelivered TRANSACTION_ERROR: 29189
08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  190.824034] binder: BINDER_SET_CONTEXT_MGR already set
[  190.841755] binder: 4532:4547 ioctl 40046207 0 returned -16
08:55:56 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.877131] binder: release 4544:4545 transaction 376 out, still active
[  190.886217] binder_alloc: 4531: binder_alloc_buf, no vma
[  190.895631] binder: send failed reply for transaction 373 to 4531:4542
[  190.903294] binder: 4550:4552 transaction failed 29189/-3, size 24-8 line 3254
[  190.919020] binder: 4553:4557 unknown command 25346
08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.919927] binder: 4554:4559 transaction failed 29189/-22, size 24-8 line 3117
[  190.926583] binder: send failed reply for transaction 376, target dead
[  190.948337] binder: 4553:4557 ioctl c0306201 20000140 returned -22
[  190.959831] binder: send failed reply for transaction 379 to 4532:4534
08:55:56 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  190.980296] binder: undelivered TRANSACTION_ERROR: 29189
08:55:56 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.039651] binder: release 4568:4571 transaction 388 out, still active
[  191.075731] binder: release 4573:4575 transaction 391 out, still active
08:55:56 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.097138] binder: 4566:4580 unknown command 25346
[  191.103856] binder: release 4578:4581 transaction 394 out, still active
[  191.127068] binder: 4566:4580 ioctl c0306201 20000140 returned -22
[  191.146930] binder: BINDER_SET_CONTEXT_MGR already set
08:55:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.172384] binder: 4566:4570 ioctl 40046207 0 returned -16
[  191.173265] binder: release 4582:4586 transaction 397 out, still active
[  191.216248] binder: release 4584:4588 transaction 398 out, still active
[  191.230650] binder: release 4566:4570 transaction 403 out, still active
08:55:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:57 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.694178] binder: release 4553:4557 transaction 385 out, still active
[  191.715889] binder: send failed reply for transaction 385, target dead
[  191.717763] binder: 4594:4597 transaction failed 29189/-22, size 24-8 line 3117
[  191.733827] binder: send failed reply for transaction 388, target dead
08:55:57 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.779242] binder: send failed reply for transaction 391, target dead
[  191.793649] binder: 4602:4606 unknown command 25346
[  191.801744] binder: send failed reply for transaction 394, target dead
08:55:57 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.809517] binder: 4602:4606 ioctl c0306201 20000140 returned -22
[  191.853132] binder: send failed reply for transaction 397, target dead
[  191.873004] binder: 4613:4618 unknown command 25346
08:55:57 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.889790] binder: send failed reply for transaction 398, target dead
[  191.896943] binder: 4613:4618 ioctl c0306201 20000140 returned -22
[  191.914277] binder: send failed reply for transaction 403, target dead
[  191.928860] binder: release 4617:4619 transaction 411 out, still active
08:55:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:57 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  191.931650] binder: BINDER_SET_CONTEXT_MGR already set
[  191.987550] binder: 4632:4634 unknown command 25346
[  191.995954] binder: release 4624:4627 transaction 414 out, still active
[  192.000985] binder_alloc: 4602: binder_alloc_buf, no vma
[  192.008722] binder: 4613:4625 ioctl 40046207 0 returned -16
[  192.013204] binder: 4636:4638 transaction failed 29189/-3, size 24-8 line 3254
[  192.015949] binder: send failed reply for transaction 408 to 4602:4616
[  192.024663] binder_alloc: 4602: binder_alloc_buf, no vma
08:55:57 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.031419] binder: 4632:4634 ioctl c0306201 20000140 returned -22
[  192.041516] binder: send failed reply for transaction 411, target dead
[  192.050911] binder_alloc: 4602: binder_alloc_buf, no vma
[  192.065945] binder: send failed reply for transaction 414, target dead
[  192.069680] binder: 4629:4637 transaction failed 29189/-3, size 24-8 line 3254
08:55:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.081681] binder: send failed reply for transaction 421 to 4632:4640
[  192.093735] binder: 4613:4618 transaction failed 29189/-3, size 24-8 line 3254
[  192.099147] binder: undelivered TRANSACTION_ERROR: 29189
[  192.113438] binder: undelivered TRANSACTION_ERROR: 29189
[  192.119918] binder: 4644:4645 unknown command 25346
08:55:58 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.157814] binder: 4644:4645 ioctl c0306201 20000140 returned -22
[  192.195863] binder: release 4649:4652 transaction 428 out, still active
08:55:58 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  192.206640] binder: release 4644:4653 transaction 425 out, still active
[  192.243055] binder: send failed reply for transaction 425, target dead
08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.264797] binder: send failed reply for transaction 428, target dead
[  192.277408] binder: 4662:4664 transaction failed 29189/-22, size 24-8 line 3117
[  192.298487] binder: send failed reply for transaction 431 to 4654:4655
08:55:58 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.341056] binder_alloc: 4669: binder_alloc_buf, no vma
[  192.341373] binder: undelivered TRANSACTION_ERROR: 29189
[  192.352322] binder: 4658:4661 transaction failed 29189/-3, size 24-8 line 3254
08:55:58 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:58 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  192.438612] binder: 4682:4683 transaction failed 29189/-22, size 24-8 line 3117
08:55:58 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  192.524396] binder: 4698:4702 ioctl c0306201 0 returned -14
08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

08:55:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.582451] binder: 4705:4707 transaction failed 29189/-22, size 24-8 line 3117
[  192.604757] binder: 4689:4693 unknown command 25346
[  192.615097] binder: 4710:4712 unknown command 25346
08:55:58 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.633072] binder: 4710:4712 ioctl c0306201 20000140 returned -22
[  192.639581] binder: 4689:4693 ioctl c0306201 20000140 returned -22
[  192.651324] binder: BINDER_SET_CONTEXT_MGR already set
[  192.656646] binder: 4689:4704 ioctl 40046207 0 returned -16
[  192.664952] binder: 4714:4716 ioctl c0306201 0 returned -14
08:55:58 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

08:55:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.684470] binder: release 4689:4704 transaction 445 out, still active
08:55:58 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/194)
creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x5620, 0x1, 0x1, 0x100, 0x8}, 0xc)

08:55:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

[  192.727751] binder: release 4720:4724 transaction 448 out, still active
[  192.735152] binder: 4726:4729 ioctl c0306201 0 returned -14
08:55:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r5})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  192.822790] binder: 4728:4731 unknown command 25346
[  192.834934] binder: 4728:4731 ioctl c0306201 20000140 returned -22
[  192.851446] binder: BINDER_SET_CONTEXT_MGR already set
[  192.860648] binder: 4728:4731 ioctl 40046207 0 returned -16
[  192.923430] binder: 4728:4745 BC_INCREFS_DONE node 452 has no pending increfs request
[  192.934469] binder: 4728:4745 Release 1 refcount change on invalid ref 1 ret -22
08:55:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:55:59 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'hwsim0\x00', {0x2, 0x4e21, @rand_addr=0x8}})
sendfile(r1, r0, &(0x7f0000000100), 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r2 = gettid()
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
ptrace$setregs(0xffffffffffffffff, r2, 0x9, &(0x7f0000000000)="cd5abc22c15763ecc9533250e47158bb6920462266e0712187b0a7f086cf01454458d126426f30a2dd420a7f42a078b79aaddf6442038e3e4eb064337bbcfed24997fac6a4333ea02b8e1afc815d7c943205bf577f912075e836243c4ba41d75c6a08697030a98a9e3d7efd3e2cafc5969b18cf50ef94667bdd85236a0a1387378a788da6f289fc2ab018547974c96baa42047c1c239b0d26ecee84898c115a118818579435561adf7fb6b5b3922b38829f6691a5dd5e6e4c20c7ee91a79ba30ab40e6bfb37a27628675b98df0a947fc5930ef688d03d79b3e321dc0d21b171c7682b6bd57c8b060c0c6c44229")

08:55:59 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:59 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

08:55:59 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, &(0x7f00000003c0))
r1 = getpid()
sched_setscheduler(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1f, 0x0, 0xffffff06)
dup(0xffffffffffffffff)
socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840))
close(0xffffffffffffffff)
signalfd(r2, &(0x7f0000000000)={0x48457dc6}, 0x8)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
socket$inet_udplite(0x2, 0x2, 0x88)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[  193.392938] binder: release 4710:4712 transaction 442 out, still active
[  193.411581] binder: send failed reply for transaction 442, target dead
[  193.428932] binder: send failed reply for transaction 445, target dead
08:55:59 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

08:55:59 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x80100, 0x0)
r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setlease(r1, 0x400, 0x1)
accept4$unix(r0, 0x0, 0x0, 0x0)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0x6, 0x6, 0x70, 0x9c8, 0x1000, 0x81})
fcntl$setown(r1, 0x8, 0x0)
execveat(r1, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x1000)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='proc,)em0\x00', 0xfffffffffffffff9)
add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000540)="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", 0x1000, 0xffffffffffffffff)
keyctl$invalidate(0x15, r2)
unshare(0x40000000)
ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0)

08:55:59 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x33, @loopback, 0x4e22, 0x1, 'ovf\x00', 0x3a, 0x5, 0x16}, {@multicast2, 0x4e21, 0x2, 0xe0f0, 0xffffffff, 0x19b7}}, 0x44)
creat(0x0, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

[  193.456232] binder: send failed reply for transaction 448, target dead
[  193.463612] binder: 4754:4757 unknown command 25346
[  193.475393] binder: 4754:4757 ioctl c0306201 20000140 returned -22
[  193.476578] binder: send failed reply for transaction 451 to 4728:4731
08:55:59 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0x1000, &(0x7f0000000480)="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"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000000000009ca2dc98c6a45741f337b4d2783000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

08:55:59 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:55:59 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

08:56:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:00 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x2, 0x8}, 0xc)
fcntl$getflags(r0, 0x40a)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3)
open(&(0x7f0000000180)='./file0\x00', 0x400, 0x40)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0xfffffffffffffffc, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=<r3=>0x0)
rt_sigqueueinfo(r3, 0x6, &(0x7f0000000340)={0x3, 0x10000, 0x2})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f00000002c0)='./file0\x00', 0x400000, 0x40)
write$cgroup_int(r2, &(0x7f0000000140), 0xffffff35)

08:56:00 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000000), 0x1c)
r2 = memfd_create(&(0x7f0000000000)='Pev ', 0x0)
ftruncate(r2, 0x200739)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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")
sendfile(r1, r2, 0x0, 0xa00004000000000)

08:56:00 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

08:56:00 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:00 executing program 5:
r0 = creat(0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffff, 0x9}]})
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a628e00000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

[  194.241806] binder: send failed reply for transaction 455 to 4754:4757
[  194.248554] binder: undelivered TRANSACTION_COMPLETE
08:56:00 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:00 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

[  194.281993] binder: undelivered TRANSACTION_ERROR: 29189
[  194.291508] binder: 4797:4803 unknown command 25346
[  194.308456] binder: 4797:4803 ioctl c0306201 20000140 returned -22
08:56:00 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'tunl0\x00', 0x4})
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000004c0)={@loopback, <r4=>0x0}, &(0x7f0000000500)=0x14)
accept$packet(r0, &(0x7f0000000640)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000800)={@remote, @rand_addr, <r6=>0x0}, &(0x7f0000000840)=0xc)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000069c0)={@rand_addr, @dev, <r7=>0x0}, &(0x7f0000006a00)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000006c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8201}, 0xc, &(0x7f0000006c00)={&(0x7f0000006a40)={0x1bc, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xe4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000001800000000000000080000000000000055233d1318dbcb78a57173c2171376b7ff216cdf7c3324c0245e63906241b940d2f7af663d1b95b297851ac2314f807cc3bf9320b9c58b5f37071b943db92846d5145fb9882dd3f55d0d3a4ec85c00ba1cb348de899fee3722458056e653891ec8d6ebbb6f3d177723295fbf98b98134bbc78a71f5aac22865fce28711a9ac1b140f33bfe05d8d4b938d3b616af0b8189d53cac12c6cf90b2324d726332411f4ebf5cae2", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040))

08:56:00 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

08:56:00 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:00 executing program 3:
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x101, 0x1, 0x5fd, 0x89, 0x0, 0x0, 0x104, 0x8, 0xffff, 0x6, 0x7, 0x9, 0xffffffff00000000, 0xae, 0x401, 0xd30c, 0x2, 0x1, 0x1, 0x3, 0x7, 0x2, 0x5, 0xfffffffffffffff7, 0xc72, 0x9, 0x5, 0x7, 0x1, 0x7, 0xc0000000000000, 0x8001, 0x5, 0x8, 0x2, 0x7ff, 0x0, 0xb0, 0x1, @perf_config_ext={0xc75, 0x1}, 0x2000, 0x1, 0x3e7139f8, 0x0, 0x40, 0x7, 0x8}, 0x0, 0x7, r0, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = getpgid(0x0)
sched_getparam(r2, &(0x7f0000000300))
r3 = memfd_create(&(0x7f0000000380)='\x00', 0x0)
clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0)
ioctl$FICLONE(r3, 0x40049409, r1)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./control\x00', 0x0, 0x18}, 0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0)
ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f00000002c0)={0x9, 0x7f})
fcntl$setlease(r3, 0x400, 0x1)
accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x0)
r5 = fcntl$getown(r3, 0x9)
sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x8)
umount2(&(0x7f0000000180)='./control\x00', 0x1)
fcntl$setown(r3, 0x8, 0x0)
execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
unshare(0x40000000)
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000f0000000000000000300000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0)

[  194.424937] binder: 4815:4818 ioctl c0306201 0 returned -14
[  194.471934] binder: 4821:4823 got transaction with invalid offset (0, min 0 max 0) or object.
[  194.494945] binder: 4821:4823 transaction failed 29201/-22, size 0-8 line 3348
[  194.511125] binder: undelivered TRANSACTION_ERROR: 29201
[  194.551495] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  194.558643] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  194.566744] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (15, 14)
[  194.575732] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  194.583745] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  194.590929] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  194.598629] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (15, 14)
[  194.606472] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  194.833581] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  194.840812] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  194.848393] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (15, 14)
[  194.855557] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  194.863543] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  194.870694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  194.878214] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (15, 14)
[  194.885377] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
08:56:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:00 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

08:56:00 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:00 executing program 5:
r0 = creat(0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x1ff)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x1f06385, 0x2, &(0x7f0000003280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x7f)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00L\xc4\\G\x82W@3q\xeb\xac\xfa\xd4O\x11\\\xe9\'Uy\x9a@+q\x82j\x023\x99\xa4\xb0')
mkdir(&(0x7f0000000100)='./file0\x00', 0x1)
open(&(0x7f00000006c0)='./file0/file0\x00', 0x200, 0x10)
mount(&(0x7f0000000580)=ANY=[@ANYBLOB="002e4c9752243c8b0cd5fd8138890100000000000000493a84ab5dfd28d7328a2ee09db1d86b6ce04dc1d29d2e62c55a7bdfca80d9c2a500000000000000"], 0x0, 0x0, 0x201000, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
mkdir(&(0x7f0000000080)='./file0\x00', 0x6)
mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, &(0x7f0000000240)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02')
socketpair$unix(0x1, 0x3ffffff, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pivot_root(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00')
read(r2, 0x0, 0x0)
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000001c0)=0x8)
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e)
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2b2d50d99fb90f10)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:00 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:00 executing program 3:
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000003c0))
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000440))
r0 = getpgrp(0xffffffffffffffff)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
munmap(&(0x7f0000551000/0x4000)=nil, 0x4000)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000340)={0x7, 0x7, 0x40, 0x1, 0x17, 0x8, 0x2, 0x7, 0x1000, 0x3, 0x4, 0x10001})
chdir(&(0x7f0000000480)='./file0\x00')
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0))
r2 = getpgrp(0x0)
sched_setscheduler(r2, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x6ea)
lstat(0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000005c0)={0x100017, 0xfffffcc2, 0x0})
socketpair$unix(0x1, 0x100000000005, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x28, &(0x7f0000000100)}, 0x10)
fcntl$setlease(r4, 0x400, 0x0)
r5 = syz_open_procfs(r2, &(0x7f0000000240)='net/arp\x00')
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000004c0)={{0x16, @broadcast, 0x4e22, 0x2, 'nq\x00', 0x4, 0x8, 0x10}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0x3, 0x4, 0x4c2, 0xc9fc}}, 0x44)
get_thread_area(&(0x7f0000000200)={0x4, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x8, 0x8001, 0x101})
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00')
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  195.077424] binder: release 4797:4803 transaction 459 out, still active
[  195.085744] binder: send failed reply for transaction 459, target dead
[  195.114043] binder: 4849:4853 unknown command 25346
[  195.116005] binder: 4846:4857 ioctl c0306201 0 returned -14
08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  195.123880] binder: 4852:4855 transaction failed 29189/-22, size 0-8 line 3117
[  195.134439] binder: 4848:4856 transaction failed 29189/-22, size 0-8 line 3117
[  195.137258] binder: 4849:4853 ioctl c0306201 20000140 returned -22
[  195.159278] binder_alloc: 4849: binder_alloc_buf, no vma
[  195.168300] binder: undelivered TRANSACTION_ERROR: 29189
08:56:01 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x80000, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$EVIOCGPROP(r1, 0xc004743e, 0x0)
r2 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="90cbe1e41ad1a35be1f5b9d3ccfa4e01cf268a7c3a76e0e892d1625c49d4e542d67d6d8683c833e9a52fb32981712f57900a4c72783ffb0e179b0fdb27beb919f66b5dc0f5d8c1dbeb223cf847727cff3be0aca8f7df304f7a4af592af1bc44b57016187eb3bd8a8162081d4e15a676fa0fd1997f191b5dc3066f915b2ad8cd21b6c4c4c5cd2f999cd4fafd44c325f2dabdcf54d695660e054069920d68d1e3c6273d581aa51835c77e023766969cae3a3f9a1bba70ea9bbe16cfce1b5cd6618143da2f5a1f7bcce677e0d1aeae2cf6161bdc8a915", 0xd5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000140)='cifs.idmap\x00', &(0x7f00000003c0)='\\-{\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
creat(0x0, 0x8)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02eb0003000000020009004000000000412d1fbc00000003000600f70000190200ee00e0000054d81458186fe8bb0041000000020200044a7b0300050000000000005dbc5bef41f53ee3476733f6230f8bc324e2b10bc661fd239be39cc44bb5b58ddee1c00e56ffb6cb751108ad4beb07430a2dae91e694427a2a8800000000000000000000000000175cf357c3534030242021c597bd4420cc636b1b42ea952e8dcbde39f38aa9053162777b0c956a5580329db10418d98b21007442b422155a0a6e3ba21e5426f5350acdfc05289dfa74"], 0x60}}, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0)

08:56:01 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  195.174775] binder: undelivered TRANSACTION_ERROR: 29189
[  195.184202] binder: 4849:4853 transaction failed 29189/-3, size 24-8 line 3254
[  195.215963] binder: 4859:4860 ioctl c0306201 0 returned -14
08:56:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ae9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b0000f4afd7030a7c", 0xe, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x108, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x81}}, ["", "", "", "", ""]}, 0x24}}, 0x44004)

08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

[  195.273572] binder: 4868:4870 transaction failed 29189/-22, size 0-8 line 3117
[  195.306766] binder: 4872:4877 unknown command 25346
08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 5:
clock_gettime(0x0, &(0x7f0000004540)={<r0=>0x0, <r1=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/235, 0xeb}], 0x4}, 0x3}, {{&(0x7f0000000380)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=""/194, 0xc2}, 0x5}, {{&(0x7f0000001800)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000001880)=""/130, 0x82}, {&(0x7f0000001940)=""/4, 0x4}, {&(0x7f0000001980)=""/125, 0x7d}, {&(0x7f0000001a00)=""/75, 0x4b}, {&(0x7f0000001a80)=""/104, 0x68}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/217, 0xd9}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x8}, 0x8000}, {{&(0x7f0000003c80)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d00)=""/160, 0xa0}, {&(0x7f0000003dc0)=""/29, 0x1d}, {&(0x7f0000003e00)=""/122, 0x7a}, {&(0x7f0000003e80)=""/64, 0x40}, {&(0x7f0000003ec0)=""/157, 0x9d}], 0x5, &(0x7f0000004000)=""/160, 0xa0}, 0x2}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f00000040c0)=""/93, 0x5d}, {&(0x7f0000004140)=""/18, 0x12}, {&(0x7f0000004180)=""/123, 0x7b}, {&(0x7f0000004200)=""/50, 0x32}, {&(0x7f0000004240)=""/102, 0x66}, {&(0x7f00000042c0)=""/98, 0x62}], 0x6, &(0x7f00000043c0)=""/52, 0x34}, 0x730}], 0x5, 0x100, &(0x7f0000004580)={r0, r1+30000000})
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000045c0)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000046c0)=0xe8)
creat(0x0, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  195.322040] binder: 4872:4877 ioctl c0306201 20000140 returned -22
[  195.339267] binder: undelivered TRANSACTION_ERROR: 29189
[  195.339857] selinux_nlmsg_perm: 2678 callbacks suppressed
[  195.339868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4878 comm=syz-executor.3
08:56:01 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  195.389827] binder_alloc: 4872: binder_alloc_buf, no vma
[  195.396562] binder: 4872:4877 transaction failed 29189/-3, size 24-8 line 3254
[  195.410135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4878 comm=syz-executor.3
08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$FICLONE(r1, 0x40049409, r0)

[  195.437963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4878 comm=syz-executor.3
[  195.459578] binder: 4889:4893 transaction failed 29189/-22, size 0-8 line 3117
08:56:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  195.490315] binder: undelivered TRANSACTION_ERROR: 29189
08:56:01 executing program 0:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8)
setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0xe6, 0xee6}, {0x0, 0x178000}], r0}, 0x18, 0x1)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="010014a041a004b7a8780e89f6b64fe81196aaae27ab3170e2a332"], 0x4, 0x1)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

08:56:01 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x510, 0x3b8, 0x1f8, 0x0, 0x1f8, 0x3b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1d0, 0x1f8, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x8, [0x9, 0x7fffffff, 0x5eeee18e, 0x61, 0x8, 0x81], 0x40, 0x80000001}}}, @common=@inet=@recent0={0xf8, 'recent\x00', 0x0, {0x8, 0x0, 0x2, 0x0, 'syz1\x00', 0xa200}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x98, 0x1c0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x4, 0x5, 'system_u:object_r:var_spool_t:s0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)

[  195.552087] binder: 4901:4907 unknown command 25346
[  195.555499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4878 comm=syz-executor.3
[  195.575759] binder: 4901:4907 ioctl c0306201 20000140 returned -22
[  195.606125] binder_alloc: 4901: binder_alloc_buf, no vma
[  195.612519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4903 comm=syz-executor.3
[  195.625721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4878 comm=syz-executor.3
[  195.633794] binder: 4901:4919 transaction failed 29189/-3, size 24-8 line 3254
[  195.638803] binder_alloc: 4901: binder_alloc_buf, no vma
08:56:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000040)=0xc)
tkill(r2, 0x17)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x40003c)

08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:01 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0xb, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0)

[  195.676186] binder: 4910:4918 transaction failed 29189/-3, size 0-8 line 3254
[  195.686854] binder: undelivered TRANSACTION_ERROR: 29189
08:56:01 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000000207041900320800"], 0x18}}], 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f000000b8c0)=[{{&(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000140)="b86eec7d9c828de98b91fa0ba96d5c926aa996a6e5da45b2d147d9960de38231c827e763a080f009d3159cd7e8ae49f57c781e4e8d22be028c9af73ba7334be937", 0x41}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000001c0)="bb37c8d57ead396ac137cd4e2a470f8e69553e719f0e67f77ec988c952656cd876e5f5c7aa5b1fb37b6f5c71cf473e93ddd8b949678d9c15ac6c0da5f73c4184daf617d748ec95ea01c0d737957e5b7cbb93d9d29ca9904a7c29ad4bac63447e1a717f1faac1496709a99a3ab3dd91cdc4e9505b001b3ad5050641f92fe5b699378dddba95d4bdad06e08c073845354cf7d7c178aeb70fcfa98ebc7e3117111f79e604c955e4e4b37aff66d004295b725446781bc3c3d5dc767c00ab4b589728bcfe0f759af8b423a143fb9f28", 0xcd}, {&(0x7f0000001340)="30b271c0f4928caf7fb37303672beebd46c16b74080705ae59eded0d642f81c375382bb737f2f2d77b998d63bb19c65c38380b388d4783eea137bd9bf07d2686be", 0x41}, {&(0x7f00000013c0)="bf107c1de349e17c7f9054271e797cda51bb26a912b830e28269e1b614b73031c39582ac5c295309f289fec7654d02af62b73a577ab158e604ab76ef", 0x3c}, {&(0x7f0000001400)="9c926c8b0132d9a174846674f634a0672f3be5c0288d3c97e62cbc94dec0970725d7f68c8d6b35ac70ad4bfe3af1442498a85e77e41856eaca10cb352606db90f4a2f691002c583a9e7f30bb7ec5868427365988a5703a6de94c993df1e014fd5759f11e684b4c53ea8f1e1b0cd0a6c4b5466424419d63f2aff602172c109ffcc84f1e7238178d9c52c12d3a58cf24746ba9b57e0d7da7ff0c22da6efef4ae80f92f41b98332de74a3550a6dbfa32d23d4b28c64e2025baa7413f3cc4598e1", 0xbf}, {&(0x7f00000014c0)="dab7e01ee9afb9a2efacccdd4eee503accae17cd9786b06345b65f287e927739c57a497f10451f034582f6424693e04f5ce00adab2b5b432722946a7bacc138bdd5dcbe51f8098789d79312705853d49ccd74c39ff28cbbb93f5de4b7212073da2dd3ef11505e94b98950ac4b55eb181f6aa07fcc8a77cb8ecdedc12ab8d8c264574245026fce106514f101c1db2d8e137e093c1048fd01ddaac77129e5821d1c6a304ce1d85194c901858626033a819a3582711e58707c721ec", 0xba}, {&(0x7f0000001580)="02c5d1813a2a47df5c2194ad9c4ebaed5a919c0ccc7819a495d498f77a3230919d", 0x21}], 0x8, &(0x7f0000001640)=[{0xf8, 0x104, 0x3ff, "f877d6dd14f4338299ae79ccb17dc2061b48e6978769da5f0307f5cdab1b8843a8562c886ffe59241988d8764530dc7f4f0fe3e3c77b2eca409beedb5102fd2093f29a7f3f74d4366d1da94e8408f72e6dfecbd242345ba3671570cdf8cf617fb3f25a5a0ecbff03a2ba70169f233841f642454ec6e9ba961b7ca75b0fbb1358c84d63c2644ceff621f787522c4faac2f4e6224703a3063150d19a05b6b34429155bf043609defd6a90c008d7c418cc0dcb945456c39126d6278133691d0e1177acd930791ef30406503b1d6e06ed9ef69860a9fa531c45cbe563453c65bde241bbaaa24"}, {0x60, 0x18a, 0x6, "e1fc872e0cf9d15342140553753fb8b5b8d37caa5ef562092271cb6025dafce24fd1c7fb7c3f80d6833e97e7bd4e69cad18f4bbbc8063d51b3fdf8e4d82b283f70a54afaa815e7c06c4905"}, {0xe0, 0x88, 0x4518, "4dbec94a50f7aba18d22db38c2a7b3ab1073b4bb44ac255141b058372436b74ddc29639a3e68421143ad3412eee9e9b25c5d60c26c018630467c11fddeb7521dcbdfed126fe392ea3f86293dadcbff3c40faccd42291f155d4367e270e7db9e605030c2ffd5bfef629e6cda12c820f5642859d07ae6892451903111cb97312962d34a62c701c532a810b36e4d0e046464f4f4a6ceb328e4e1b070149ad2d8d033a0e2131a26e89b1a7e1f0986db6797c13afbd3cdaefc0db24c23467c1cefd60245fefb2cb88dd10d78a"}, {0xa0, 0x1ff, 0x9, "697420238d2507de4b5f83c7b3706b90a31086e60fe5997248aa9433931882d10cb21773c1b97d9504407fe3cf919e17dd711f897132fbfc70f2c23235ef23776a36cf6c45406124dd25317e4ac76e38d937c112833abe43a9d57e238210993dcb1d326c1203718ad3a2919feb50951329438d2ba9f7ed0ca731f00f8f778584bfc59d12e4391de68e7f"}, {0x90, 0x13f, 0x40, "0ff15084f498a12f25c9c75824c13fef5ed48a68cafbd7508e8e3d8944613fc8e5a08d447082d3c6023ecda17b9916ad277570630aa550df7e5e9d40c5d576cc84e4a1ea418d884360857ca12bfec99acc7a21692f6d7a2f3076735af1c093e203aba4de1b8950f093169afa5071bda8f2c03a290fa5e47f4c7b3c3111"}, {0x88, 0x10f, 0x3, "d966418f055e127e365cdefa7f583abf104415fc919b58b6bf9b844a729388d014eb7b556dc7d0189d2f173ff53f66b30fec1cc4a0bcc5e280e71599fd8394ffc850d4edbc3b8eadaa4cc2813f88c6c54753d36fbb90844191a0df0b4eac8a1886017344abd5f182e7bb3004a760f88845c58f49919a"}, {0x108, 0x1ff, 0x7, "b96e3a44d38f539f8497e3828ae18126271b90c2c620a4519c65a9b2296d596d2b9cb345d2b22526b6821e4ed202433899769e2b0703fbacef8b192309c58462aa6fc33174c2adcb6e8c6d0f979aa20a1aa8da665be0e57d3286e9e08cc55eab1a8661dde60c84b7dbc2eb6a9636e265e4663ca44cf70ec83c72bcd37183868a5d63b42aeb9d760b064d592d52e2543ec39bec6df63802bcb3c0fc8d0ea4395c814e233f9dac5bd40cb338fd28d49ec570ab89a0d85fa1a8695f894034f4fa0fff408d96f053a53c0e097a0faee9473566cfc141c2ce938df1a0398701d16974fc106710233ff6e9c0cb148ab9fd6fb59d9823b7d6dfa86f"}, {0xe0, 0x116, 0x100000001, "0e4960db19d73af12124f9426bcd3891bc556dcc1ebcb603f685fb6b54c9b9ba7b135c33cd952a9052aa1779019f1bab43bd5736e4ec54950287f0e8d2b86f43ef2af724a325a20eca08d81b575f87004140661231c0072d9c356061fb2edbe8cac4306a4e482e5d396f1a03e7ef7cc629c2879ac9285e96b26cd50484e17e7ce9cbc16871d3e1c29b52d021c74f33d980aed03f614d93d59d8dd85ff66ac164873971596bec213a2bbd8418944d41e10642485139ef960329903e6e9815e1693193999acab70f4409"}, {0x80, 0x105, 0x40, "592884e3e1503defa647e4061e1fbd4eebc8b1b07d9cfe6305ccb3cf03946db1897290e0ff050e6a3786b63553ce16d4e7d5913f51ea4ac770ec994cb023e35e5faed70341f611b67dfa7be3dd7ed6ac55e482fe57caf4b7fcd90a4b5b5a1eaae058aeb192c6efc34e"}, {0xa8, 0x6, 0x200000000, "d081831d7df136926a979d82c38c4ac9cad0d5c59acbd3d0930596c9a389b77eb6878916bf9eafea698207b3f1e187a6c8882e83a3c298dbe7ad504c46ac69b5b00e9efb7fa984ecc76d57fdec04cc61d633cc3613644e425b9badedbba36c372fe27a9f4428c0671fee8cf2d501c7f01c2f331baf1fc813c7002cfcdb009a6072a453fe5185b529a261d63d74e3b68d133a"}], 0x700}, 0x4}, {{&(0x7f0000001d40)=@ethernet={0x6}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)="413452fd56217901abc53ebf21d65ae453f0f26cb0f041bd3caa8d09d4a4d3dae20f570db270be3e465ed27345e55ac7b179303d04c9206c6929e6b12b3d461d4dbcbca5ac12649ef51e0a00283368b30c411b6e9a51086aac6c386a8f36a561e616d8d9471c30ddc741421f8247f7384fe68b3a966e846ed773e5b0440c359d0d575721419db2c24dcc9a0eb3e90b5142d13bb10b1e37173244448b9e20c927492fe67fef12cb99a5e14933599e82c60d3e6f", 0xb3}], 0x1, &(0x7f0000001f00)=[{0x1010, 0x116, 0x6, "92533654a4b4558d5bb41b57d8cd982a1156870eedf1d26e37ba500e70e1f3041fafe2d9e150ae91288a928e6d6f64f785d27b3b5077911334b700103686aeda8ac16956945e553d74047b1f3f0e239ce675a5bb8c6eb08d6622e6f1fc443a6aa82634f635b5012a315440d31d47423ce9bc4c41eaa64c3a764e8a685f2476117c8353f395586e2248f14c0a37ee1be38e0254dadb62fbfd2d50a69ba6fe8b383567db45b0db4cda7afb8d6c3d79f96d2b171c69a7ef1c03066f06932c6949b7e4d19c96af1ef5ce3345dab4dbc1fa8a3019f035d6f7eef297454b2464036be5e55c8d2c96d0b5ff8fc5e3d60a7b616ebc484c975a41eea9a80e3e3cdb04da219f43fe74023f12aeec56875680d67451f42d1f0a2538baec57ff3ed2d58f552141d1f437f95673d921299bd7b539692288c2727ab5c9fdffdd6f36fb431d7d02f2057bff2818e5e81020bbcc710cba7b119d25b799f0fa032a2fa8e8566ef19e3b2b9d6622ac5d3c7f3c24ade219746d855745fd0afdb52d260c54da3490ec963b3b42016a8c082278eb3141f5735e04a05268e109717fdec9cba382cedd6ace25c2555231fddcfca9f28f65bd7d58708c255a47f5a01c0a1725889640e24dd4503b6e291c17ae5a4a65417ad911c411685d01d99a783e62375c2b8cdf190817d7ecd696e2e85c8de7b54f4c4d986c1ef12677fcc7e7d820acfcfd4d654020c255d22125de7672cc71e9505ebe22fc127186cf390b70c380855f3b379a8c0c125f4c84404cc2eb7d3924994c86bf9ba664120ca542178e8a0b666d2776d503916bb7a8f16ac89597a4bfb86a55e2a044103074507b398278e31cd7c870ee3b4dce48f1ca6cef7e55b8458781b5ef9902f4c33a8a57f41a95f7d04a958fd61d931d6731274db88fdeb7b99bc14a98877268b7769378fca03cda78fb67c7a44ee8c50aa9fd3f5faff4e345eae391f2795143cb7ee2c0e28b431f90e48ba9f7e70196c01c8ffcf6ca4e5e57f8a6de831e36919c7d58d0685225a9d5cda19e4f234094bc509731099b87538467637bfafd96192cc7b2f9dde689dd8e51f64ad8d1a186cd6b27d713c2531c39683bc65fad4cd9713cc815fa7a783b777d7dc808dae0e40e1d7f57003ef6c6601417f994163d2c50815a383ab482c28548fd4ff1a58003f23fa275f8171d50ee3c77a3d844c0dab84f033259723da6e3fb946f300440880fa5768f8de76ecf6a73589ee540307aed53160227dbd554f6185d110b11dad4e8fa33e1cace3cbe92a700cef9f8a5568fe2e6f04bb76c4deeb5dfdfc89b7977e4b69fab5de4b15d95446d74821f6085ebc143ed3963d9238b2d41528291b47ce131a08e1e1e0a7f443dc6a41e656d59dbbe278db124f15bb2322c37cb195a72d39de8e5d98bca10db16c315fc54c492fd9d5a08b1e76452f7073640e5c922596e7ef9afd6da8f7c6cf30e73a3485dc7e01460c8f41dd978a4d0a91d1334fd87489b58e0c355c4dd7df1568f8c19433ee5e7b8f795627653f2ecf33002abee2a02e6644294c79c3811d19596bb1097a77bef078a4e19c31a4e3ca2b7c49a9993fbdd2e79a426e327f741b9b66c4276c65849b0e7530e6cce0ba20de4abf79f7dfe2e9fd9eea414f9ee439e1cadb175ede08e3c4b6f55daa22cba1ed6d28a645dff804dae85e35b2c05590ac1800dacaaec3432d82dd6c8ce345db45cb0cfeea877b52e326b8f1b1fab0de330eb858577b66b8895a9b315dacad9cd9cc2b182d48a030bdf1c90dcabf6747cc5bf3d8111e86616e4861565420c43de6764e519ce3cfaddbab8a5cbaa3ddb9829b9370cedd7503fdb3a19fa2060f89d065ba4df1ee470105793427c30714baf2c3c4ac69a05a06cc133e8ff99ab1f8fa5b2cdae008f7c19c1931db6fabb5567ee2d99c51bf2b4e041281ea52a89071c6e675d966413a3c71b4ca135fd828a03026511740bcfc4f229f41d615aa47409c2914c2784e3d7a1b1254ad4cde2229ba1fbe923effe5867d98d70669942ec9290c22eb5682d830434628da6c9dfa35ef61b92641cac02b3a620c2893f2799c93ac5c095bc4f62c3bfbf9ca532418cfc999ce14adcfb8eb8560d40e41238081eee41c6596e71ea4d5264e672a882cba8c695670811b771f3579789ddca60d554456139b565c8881174c93773fb877ab86087c46b05907fe8161e91c956d87e2d1aba6db4ed1e78df5efa45993e5e279dbb6bc8febbdc0bfdc27b849e2e639e837b4697bc9938ed86454dfdf9daaf6e358cf9765fab9dea85cba8f86fae02f1954db850f23499ec63b71bb89b121e987abfb7c4257679746bbb382519d9ce2ba817376399bca628a4b67fb8fadf4cfa0496dbd58b0c6c9bcf37139b9dc6bad6539e4dea1325d6639bfca129a9776bd7824ea059d53057340d524d26a7f405825b2291b42560fadb7c57cd04ea8080e150357d3b87ee05004916cd2c6bb1d44e71a8913b5e490b9a67a6fa213ad255d725cba0b7b339fdad35bda83e899e63a0a17b50f9c40792041f793af3b5e3246b96d4520de3a19afa603f4b9106a8583bd66830766ce2bbbeb153a53ab17464bcaf199f40e56a59a70e8912102063182bc35f6dee9d88bee8eb1a53572f94a3e06342b8c7a9a5ff4ed10c5bb240051d8dd6997113449ba67aa53d7174a2ac899a1b4f85c53dca84d9c89ed016d8fb0abb9ed56496e309e78acbfefeb4568b257d58e461fdfd9e5d12ead89f7e51a6fedca0b6638ad51a89865c6254c996591c21c58137130505dab6a4c31a4654327f8746eaac37bee8d31e4f5af482232a7f0985c13306c0f524ed0470742e5e8ff58aa3e282a4bf6bc5a7b16f60a2f94dd470f06d91b52b5da17274f51761bb7cbfe867e7f95620e0bd01e2984a4e076842c196bc0db516710945ab403cc432dd7ceda65c95e8c933045dba20dbf0c3473555d5724a7a5268717314be948a4ce97d82abf1dff8ae5754a7fa736f84b8a22ec0f158c7750054f9b24083a430229069f825c47b6e2d712d11c39a44ceaec780d5ee5d5ddc18d41a8e91c3cf3acb7a2bb6b5d5bd39b35c436437c2e36a543723a8770a9e6251bf15e44c47839ce3b929a8f99e7c1e97358be45837d6985801143468992dc33573050f51055ac377984bb26f7dd129479ff13e6ec07cb55872cafa47fdafd1ae375c3eda887f0e5cf1562720bc24ccc3661dc9a383286f0eab89f9217fb80db12c0694dec50bfe69b424270e3e58a5db02c03d6e151fc1d9275441360841cf867815cb5430bef1430deb9ee328713315104d869d78442645b3becd2323971cd6cf344d74884c46a29896a6fe67aea8c45d02d91a0fdfce5da2c0a24e4ba99332ab058a64a2b1f8231c43d03b42528c7c9259192b7a77591347fb00cc78d25f0fc76c8e500e2c4a770703563e1ed3cabfd393cbe137fd80af2f36dbcf5416a2a30c0352ed49d204cd6d62e608e4f83beb0fa801ff9f9eb331879a8cebb16625c496845df0b3ea169e768eeacddaad725fdcedaa4dc279fc7001336601f4420ef4cb78b9dc3fd655b1632e69d0ab9392db95c1283dd93dd699826fae0c82ba216a217908a143027a150d872ab084098d283bb263f6328fa25786d5eaa845515eaab5b96401885c73f458ae9a2ce23f00b75996642549b2e11cc216705f172e31283afd51f612a7a3b53b3e61afa5c857879c76e5bdd52b4694760887148f1cda0566cf76ce32719b4b1c8a278a47a1c974efade722aef0b96166ddda8c49f768fe86d80459673faa369034a15c62609b93132527ae2cffef92ac5cd9c9899926323047a88a76c14a6a2db1e1ccaf4dc5f9f8b3fdc55cce8ba7fc2d533fcf5af88fe4c1e885a3d0c1439a7fbf51671f9397f2a847f7358298de1f4c7d482bb7c6467a6a7e6e1cfd44779cb7e83cbf2df56a3830b07cc0a92b8cd40ba5736e0ee551f17a0e6fc0762090c22b684d88a15157f605d13f77dc5b7c2941f0c4dd483e012d4a036951f6073ba33845687a6f99fd9cf327257d3eb5e6bf53f698dbb4ed38149871eca5570fd372e9372c83e4f1984604a1d51f81b64e3f355fe068b27a838e3055aac8d494fab99e17c56c35f7dcc6a33d8cedf34ac29f5ec030cc17284189bb0117e0a034c74c04c102fe7d0d794b0c757d9e8d855df55e57c5f37e376bc7619aaffb73a18828535a4177315d83350962b86a441eec2acf002d75428070fe83189f7755f1a7eacc6996915bd78be9fded63fcfde4083f9b4c3823c62f5b0380f956247ff99fe2758b9b1bf57699da454cb56b9dac74ae77873d5261d1026e8a1df94fc47798eebb148a6ca9f9f5faf279ae0e73a7a82a4f161ab3ad65e7db53f685298e7ad10a140eca7150a71aeed897c6e34e67086e09393aab8864647656cf66fbd3f018142823a22c6d8f82fa3dd64a297bf1914320f5b9e6a54f12124ea6e4d89a96c3d569e5e4e9f6dab535f22788396a2c1ad0a4465c17cbdfad952aa4c6e861e7a3713a8aa36fccce82d8ede04bcac2bcf6debd63d83030a548769c0287254143c09b570efd8e4b06d3e2ad1f70da41081891b067ea5d5137c353acd89429058f3a76525a47cf3fb6701ee6a5c69031b75885c459b38ef9595d63ed5754a3a634753de1f7ae99bf5a43812a2f25561311a5fcbc3e14354128a7e182d0c277b507d9259044368b175bcab66b507ac8db6b74c642fae3e46439deb6e2781d7fcfb74227eaa07e3a46455790234b2b08c16d991e875c3981379621856d46b4c328c504c05746f968a1f39c9526d3900f275fc524b99c91b011bf80fd09ac97c04a0cb4bcab6d7e5b37fc4517e38e1ec03316c005c52dc32d28f70800395b787e40a5cf52160cc1ccb0c87ca0bc5022059d47a6f667d265575d05e31b49da85a2d9952fdf15e9e7bd21c8ec4c18722209db8f82f5fb3776af08ce95043758e7446f3cc1b6a876d420552dfe669138c68873c72f993783265ff8803f2b20fe8667c4f8045c46c758309b72a56ad96bf5e2280429d395a6eb2dd02a21a51bda2a98f89c3af957fdb64692c55db1433a3a0795a232a926bdb9780b885a4ece0bc8cfb983564030d98c3fbbf022dba446741b63d8f6dd7322c4446aa248d8897a6faa0160500fa923782ff8d17167d223b2516f9c737b4795985a3aa46227b220225486bf4e813843083ba906b97376b7bb0b68f23604d3c6202cc01fd7990d69b7ad3b0421d514909e13d443e5e198ff3fc6e64914d98c50b74a30153fd370224cf5f6b65bcf1909fed3e6e0ff20f1940400946bd84fd5cfd08c0c34da3bf3fc4abca09f65ecdbe0216c8abe04872cbf915270890c65fd058d9fff03c2290b5821277016396a23daf2f32d7a582d0b6bc84924bbd7c1c01ff788d6e4e9416d61903725e8a080e192343734a40ccec48bb56ba1102deb60415b087e56180a8ad8633f97d01885046e8df82f7ca741f4959cf98712081b9ae367869919541033f8e91b4fd915d7d522bb839fad237307aed083bca75c0c4ebd58b957a0b3f337949a685949c203bf7e20b0b6045ace772ce8fdc0fa85917c1c286d7488bd9beb94378ac2aa1921a55101677118b0fbe43971791ad523a9314e12d6aaf6c953274cc2678cea096b1f85b8583dcdaa66a600317355bbda156babba109267dd08cd89554e0d492884bd532a0889514cbec911bd7dd361a42b199e0d4a6393bf3de3a53ed2f83fdc2272bed13e687ca37f792e5dbe6e170da03c893250f81195a208900ea2de539aedaaa7dc1951c331"}, {0x68, 0xdd485f6b08f3d8eb, 0x8, "413d05c9a94426acd024a862c6d6613561b1367cbdaa425061d707c7694f082bcd85796ea7c73f7afd61f28b6e4fe2f31403f93e832e7c29da111f79acab7ec14f8caec0533e4e3147c820f7a0b4090504eb7fb551f72e71"}, {0x108, 0x102, 0x9, "2c39115329d940fca280163bb66a085be45e976361e160af9a63b9888d4369966b0abaf1397554e473da6ae5cccca97d0aa81b5d9b76da9e320300665001b7e0f2fca0f45c87c855b833a43d125874e664164bda54c08894bd41444dfb4bde80eb2860eb592881bef982f436b8bbb8b2e18d4974573d226c241c0c18697329080254a84f14a1c5245374cae626aa3b5c1930f73287360c91a20db7a370bc7b34e84e2cfe24feff4c0b0b2c94b87cdac4ccfb0a50d503b8fe40aeb4c8c3dbefd561b4f9a5c9026377d1ee40318d2afb1efbffd29cb23207c4211cc94c2e6eda7cebe7e280f08f0d60fff9c0fa8e3db3f88330bb8f17ca"}, {0x98, 0x113, 0x1ff, "4298bfdbcf92b133002212f7564f7226a8e05247bf763983b48932d699d28ff5fdb2a89759ca7cff7479915db0ffed35192d2df8e845d7a01b3777338a2563d5ab5b0f952f1042f87cc60426cf216897f7576e6c8970c616b3b936b92e81e15becd3e6c6e8f71357685b65f34d4c46f104d85cd0939afad9cea59d6806cd8f5cd857"}, {0x100, 0x29, 0x3ff, "2b8246cffe0ef615d3387a0f4fdf52d1644bee800d00ff108c5b9eec353c60c4e783bd3a9aebc836bc7c1f6caf57ad578924285fba48337b418bf7808bd73b81ad2d3ede58781ef75f22e6e9fbe16e175c4b170c9574a44340a9a275b7b6f7d64bf4cdae19e43480fa7928a7d75bb3e67ff0fe4ddaffb6c49a27454b9f244337571644feff42022c3169b9fa6a721b2223d4ec9550a791c2bcd72b0f23d814caaed5883381e024c033dc9b7920240f1f008b9cf66c6c7c2a2f0ef798bbeb81388e11e28bfd523d07cc404c856faec5a0c64ea1a84a8148ac8613472dee6fa0c28a653ff24f35c82798917610f0e9a9"}, {0x1010, 0x114, 0x8, "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"}, {0x30, 0x11f, 0xfffffffffffffa61, "352d97029c4a8663c51b0ca95f5d7f0bd3ec6ff7d509907c04ed603d"}], 0x2358}, 0x5}, {{0xffffffffffffffff, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004280)="b9f44a42bde4c69c08c0e4c4d1fd9994277b459b", 0x14}, {&(0x7f00000042c0)="88241e2c43b0637582b7d448d07762ae3f6686c8e70917e89a2c13cfd859666a52f81556536059e56b508777507acedbd8fc86d18e9a46de35d1ab48200c2d252981e45f993c2aef90559ebffeccf37e295a528ceeebfdca4c3c463050cd9f9960aff3ad683f113364e57fe5bc90776d61b088120c9f36b3d67205eeb152f79feb5f3464073d559fd096db8d0f1ec8c228b625ed4c9483604343d59bcc7390fa7f5114fa28d172e67c0cf2c15665b1762dd64265aafd3866161f289703bd4e1feb074ff539363451f7810e3cc05abd", 0x2ef}], 0x2, &(0x7f0000006840)=ANY=[@ANYBLOB="5000000000000000ff010000ba060000728716edb8bdb91190407df762df313605305a856b14d7c7f714ae1fe9c7e5eb4232cdb05502d2fd68e7d413e9e4cbfb1176cf877274902b7aa13201223d9726b9612071ebbc0a67cd6bff7930a61ea8b16f956b4a4ea91034c4ece3ff19d0f0ad275b585b546d10c00afe98b5d29f3e5a3abc5884b909c3d88c50c6f5bccf2910b4fe1e59658dfb5cf134fa07cec73fa98c1f8bb8ea5c9d8a7678363c2dbdce416ea499e823aa246238a541cce99168280a53c3369b82fe767723d6aa8c18f03437ab9b867ba11aea2310"], 0x50}, 0x80000000}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f0000004480)="4df3039c036b8392540431a0aea7a5f02211343ebcb88bf80bdb55965d20a26e2adb9b3f2c507dfccdf639260e6ed23528f66c70a4cc6f8fa4f5cfdc78b90f545253ba69912eeb775ab96bf590580081ad26017aaa6b804a7d489ace1af04388f44c6593fa6d13bb68e3668b38d894d9d351bf806221fe", 0x77}, {&(0x7f0000004500)="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", 0x1000}, {&(0x7f0000005500)="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", 0x1000}, {&(0x7f0000006500)="9c8656253d6b1f59758a9cd0d0fe5c9f734baa02130f7d5b78bd1fadd7b9fa37606f3df5b932e67323c75a6f663bf4ae95f60dd1b11c51b8b012fddb43d28b4c1fb872af7109e4334277be1748522f951e4db45f933312a77c485b4094bc75bda0ea715e3cd1ceed9dd8bfe23b2389aee8e650d4f2c4e11f406008eea9f918affc0dcd8c1870923e56a14282ad76d1cd3cbd2685d8943251d54d508d678802a11bf512ab2adede3a8bcfd3811ac5331a14b107ffd579dbebf3ca218879890a2a82e79e86ef730c659ddd123ee39770a2135cd74dd108", 0xd6}, {&(0x7f0000006600)="66398a68f70aa6719281cce3fabaa962f1813f2b3154acb7e92936671da9cc8305433758bb97778b6e17dfafef368d6b6137945d52f594f747a5b4e43b5b4eac88a6d7ce8b737a168d1294b5c8b3c52091478b0bc494d1bf81be", 0x5a}, {&(0x7f0000006680)="1bd97ce45141f6e57fed1c85fe961c898ff0", 0x12}, {&(0x7f00000066c0)="1d993d8ee12977", 0x7}, {&(0x7f0000006700)="f3f5e212c0ff7b3ea83cfdcd5771612391ca1950f418d522a94931f18e71d1b3c8f4091bc2c94b86c3802abf2bce99a1f4500ee3874c201fb0c1a729703b590b1d8614fbb2dbdab9f6ee192c97a42c3bab49e856f5586d6fed08c5169ed5dfe4c7b37f0aa7546b0f05d93f4186fbe561d41bd139203831a702685ab5da1cbaa1258ba7a308a2816d56b2d9387fbffc92a22a428ba4405329c8bc49946db412ebdb2b139d7b03", 0xa6}], 0x8, &(0x7f000000bbc0)=[{0xf0, 0x19e, 0x4, "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"}, {0x70, 0x114, 0x9, "049890c4f4008fdb31a8dc2b69d83fa718dff0c916b7e271fd1dee379953310f2d6b88930347999c1a570ae1f5c6761d8f0b26a6a8702e6a2e1a1d00bea00950cfc323dca0ded58c237a54a6648aa04c0a55aa76e823bf6e3b5b65e3a709"}, {0xf8, 0x6, 0x7fff, "00654ee44e7a645a177a10a7d36ff2bc38b1ea250b720d3481343914f8f313865f5bed155f3d5b0c0e4c24660cd41efaadb323eea02a60bd703d2073b8fd22b7281406688e9c1f63190945e3ea0e28fefcce808d25591b0ec69f58d362898b3509cc69e55964d7421ac82a67a3ba4987599672169c382258b0daa5bcd1132015115410c473ecf52bfce2f952d7e37e622e91ec68dad4a3dc7252b1475e9424c14447e65850863b8b4044daad4af6e849a195e5f17f761486fda6a348205e37dd0d22c876dad92df48f3fa3653c67d1cdc25a723caaa192d83030b14d4c78d1ec9c70cfd9"}, {0x40, 0x110, 0x6, "8216e04c4211f0f8f8555ff530d689869ec2983fdaa464ae37731e2f1b5357303a1ccebbcba8dc63579616"}, {0xb0, 0x1ff, 0x3, "8d6429d0c0b8a96791046f221c75fbe09caf0ac84e0df1520904518aa70517d5e1c6429c5a62577d65a4cc6f94d711b40903aa3d3371549f13e987f38de1abf5a5f614eb8cecc340101a5cafa315192dd1be5cb3bbb46e3e135c381676771cb8ccbc4d5c4a16bd8c4744509c8bc627e440e975e2ef8ffa73b8470f54d98ecec876f4503e63a27ad3185e48ee2cd3f4bf307d72eb8e979fdefb2cd47386"}], 0x348}, 0x10000}, {{&(0x7f0000006bc0)=@ax25={{0x3, @default, 0x3}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000008ec0)=[{&(0x7f000000ba80)="c7036394929632036d7ec051e6b13bf2d30e3648b10cbde772949a937de2b7bf3f2c44f6596ee1ee69ca105cd39ee34168b2e75dd909912926a860db45be83823c64bcbe042a9a14dd161e8c16966544b0ed9acfc332", 0x8}, {&(0x7f0000006c80)="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", 0x1000}, {&(0x7f0000007c80)="9e3a9645bb68dae822d9e4f56c600df2b40ecce7b78c807e2ad8ea8bf4e084cf96678b0837e1d2513e433bde987e9231a6b968bd501e0e0bbe24ae622f46bde39ec67b7cf2c8c93b695ae6520f2a47e6bf7e7796369d31d31077b29f81c50317a79123b6da2d701e72e16464dc94cbabafcca74664177bd08e8d1b6127f71d447fe4f29f64ccc18db5d3", 0x8a}, {&(0x7f0000007d40)="831a6ecd2e40c124b39c1833d8861dc372e5f0b05bcf9d126a1109bfe5ee16e3540283d7a24d7092d4a16ae9b5cd7ccd40a8a6c3895a807430c14b654e64bcca7a53e5b9dc64c59e60b0b10b231ea5436407270e1d58c2bccb5df47a2986d6c04b8079e82cf5f021d4833ec7f5fe4b78d81a07fdd22fe7a66a1adbc892c6573dfb2e5af6e830d318260196ad26014b54062f47865e6d8cd60b1b110127c10f180e0a5b6f9d6ec7290cd4283cb98b4abf30b48ffe94ced0295db02956d6f229766fb71ce213beef59b518f088fd2e8ca8b4df20a5847aa2170b75b947", 0xdc}, {&(0x7f0000007e40)="dd54915a7192ec54583fb62b9dd953855c665253d3290e69ab53b8978b4570db4a117604f860bd238c9d5c09c19f323d3da46059a783f34e1fe7a21558ede19890b2d5d923155454ba4c894d25d98fd512a0", 0x52}, {&(0x7f0000007ec0)="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", 0x1000}], 0x6, &(0x7f0000008f40)=[{0x18, 0x11b, 0x5, "a58fe7"}, {0x88, 0x197, 0x1, "1a14c2df8250c5bbcef09302757e20fd718e626585530c43d854000e64d6259ac3e8c4a1162799e6732b1c73ee9ca45f4077cec420136e0d8634dcdfc8f1d516df98c955b08e716538f28aff6df8712c125ceb479200e316e65d70a6a4a25ea5362e7ce22cf0e893cd07ccfcef28894fffe624"}], 0xa0}, 0xfff}, {{&(0x7f0000009000)=@in6={0xa, 0x4e24, 0x9e8, @empty, 0x3}, 0x80, &(0x7f000000a080)=[{&(0x7f0000009080)="df270e9e566565e89a1ec5bce1f47966f6636794df43e96951f30021a0a4de54eb024202193e0dab1f517ae4872ece68a54b5c881a4a7279a060ced9be61e6ae7db05113c97e664b9f7a43196c989d74c3cbc2b231cfa888923dee6c27edbe7ad5694821919d50cd413f908ed7adc15341276fd2bfb058d6f3f31d0f636b434e23db35b45da1a19cba2442db8f879fd0d25079998d46fedfc6acd5c3b4fde03988d5cdd1bc925c8f6c78265532635473d91a320f476221efd822a95612009431ac40c7c674fd01f8f23d900b402beb0ca9f42aaddc4b86f655cf1c2bd876c75c5c29e88fe5a1372c50d66809d8d9519bc46585f1a2c8b7aebb99fe3b0e51b2851464e90c1f673cf1fb2e4593f69901eb0390e51cfb04979f39097cb0ef5742e401fd8badde355b58a9d34632899b6882a4d8a7ee72c701919ad6d01f13c50b32b98db014c303d6abdea824667d743252f7002e3d0a4e069ce2a179405b72bf6b6c8aad4bba713cca07110b2977b8add2ba91d72243602078c255be8630e1c6943e6fd36303af7e9d9484e15de5b27ac5f3181cb9cce27c770835a3415a54d0903fdfda646a2b910d12c7effbfb558ba152f0ab7ad4612143716bc17e17648254e333cfba22c9d63c039b012ba6d8bc632240423d4594fa738654a3155e4c6fc461aa028f8401e54ade1a703353725d3b88789dd62c8a0177a31f9b891c47e7d7cfa0444ee278df974784eeaec97fb6ea779f64570590934f4ee776d793daafe848743689be59aacdceb5eba9a0d7eb0feccdfa7ad668855b3ecd357e0c0a27c1c21c5bfda1839eeeb38a4e388a996411a050621425a5291ea4a7be61804959127a069e85a36f37a1baa75e5a34d5d8b5cfd41e8c8fa3da8ebd0732abcd550c98d5fd94f160500c3fc93d3946b4fe4a6bdf9bf8eead76281efe635e9fbecb60f875452ce537322d1bf24b4e0fdaf7c9945b01920b3412b3234a003317e9bacf610b9b113c17242f638301fa992cd8b8c47c53068f6b7a9fca2f21aa6597e926e03e58f49fdfe730b497c830339dfe1c4115db4490d682e1abf7b3de253033ace61055495a6988196defc975ceec70bac1f201af8cb00367b8b9f0db01af5eb1632a3f65d8540689858cdef2b6037fe758dc732113d44550ff9deae1c41f68344739d45ddf1c0d94d532a7d60e575da6ec26480dfec659325a88b1c55c893c1e7976895d817b6197254de93ab5fb82345ca25f229a893a0e70aa37584db276badab35a82fdc2ebfb8361043abc4636d8b1707ceb07b861e2a6169a5c4d0cc03003f990afbbf1842107c622c9db14f01d58f8a38236333ece0fbc6b8baa829963351e084d4c7d71ddbb355629aacf968c8af3e2bd559d379cf1b942882b7bf26df6334fb6093ee918344e107e901711af19f85a11c1825b5e38ea3b0a8b876e8e5c20ef3faebb6790f373e6afd97abcd4ffd6bbcf1dbb8bcc8ad9b1488c336fc59df4c2bcd155863f6b53ba1b81d96bc1d3a36d7dab6c4f7a10da30f4510372434802df03a614ba902e1a0d1d34377da4bcbfd7ab8a691d8537f4cd30f2553f35768c6b96ef76a6f079de77608edc40279618dae062120fb1e50cc4c1ce8faa6a7dd0d9e8e1f43308dd2595e0f9249d86a6a7add5586547463a50968247c66ef79bcdcc7a8d8a5750963164d2e6e770d1d0535ba5d4611ba2c5ae85844a256d02985f962825a66adf89b71bc5c0805b4e320a3d94dcf058ff9bc36701f700db2f618788d31da6a977662ff3893d29c55d4d922b3e647f67071697acb03d5c7809245f254049f3af765084394be4825002e95db3fb73c06f8bdbf4a6fe98934a1edf9ae8f8e742ebef508cd44a7465eb3341f1fa51274cf5506f8cfe20b26b004c002c980d5c929c0412d90b63925020b35923466fd929f66687e1f9334e68e363b51108311412838b7401699c1d63100127783cf847f3de5fa969ba7810ed8da452d67eb235699b953ec4ff7bc54d760347f0f2ecbd264433a5c7075a006158e4c07b048df166f91d78e227a4daa46d5a1de3daca41e6bcb1d847f6c15c2306ea4759b1dd2136f840f0afe93a7fcc5acaa5f78230b260b5db89c10f6878373b35018d8c3b57c8ecdb609ffd23482dd88c9fde728f8c7f88508d008b4095fd5ac857de41e72fe8a16ecd386187c42d7ad101c8e15b7388c2bf33bb10e3cd7de58621f2ab0079e59e2ac0311d51cd2f20d512c2583e961fdfdda89214ffc567d2e26791a7048f1064299f7f0b8e38c41a1a445b3e598fb8f0d4ee4de396ea00de7cd44963f52b41b9e9d96e91d2ad0b3de23a71e126eda0df0e642649f6cf8d28aef5e9340e4dce3249b264853b527cae6148bf532a1e84e3ac6f6eb9517e3791bf0626f4980177b6724eb3e53b917d0615a498278ef70eeb3112461219fa1adae3e7887aca41e8d6368f4fa8859d9d4b9c03213a13f030e7de4db471b7ca2937d79a7fe06324e56992001fa2098d15bde2dcaf62e5a19f0e262cf62244eab624735a6c59ff1ae3d01e81f2d3722706cf2a1cb38316484b8b671c53bdabad3230123098f10702de674c774e81d06428cc18905e8788f0d1e439ee28321451a95e825c9a9676e44096450c9b1b51298ac51f7492cf0c84f7177ac04b3048ebb0ce3f79699b874d3f2f41592898c8183b02c8da8844d7b69acd94dd7f6c2a66f82a1d7d2369c868d98f309a3970be5bbac16a9ff03b5b5a431fa1d6b18438a753c8ae8de0ccb0bcba88f6857bd24ba19febeae34d95cdc2f7dd3d5447e634a374e1bb27adca3ca17a9960327be2307d0b1b015b2480c1bd1f477fa04ac8b8722b419d7381d36f7c8bc525a24d2f3604402c7fc88d6b9d8a69180f5a077aa26be6fa7d5de13c534b9bbc8708539bfde95710425735369ae5d694a96678b330962df01684cd90a54c418c7c17058d3c7807fcd609b3c8a367b7b9f00e87b7f9079f5dcea51d9ade50dcac44d8eb4c7a422a36fe60ce2922f66d90244698dcb14f83531cfeb67afff52665e5b322d3f4766582d0075bc50e0f10ff62fd690b6645fec123ba8588bdbc54c58dc5fbd0395986cd3cdfd56100e847b637c3af3936252e9c28fb47f5cb6bbf6cbe21e140bcfdc26d0c09cb395b69ad8f77436811bd4b7f1cbf334642c10f7be1b7abe61a943fe0571b2c08d3b8dc8188fe867b72b2bea5b911eb8f32ce90f068f9e425861b35208c8a5dc7abf1f4603835945b9eae6d960032a6bc266d1541dc66c23f430b2071fc9e168570336136cccecd1b6d9617c33bf8cad1ff7783bc0d24f80ffd50cee1caf438bfe080d5341fd93088bd5765b0df9755e917ed88d149ba10b090450fc5813a7d07023b7d5e03d93afb303631669e906abace4305c68c12161a0b03b71eae6fcf81ccc34a808d823870cd8027a777b368f862c7ec775c76b17f3a6f8e12165182410d788ea08db3b6f81022e3b8082ad6754b46407e8dc3d3df0162c0ea4e11bbca5479c283392d09512a2b6dcb02e776a553869b98efe89fdc302af84d47f648781ef85bdc0fbf361810808d6afdd43e96d13c916bb12337f639ce6c7f0f590127eb8d11af923eaa685e2d6efdcf1a6a2a7868ac7d56bdb066a73f4e5981e3803c8ae864f37f30aea974e780012c234be0c112aefb96ff4ab04ceaa132c5961c4b93bd96ca3cad6ec1c86f7b107f3e750c2f5d0c9b5ac12760bfc298922fa724c187a256a1e0a3c28a53fb2b0a43df1cba5a4dd73ae50c2dd6f8198e42a8f5c5a155b41a9a6ff38bca4ba131a735333d5f271904d6fda588c6ac4688237d8166319cc97ea6686bfe6879420fece1bb6f1c1f5d553be4659f0272524d19b769f8009841b4d1a3d45caf9050e614064cc736ca499f2868ed4fdd46a191f09b09423cb363969afaec52ab427628b971027bd036da4c216ad5bb07526a075ba6ddaaa096ba8448a374d2702c5ffc09a80ba0f7f2564c7e6eb320ea255bf0dc0ad9e6a386e1163bf59926c223f2bf6a19b52ac2fd996446aa2b17c83eb4c8d71d592c1f989d9436fa1d7abc620a905b44b0264e1a24adffc420d3f4ddfd90089add0521fd23bd44d1ee1dc50f2c5899c5d5634b2e9ce33208a3e30596736d27a859648deebc84a308b3289a6c0fddc93a73c7c519d87027be6802881a1983fc9b6ef31ee0fc4e23b02e2d451d12f667bad36b7d1e249bc860781b8fad880890275fc371589dbc58151f60cf39a4b9ebaa2223c7449e0841e4baee67b3476f9484d5cd94f915ca2daaa15d1d5d6e4809a30402a403a0daf311ab6b8d1bd1893f0bf3438949c57bd9d521cdcb2a352210857d53f6e7d739110c7653d3d3ed494a1a64d6f470b4d986ab77054a169327f2c3817e392a21790524947656ec1b400760612d49ba58767305e1432749cb1ec5ac5cf0fe5b2a09455a3213b48ace8aa0b446d711dc2cd33f3e6f8931224bfa5f2204077d8aaaa013018155c4055d86d97d4511ee33938f6263b64c57ed16759a4bf43a26a09cb81ba2536374840e42a26057bf5b82b0a2acd52c2acbf79629033a117a227bed98a8e5d88fec07b6a5250edf94f21f75c67b6c22036e8bd9934b6f44191dbf2fd7a26542f659e9c8e662e170c3787b5f3877346f843909e4efa5c8c135f4aefdebc7d232670a63e691c68a09359e6e8246425e0f14e5d02abe6afa7a1063e79f01603f7423401e774fda7a7d7eeb389ba8dce66826e324b9015096e29aa03e10dc4273fa554ceba783c3fc05bd329cc1bb73f27640b8cd15d5b209dc316324067ae149c0e895915026c4a356fc87b8df72acba2ca2401487d832ab553dca6729aa41f35e5aaf8d1228053908a88d5fa0e595ad274479b7c5c79f8ea7070e8797d93a8e7a7e8a0bb5ee92f37713d2c334d3b2381d10c67f1469865386a6da7f30af67cda82107c8889ec3e03f33784538316997039e9e19604f6afb722bc28f03a8ce1e4f2899e1f8003ba5d4d207da43d3e0558ddc6268c69221d5a935dd51eb87f6df37f79f538ce18b13bbe016f1fc219cf50078851c594d4c99f68754c3094ba7bb799fc16ed8bbe6c9bdec6800a3f81680a0435de4d763f9fc9d44c28940dc8c97d5d0d92b934e8625647693b5083d87e3d117b2ba34b026c7ffaac1d377b4cc1f5e045c8a5754e0a54c657b299fe04f02168c13cab461ab41f64ce45ef1f17e220e00762e5dd1f297824aad7f41af55b9f8a97042b405eb86b742d2aed8a6092a237e3095f8cc2700bcf1c267fe0bdf1bd1a2c8562a7a9aeee4756efccd7a2de44cd29a9509b41dcd2b9782065370edd656d94352c3e7c1c8e7bdbe22e54c33ebedc8a3fb9f39ccb00c605e551f660c856ba715af57924b30dffa72a4925f7533b9016170ab69f2789505b88df3985c230902ef357c901b9d8ddd5b038aa4077584ed7f3bc27f5c2c2de9a7ca8985b7c9bee82a9a01232b2ae3dbab97d8465d5876f92d25cb394569c016bf22c2b711fb1c0fd9be1a3917475b582491a1cf10ba4bdb7a994cfa3b30fc9e184419b913dc3343d48648c14f5bb6af4c1a2a001fc32557aa8a198edb29c0e1847f06ced7e749f2243030ad67d4312288be5b8423500e459518c67701f143eade93694c99806adb4c456aaad503312015c9e1df55a0036634197cee1ef0eb6b2d4e6f793559878ce6226d3c60720af5ffabb094634b310667567bc821c970751c5f087bf95b2f667f68c33fc874b81be8f62e59f48704f6b3ca9de986c343b2bea777449793437f8076da32bc791e6f", 0x1000}], 0xffffe97, &(0x7f000000a0c0)=[{0x70, 0x103, 0x8000, "d005229435f43c0a132307e08b2d7acf57ef78ab7258a307f157ca239b3dc9fffdebb5ef6ab99bea35d962f3b7ec0fef9f9d67aba9b99748f2bb62669fa54cd228724a21b23ec51032d0f8d4e7989331b85061228fc0758d7bf5b1"}, {0x50, 0x0, 0x7f, "80bf07833c81ee138b796d826bc45c9265acb8221db87eb6d3cb4bc4d890fbe368f568c1ffc9c8ed3e019b05bd5647366cf785c666a3994b502269ad49b5a930"}, {0x1010, 0x1, 0x100000000, "cfca1f3fee9c435afdbb44f360d3e2bdb874415b064e5cf5a2481c5b664fd80b4223f50512a51cda60fb7835eb3f85657a82e6020e74c629cc4cdd4537d86b38b2ae8b21a428e466de158a2bf7ffe711a075d7592a32bcde88648f5f950858188f2708e069e029d2b61fa71958dd8730b64598117fdd0fae060721b5e76da8f9708f484ee0ec55ec974a0d5caa64a4f4582a5b4306dca14be2f1dff6ba42d9b08376d5c5bab34afeb20cba5443c4c01a601beba7468a3375a68fb2d06d5a6fe8f2b689366f99f6b934a807bb337d4b8f2da52d7c6e8e81bb91e038f195fe2f2470567a600c9db3d0e25a4bc4031d3b9fb449d7105b129f3b594daf65e8a606d2b5c774b5c9f407c3d6a14b775650f0f6c14fd0ed16d5e5357e2debf15b3504054576d0c67f575da18aba0f945d5792c3ead58d419f9210f826a566220bef71a57b4463c657ae782d5de5c8cc6328c4d666001e0457feaf714d0082c68c6a09dd104c266cbc7663c246dedf58805f78cd35ee3084d9c40f90521fe2e6e2cd96a218ac74f10606e10561d0a40a3caab15ab817068ce67430d56d0d243f19238313784167b6a90b21b21759c61f671613dfd317abc902c4c66d059297e7ce131cb0930b8d434b4d7b8b3fc92af0996c575a9ee12142d25acfcf1b2860f4ca231ce9f7d94ee614b7803d1df880de3e6826a16f9109b9261ccf83c9b741e45735d68c01d6d89885e88e94ed068fdef1f5ed2483a6d9b53588fc8aff58905f02cfbe736285ac6352c28e075337aca1c52680c9ded672b32e74bf1ea15483fcd25ef39780411dc3ad9617d75eca3fb1732d581eef30ed94a7c3da8f5f4660f0fc776594a186400ca19a58ac2c91f4e2996e27c15152a82dbb186b060b623a45a7596bbbf12bf44229f59e6f8bcb54cd2567331124ffaf8265cc30ad513f15dce3a7e264094339abb4cadb0feaf7391b3f01342489509a91e966eaaa17a6b85c27c02ea207dcf814a92b977d8cacacf0c55643d2f52b1d0c205afc8292607e115d4266c7e9e630012e2846671928850b586f177513521d55c3b602632ffcee3b201819aa174457c36d701b828f840b85a9184f36a7ec7d1f22b85d3424a0d6fc3860dddfdb0cdc494e2c4131330614c4dc4e5fec188f021bf1d47e1fe88b2942a0f44bf11f58367e51e145a279ec18871a0efea7e1575178d64dd271240d30285879000ee563e5b689ae86b131aabdb641ed6e26e4727356e286d0d7da17834f179d746d382218278418baf6c11af6979d3a1c56907e6c93d43aedc515f2ed5fbc960cae5588c50630def98e931a0b7804a77e4965274890a9643b280f6dbec58648de4570afbc56074d293089f6fe39bba08d64913760d1d9b9bbea9c6e938ebd5bf85c7f691c231302605d52376bbbbc0f9d1edef07217765ffdb4753e689e2fdc828fb67a09c760e56919bcf51c565134f7ecc1c30e598834dd2014276bda99c5c8e3413430c96c9e439dfd4f9070698fbb7bc1fc4eafa31efc5d5994fadee7f93756c6677617d272119c17696967aac696bb8328115d9b20650f59bbd070bcf09aff7eb9f0d66164e2bf77b4eb221d459e83b4bf181b3f8539860ac10ac0850060d0ac91d5c619708e240e86b9487698675243aad5479c43365b4a4416c9f690d29c97ae421a2aec114b9054a4618d15b5fcde431d6dca0a6d58d4f30a07f06a3b1fcfa534e92b011168b904505734ad0a2f9819dc776f72533492c33ba692265b7e8f857989c7782947b5f13cb8f6f06c1d5c2eec82f043afb19c68134e629e73a662189b27e2516ee8abae59a7a064000cdf500cf22d4a8f80c07551441680d7ffc8b9d8b78520b16acdc1173130dd98be0e5e4151236820d5fd7c61edb2cf57a462f2fe7dd7ea851585df9f534dfe6e4ba8e3bc3acdd4d6419906a48a7fc370adffdaeb7fcdb6a3f493654179880c2641ecfcd8128ebe99065f4eb12382fb2579909109674781b66c8d1e85e60fe4ec7860aeacc79b989077b038c85a3cc28a86aa7a292628e2e5b04763cb30d7f438b3f4e8271868fc5e3659c07dfcdb8d239b5fc3f9a61c51bc9e0392a94bf45e90209143fb166ffbd9eb7f3c5367f5a81a4352b140618f2969144f895ad9e0ae7cecfdfc184ec4b53d3e3aa350f94f039ec2a622351c60e9d142cca8e118f6e0e8d8ceaaa8448b1d797e556974e0f07ea971bc9ca61340567b1876bfae0de4a4e46836288bb170410a4ed9604fd58c293917282b82555383c6730d69371dfc50ee3594d40974dcd59efa54ee7ece2fd08d24c6b2aa1d1f36ee9236b55df6bf77b032710e3474b3abd7b71bfe3fda3f51ef68761cc545b0d25b9655f0be1ab33d77e776de40ac8643de100188fd6ce0463bb2e0d6c57e3aad34a8e01a9f7321d27d0dafbcd7c5478df13f6b18d4882172f3b66ce4be887d4abcd5eb44e29a417911d85b78de392c55d7c65f0d532f4b552f3cb167091587fd20e7723984c9005cfa5eee27f8dda4c684b4596652516ab24b149b3f17433bd501cd93de04de0e04ff7d05c48fff26ce42a636d6afd2823200b87d0293d4469c863382a5c1a88efbae428a99141586938b0edcb2654034402374edafb252299a89c040151846c5f946964614ae7298033563dc20b79abc70f7504e2ffcebc64abd4aa9ae951e3230dd6d75d2a5d868afb7af0888fa7476967678ec49c5ba946515a478333070b7d710fec6b86de9aed1a85913b6de71e90ae2d9d9745b18970b5964efa0db4b6b4f92e4969d11935310eecdae85a51f3792807de79b3ba57cea8284a4ac925c9447b4e0b245f74d4716511c239c68659666f3a16a64df26bae3c264e5e5f4621438ce8feb5d2fa5ad1775d01f3a93c18c8ae3a5d8174e21bf8a76cc1724972a45a36540fcc2577f40990c5a8e10dae06c32a05f40ff6aab50e36c4639df22a431135291fb791902cf1f88056fd50db650a83e00f3cbfaa43fefa8db97378b45efb12d207006fe770767d8c364900f684964bbedb87b300f5c6a45020bbe39ae7ba448c5faf77487093fc813b41d8e869cdca1990a1be6e52ee3c82d6eb795df185bffaca178fb36fc9fb3ef04c808bc99f1ee3829490dc06c7545b5c24bd3dbc1d74077aee3e837ed3506ad526d6f0b1bf974589640ba31c942a324830c7c6496e7c4f28b1c0fef5053a29e83e487d2ae84af2bfc788ba820a3ada60ce2b61ca30d4d6980ab11656999f3c3ece252d5a94febae66b1db6a52e2bf56eabfaeb59409979362afdc96afb0c9e2e5ebadb89c3959d225bb4bd4cafc6ff79f70ab1c5a7e0bfbd71f38970128a9cc548d0f6efa604f03f9058fa000f007fa3ff49f0e134b072c28eca89e6ac4a30141e988f6f73bc5c8608749394c08356ca1696f1d6d48e1c0b1477b57dd9f117bd8bb90bce07b5cc6c88dcbba248f734bb975c51c814b1e2b321e316c79baf1a4dfd3f8c91f3ccfed5c54cb25d0855ff3041d0eceb5e087344dd8bca6c3a2d821d67ae6904bb8288ea6aaceae82ab7faf5be88ca23cf867e92a3c1822e180f1acad7d80f2fb0d60b13c50d6a35466f71bd1b3543ea9be8276e369613979c8fcc15deb539f2685e727dddbc3a871c2fde364c82dbd243b33814b77442f7a40b06edc8fdfe54714867f2e9e55598031356e8f78484100501a0c181c0993eb1b19939308d541834d20755fb645f37ac48c8eb148ef24a7c8ef3b6028aa3db776c02735d3b52b99f6f0df44760d6829e190bb26d814ce995d7bc18bb8078ad35963c37d7c49db500da722bf1cf3cc3a4ae54a5bfb60c2cf320d5840e2909bd9ac95e320c72c16c5bf4c12f72cc2715b219589dc6b18e77a4c5d3ff45bcbd38ca949c4841385573271cd3fb07ee7181109a4e4df0f286134947e22851b31d8ee4bbf33cde96f297fdd92710411214706a9ae5f63425d994dfbba012a3787d2430855fce4d96fed3098f7acbff12aceaebf7dbf0c31c6147766fd950ac613b1dd776f5050d4d349b79894cac206a80e711e65337a58f476cd0c07119c3e8da5ac23cfb852164af6c6af7c1684a3c5293698c226754924794fd0b7a020711caf8c6d887871041d9974927755ec3c92fc1f77ccabe6e4884a353189528f200dbc18f2c476a6d391b108f22fa07dd68dd287435002342998a3595c097e42f8b3f5f4e41639d76b6a5a221f36065ecf82908be0a7d5d7c0d63f61ccec74fe9fcb2d35ff23d673646110233f14bdc73e9518dcc216eb2df431f3a014317f872bd6c5b822857da070cc08dc915b46af50d55667629678a99205f0749d09c48f367d9b02f84e8e325c0c7cd51de81656f55c5858a3fc5a19f2a725ceb7cd44857b98ee7087e05339f2c111cda0f5a43fd975965c5d27cb39dd7610421e81bf06da29898f62cb12b1fa4aef832dbd436272e2e10ca33ea16ba755f3b549265f80e5dc3ff133591f11c9e94aff36f8957ce4198e718a50ed419fc242d4a713c3cd316c0d3dcfe5a83ac6c9cf5fbbb0b8f0e4798eee4d6154eeef15910222ff47bd866978eda0d6e40a0a6b1bf179d1683588ec2db98073c882c78f1123125a972e080d3a064b07dda88dec6f3652ac30eb0c07f40fc6ba49af8733fa6d9e01a075cfc868713f85936777cf82004836f19b7af7100f9d6de17900329b3be9ea9b293febae03fd45b740d5a9cbb0c0b000f152a7d9bc97812af94a4386c9325ddc7121c8e901a167816e9f4ada969bf77ec36c94a9f8156bc0636254f6a64bc27bbf71b164e11b90f4b4a806f5edd48f86d0282230333dc22f550f9498ea3d2fe77aea4525e961a0237bdb94868cacf6e551abb38bfe6ff26651d7de61b1fccc025b9095f605e1dba1c115e879da6972d5c9763fdd2ca2035f002f3c96db66cd4df67e8a26b1be06b36b38e5db407e3883ea82afa011afc74c2e2e83baeca819f2da5237789b42f9e4cda06003a49a6746d3c0052cb1d3f6eec131d721a0c0a43b51f8c920e7d33c611c40383bed9c3f7f7602a14facc241b9bd001b28de09c779e94f70ecf525d7454de35b55bb71f0486bacd0778fabd21d7716140b979c35afa0bc80dcd8df6ef48f5a5b66c6def0251a0739a4ac188c95759f92ebeec81b7fa999314ccb7d930b31306b3187019272cc94c719c678943987ba987b93f6991fbd4dc3252882cbf48b618b69b5d35485ddd7429dc8e5bcb9152301633d5af17b61e9992412dfc32c5913e9ab01a7a00bdbd126f1542dac147f38252b975c2879b0f3ffcf40f7b5b55a4b1ec0c499a930bfd85f96caf060715bc02c9b2566ddb969c7c1a1d36bcfd815177982f1e43e96d6f3e0a903ec2f3a838fe235abb85d357840ce42fc977b31b48b0036dd51789520cb86b76e48272a5032d23a5eece4fd05e07a8fef82a64cc4281b0ca2b072fc01d57d296c68ee5a0ddcf57e6715081e5178e6d7c297887aaa64864a5d44cd20bba8b18fa392291e7bc255c805c87e65f4e26fabe431acf30c4422933325b9b6f9a1a940ea395f0c0c63cca61b729cbbb2b843cb160b2fd50f3186493b44f78a71642680bdaaacc53fcfe8559c13b0c6a6a5c1443f30662a5860fd98fe35d8b4e7f692923a7d9f278fad0990f6c4225f7d8d35080de52261bc852d120026e3f8a2d323330d02260bc4efe409fdf381241a05fe49f86a13db4df047b8471b4c2e641d52c010c5d121b0f3792b7ebde79a266ceae68bde8ef04f6c08bc9e1e8e27abb71efae5fff77c60f122dc9dab9f6f13abf1387674fc9263360e13b89670cf"}], 0x10d0}, 0x3}, {{0x0, 0x0, &(0x7f000000b3c0)=[{&(0x7f000000b1c0)="e308b5bca24c4f384e186b664cbbfa6ee09919cf5cdcdf57a598aab98549ab8286270b01801e1984c99962dff4465fb4fd42654547f56896321b6d26eb69f3276d009cfa9ea306", 0x47}, {&(0x7f000000b240)="66c27facf067b887180bba0867822fd376e828a7eb233c1ee670f39847f141ff5f2b9e3c209a36af338c38cacde04a6e5ccbc5dccaeb4ceb601ab4824d19425e10cd89d157fadf91918836eef345a6fc81a21fa91c5500c1099a46a04565f84bb5d9f7b16d50589add51785ffc5da3c62fb42429fe4f5384123996ae18fe41649fd4f22b349a9f7bd21ec9c36b4d5e3e1338f30d2874989f19c6973e1aab86", 0x9f}, {&(0x7f000000bb00)="b552c87fb1e67646db5e477341bb29d6e657538fd133799650da96415753f70e8fe5ecf4c9d4edf35279402fe252059aa0d04adca38c517704d41cad9aa12f26ea3ad4acb963798397a0e99f3c37e28a0a447831ee5c2f4a424dd5e325229e1472af910f340fb00ff79f798393fa07551c8c89e5e6209d21290c814e5af26afe63d30b726e9962b391ae40f981e592894a1afe75623b77b2f22cad", 0x9b}], 0x3, &(0x7f000000b400)=[{0x70, 0x117, 0xbdcd, "2d986fda953523a1fa032e44e8a63710bc08b1772edaa29f3c050124b8046ce5b5f5629e368055a5f5ad8d181f05bea2e2f696de7d8afbe752baeaed7ea4aa907be23ffb81d93e2a953ff57d4650a1556b233599b093568799c6"}, {0x90, 0x117, 0x3, "41ac89aed9f86bf66445bc3a263cb134479a48194fc6c5b4f7e8026819c93040d966204892d48e78e52a156d31948bf03d539942aadf9eaf8c3aa87fa126a24b2bf789560e18f2aa4cdbd8b2abdf1d6e7b8744a7f39f19c202566f64d96ee9edf77417e9cc535c46d8c89cff60541017fa6a7fffeff9fe0963"}, {0xa8, 0x117, 0x4, "99799be2d1aa330992e4c486cfa9cefcb7c880bfa75ac2df58fa548b72b3fa8eec1b7aafbed718b197c1ef171ccafdeeaaba05be36ac6bd60a86a53158635117c085adf8996caa466c45e1949ebed1b605d981e557e5ff4f2cffadbc72a868d6e7486c6e6c3b97e709a1496b10527bb8cfbb1e76e4718bf69dd70e42dfb606941890330c9c059f0b89946c58ca13ca9947"}, {0x100, 0x103, 0x5, "ee4a66b0839b1f5b52e575ddb3394da13c0cf465db78e1f2665b97f9c6446929a524a2b464d5f2b309421eb95b1399991b56786bcadcdd009dea773a1d8d960189923771fe4cbbbe3d4379b00459aa66736953d6e2c04904dd1ecd9c76ba1aa19a01245bf49ef6d176f3ce1ab7fdc8162b962a1dbc0ff512fd3283ba496f40746ecfcb47dbbd58e712c30c7d3de702f70ec73b03c22e9e9d2a724e375aacac9e160ca3a6b0e40e47db2fcab8fac6c87485080464d5c0b022383ea7d9652b2bfece2cae9d3434f27d8c741205228b7ecc076c8e9394e656f8633d1d9033f214a110230145761db2d3ea635f8b"}, {0xfffffffffffffec3, 0x104, 0x6ca, "9158c5a17185c17ff60b8f4a69708ef5f318715c25f6e90382cdc7f0ab"}, {0xc8, 0x100, 0xfffffffffffffff8, "2fe0378dcda3050e21e8e4a2e79b1bb08c5f3fd5350beb6eb9afc87c31f739a7fbb1c1cfb918538bb7f808e1db80dac7bd3d3bc67f0c46660a8502f8719906c1c42fa3a92d3c0208dbd96b97b3c78c284c3526f161ae8ee1a1b015a35b555f7d693dcee155144566042bf0ddcf952222ec538c3e46cf20644b862b850fd3ad4cdb65f8b53278da186af087b92700f6ab0cf227239e1030e3fd41d9382edee1cb7364ce175af66e3a4b050ae8dae3f80ff0859ed67d"}, {0xf8, 0x3b, 0x2, "7b85d358791f88218101d1a821143542cab304b82deeff3320d7b892210fcb61b22357d6e0e9c2d2192b7d162bc46fe8decba31495c961016e4a10db4bfe71ac52f597bff5762fc793b35948b37cfb0190e5fe9bf08a098672c12d97cc552ede39f3becf3ff5dbc9237ca2c64ccd1c3c81ce14547bd59a535fba8c09507036e28dc6b607a4eb491a2ba2b9effadfabaae6a7fed0240884a51ef56f3771655df730b5cd71d7da5537a141eae4cfceff6eeff898bfb639ac32f14503efa22afa5d2c23ac7e8afd3c938adea18f00db8a697d13bf44b9ce98f3c1dff588be2430e11b97450e17"}], 0x498}, 0x27}], 0x7, 0x0)

08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})

[  195.759582] binder: 4930:4935 transaction failed 29189/-22, size 0-8 line 3117
[  195.770548] binder: 4929:4934 unknown command 25346
[  195.776351] binder: 4929:4934 ioctl c0306201 20000140 returned -22
[  195.787707] binder: undelivered TRANSACTION_ERROR: 29189
08:56:01 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:01 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000300), 0xffffffffffffff8e, 0x0, 0x0})

[  195.806866] binder_alloc: 4929: binder_alloc_buf, no vma
08:56:01 executing program 3:
r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x3)
geteuid()
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0'], 0xa)
close(r1)
clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4a1b, 0xd337, 0x1000, 0x51d, 0x15, 0x6, 0x86, 0x800, 0xbf, 0x9f0d, 0xff, 0x9})
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$TCGETA(r0, 0x5405, 0x0)

08:56:01 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  195.849247] binder: 4929:4934 transaction failed 29189/-3, size 24-8 line 3254
[  195.864385] binder_alloc: 4929: binder_alloc_buf, no vma
08:56:01 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x802, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000f3f4233104632b0f720000000000000000000000181f0000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0000140000000000673a"]], 0x0, 0x0, 0x0})

[  195.890448] binder: 4949:4950 transaction failed 29189/-3, size 24-8 line 3254
[  195.914632] binder: 4957:4958 transaction failed 29189/-22, size 0-8 line 3117
[  195.942544] binder: undelivered TRANSACTION_ERROR: 29189
08:56:02 executing program 0:
clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140), 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb0d715b1ef669493f0d92947ff3e2328f7200d34b2af67726d0042efb7ef3dae691979578e49ebda38a39e04c7b8556b158de6e353"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

08:56:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:02 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:02 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:02 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x2)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#'], 0x1)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000ec0)="61ce6ed94f41f48fddb17be75acd3fd8976f2f631226482bfc0c6321cc4cae47952fade164de0d115b601581953f9a337ea011906254b229aa6c3a8d246142c633fc0f54b0218c5becb9fd513c8914bdfad4668e36b8ffb24d6f7dc5e8119510898eca216a75ce4e6a295af4b6bc4dae50e31997f687b4bbc532210cef625534447e1a449d37a6163113a57c34f68e15230f660c161a41fa5330b0f852d2e337c373b2efe237dad926b57ba2421c33d21b5f8b412a3468010211cc46be2fc19f9731cab96ede51d898", 0xc9}], 0x108)
syz_genetlink_get_family_id$tipc2(0x0)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x8001, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x90, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x21}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

08:56:02 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@rand_addr=0xa021, @empty}, 0x8)
fcntl$setstatus(r1, 0x4, 0x8000000000044000)
io_setup(0xb, &(0x7f0000000240)=<r2=>0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100))
io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340))

08:56:02 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x40000800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
fallocate(r1, 0x1, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0xff, 0x3e, 0x7, 0x7ff, 0x761ffffffffd}, 0x14)
fchmod(r0, 0x1)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))
r2 = dup3(r0, r1, 0x80000)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x1, 0x73e1, 0x8})

[  196.166656] binder: 4977:4982 transaction failed 29189/-22, size 0-8 line 3117
[  196.184988] binder: 4976:4987 transaction failed 29189/-22, size 24-8 line 3117
[  196.191775] binder: undelivered TRANSACTION_ERROR: 29189
[  196.193919] binder: 4978:4989 unknown command 25346
08:56:02 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  196.225127] binder: 4978:4989 ioctl c0306201 20000140 returned -22
[  196.244291] binder_alloc: 4978: binder_alloc_buf, no vma
08:56:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:02 executing program 5:
r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x800)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x2, [{}, {}]}, 0x137)
creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe60, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@fda={0x66646185, 0x4, 0x0, 0x1a}, @flat={0x776a2a85, 0xa, r2}], &(0x7f0000000280)=[0x40, 0x20, 0x38, 0x0, 0x40]}}, @register_looper, @acquire, @dead_binder_done, @dead_binder_done={0x40086310, 0x1}], 0x0, 0x0, 0x0})
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x3, 0x5004b1c9, 0xa9e})

[  196.271252] binder_alloc: 4978: binder_alloc_buf, no vma
[  196.271262] binder: 4978:5000 transaction failed 29189/-3, size 24-8 line 3254
[  196.299281] binder: 5005:5007 transaction failed 29189/-22, size 24-8 line 3117
08:56:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

[  196.319278] binder: 4998:5003 transaction failed 29189/-3, size 0-8 line 3254
[  196.332798] binder: 5010:5014 unknown command 25346
[  196.343101] binder: undelivered TRANSACTION_ERROR: 29189
08:56:02 executing program 5:
r0 = creat(0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0xff)
r1 = socket(0x4, 0x4, 0x1000000000000000)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000040)=""/58, &(0x7f00000000c0)=0x3a)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

08:56:02 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  196.373725] binder: 5010:5014 ioctl c0306201 20000140 returned -22
[  196.377187] binder: 5017:5021 transaction failed 29189/-22, size 24-0 line 3117
[  196.394334] binder_alloc: 5010: binder_alloc_buf, no vma
[  196.403111] binder: undelivered TRANSACTION_ERROR: 29189
08:56:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02630000"], 0x1b, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  196.417183] binder: 5010:5024 transaction failed 29189/-3, size 24-8 line 3254
[  196.422125] binder_alloc: 5010: binder_alloc_buf, no vma
[  196.455817] binder: 5032:5037 transaction failed 29189/-22, size 24-0 line 3117
[  196.460596] binder: 5027:5030 transaction failed 29189/-3, size 0-8 line 3254
[  196.464982] binder: release 5034:5038 transaction 491 out, still active
[  196.494386] binder: undelivered TRANSACTION_ERROR: 29189
[  196.541053] binder: send failed reply for transaction 491, target dead
[  196.548514] binder: undelivered TRANSACTION_ERROR: 29189
08:56:02 executing program 3:
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x0, 0x806, 0x5)
getresuid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="c80000001b0000012bbd7000fddbdf25fea000000000000000000000000000bb000000000000000000000000000000004e2100404e2001000200a0802f000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0700000000000000000000000000000008000000000000000100000000000000e0ffffffffffffff74e5000000000000600000000000000001000000000000008a0200000000000003000000000000000800000000000000060000000000000007000000b26b6e00010003000000000001000000000000000800180004000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20008084}, 0x40)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_newroute={0x3c, 0x18, 0x2, 0x70bd29, 0xfff, {0xa, 0x0, 0x0, 0x5, 0xff, 0x3, 0x0, 0x6, 0x1000}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, @typed={0xc, 0x39, @str='vmnet1\x00'}}, @RTA_EXPIRES={0x8, 0x17, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x42400)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs, 0x8)
connect(0xffffffffffffffff, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r4 = syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000bf)
ioctl$TIOCNXCL(r4, 0x540d)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4000)

08:56:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:02 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x1c5, 0x0, 0x0})

08:56:02 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@rand_addr=0xa021, @empty}, 0x8)
fcntl$setstatus(r1, 0x4, 0x8000000000044000)
io_setup(0xb, &(0x7f0000000240)=<r2=>0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100))
io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340))

08:56:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:02 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:02 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000180000000000000008000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
write$binfmt_aout(r0, &(0x7f0000000480)={{0x107, 0x400, 0x1, 0x351, 0x301, 0xcd, 0x98, 0x400}, "61de5abcfcdaaa6d57e5c277f4282f9e", [[], [], [], [], [], [], [], [], [], []]}, 0xa30)

[  197.001416] binder: 5048:5053 transaction failed 29189/-22, size 24-0 line 3117
[  197.003227] binder: 5052:5056 transaction failed 29189/-22, size 0-8 line 3117
[  197.018585] binder: undelivered TRANSACTION_ERROR: 29189
[  197.027278] binder: release 5050:5055 transaction 497 out, still active
[  197.042539] binder: undelivered TRANSACTION_ERROR: 29189
08:56:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:02 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  197.063094] binder: send failed reply for transaction 497, target dead
[  197.100938] binder: 5063:5071 transaction failed 29189/-22, size 24-8 line 3117
08:56:03 executing program 3:
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x0, 0x806, 0x5)
getresuid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="c80000001b0000012bbd7000fddbdf25fea000000000000000000000000000bb000000000000000000000000000000004e2100404e2001000200a0802f000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0700000000000000000000000000000008000000000000000100000000000000e0ffffffffffffff74e5000000000000600000000000000001000000000000008a0200000000000003000000000000000800000000000000060000000000000007000000b26b6e00010003000000000001000000000000000800180004000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20008084}, 0x40)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_newroute={0x3c, 0x18, 0x2, 0x70bd29, 0xfff, {0xa, 0x0, 0x0, 0x5, 0xff, 0x3, 0x0, 0x6, 0x1000}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, @typed={0xc, 0x39, @str='vmnet1\x00'}}, @RTA_EXPIRES={0x8, 0x17, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x42400)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs, 0x8)
connect(0xffffffffffffffff, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r4 = syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000bf)
ioctl$TIOCNXCL(r4, 0x540d)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4000)

08:56:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:03 executing program 5:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x110)
getsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000040), &(0x7f0000000080)=0x4)
creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB]], 0x0, 0x0, 0x0})

08:56:03 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

[  197.113811] binder: 5067:5070 transaction failed 29189/-22, size 24-0 line 3117
[  197.119896] binder: 5072:5077 transaction failed 29189/-22, size 0-8 line 3117
[  197.146043] binder: undelivered TRANSACTION_ERROR: 29189
[  197.157021] binder: undelivered TRANSACTION_ERROR: 29189
08:56:03 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:03 executing program 0:
r0 = socket(0x80000000000000a, 0x10000000002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x400)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080), 0x4)

08:56:03 executing program 5:
r0 = creat(0x0, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="8dba2a29a2e4a4214ef868985652580661f20005044476223c60070930ec8cef7d51f07dfc7fa62996cf7c90f940b127b0bda36ff2d66d99c0c9ef7ac6720438fa105ba23ee41c65")
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000100000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r0)

08:56:03 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  197.228408] binder: 5084:5089 transaction failed 29189/-22, size 24-0 line 3117
[  197.239444] binder: 5082:5092 transaction failed 29189/-22, size 24-8 line 3117
[  197.252125] binder: undelivered TRANSACTION_ERROR: 29189
[  197.261921] binder: 5087:5094 transaction failed 29189/-22, size 24-8 line 3117
08:56:03 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
exit(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x0)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000001c0))
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0)
readahead(r0, 0x80, 0x8000000000)

08:56:03 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x50, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0)="43e852e978fed28ca15e23468ad261495f7cdc7bb4d1ab79c54d681beebd0877be7402277b6f0e6906c8396ab0b25192339d67b5115d6d96188d0dc433f02d61a06e821e888d8f01dc3d739f1746bdccde864a715be5406bc36d3c7b716bb8e39c2d56fa5fe5c358685f615fb944ec3decd8914c37b3194173b7b31255ae57011c0378f7b5ed5ed6704d", 0x8a, r0}, 0x68)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x15, r2, 0x0)
recvfrom$unix(r1, &(0x7f0000000400)=""/147, 0x93, 0x2000, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x84800)
ioctl$TCGETS(r3, 0x5401, &(0x7f0000000040))
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='`ser\a\x00'], &(0x7f00000001c0)=""/228, 0xe4)
poll(&(0x7f0000000140)=[{r2}], 0x1, 0x7f)

08:56:03 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
prctl$PR_CAPBSET_READ(0x17, 0x8)

08:56:03 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  197.338219] binder: 5103:5107 transaction failed 29189/-22, size 24-8 line 3117
[  197.356302] binder: 5101:5112 transaction failed 29189/-22, size 24-0 line 3117
08:56:03 executing program 4:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:03 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:03 executing program 5:
r0 = creat(0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x3)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x10001, 0x3, 0x0, 0x8, 0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x200000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="f98b2e6a7831ad19"]], 0x0, 0x0, 0x0})

[  197.389835] binder: undelivered TRANSACTION_ERROR: 29189
[  197.389895] binder: 5118:5119 transaction failed 29189/-22, size 24-8 line 3117
08:56:03 executing program 4:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:03 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:03 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  197.460755] binder: 5124:5129 transaction failed 29189/-22, size 24-8 line 3117
[  197.478912] binder: undelivered TRANSACTION_ERROR: 29189
08:56:03 executing program 5:
chdir(&(0x7f0000000040)='./file0\x00')
creat(0x0, 0x10)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00005b1017cc290000000000000000000000000000000000"]], 0x0, 0x0, 0x0})

08:56:03 executing program 4:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  197.536636] binder: 5137:5140 transaction failed 29189/-22, size 24-8 line 3117
[  197.547236] binder: 5139:5143 transaction failed 29189/-22, size 24-8 line 3117
[  197.563662] binder: undelivered TRANSACTION_ERROR: 29189
08:56:03 executing program 0:
syncfs(0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000000800)="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", 0x600)
sendfile(r0, r1, 0x0, 0x10000)
openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
dup(0xffffffffffffffff)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$RTC_AIE_OFF(r2, 0x7002)

08:56:04 executing program 3:
r0 = socket(0x10, 0x1, 0x243d00000000000)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x6, 0x4)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010207681dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

08:56:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
r1 = creat(0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
signalfd(r1, &(0x7f0000000000)={0xc9}, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:04 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:04 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:04 executing program 0:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0209300202000000180586d645407560"], 0x10}}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x1, @remote, 0xf8}, {0xa, 0x4e20, 0x3, @loopback, 0x7}, 0x8001, [0x400, 0xfffffffffffffffd, 0xffff, 0x9, 0x5, 0x2, 0xea91, 0x800]}, 0x5c)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000003000500000000000200423b000001000012b478407f8604"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f0000000180), 0x400000000000003, 0x0)

[  198.191669] binder: 5160:5163 transaction failed 29189/-22, size 24-0 line 3117
[  198.195060] binder: 5161:5167 transaction failed 29189/-22, size 24-8 line 3117
[  198.206526] kauditd_printk_skb: 2 callbacks suppressed
[  198.206535] audit: type=1400 audit(1553676964.078:41): avc:  denied  { create } for  pid=5166 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  198.215873] binder: undelivered TRANSACTION_ERROR: 29189
08:56:04 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@l2, &(0x7f0000000000)=0x80)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e22, @local}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x2, 0x2})
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:04 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:04 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0xffff, 0x10001})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr=0x7f, @local, 0x0, 0x1, [@broadcast]}, 0x14)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000c3974ecd1e62b46b7cd33fa2a5a38a826d060044ac8af0c02644704f510f9b646537b85ab903bfe7ee205e4b48aec2345e3a5477c231e5925a2e1ea746e2a4eb01af7d3f869c"]], 0x0, 0x0, 0x0})

08:56:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  198.238383] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.251067] binder: 5162:5165 ioctl c0306201 0 returned -14
[  198.258879] binder: undelivered TRANSACTION_ERROR: 29189
08:56:04 executing program 3:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r1=>0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x2, 0x71, 0x5, 0xfffffffffffff000, 0xfffffffffffffbff, r1})
r2 = gettid()
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1d)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x6, 0x64})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

08:56:04 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0)

[  198.312139] binder: 5177:5182 transaction failed 29189/-22, size 24-0 line 3117
[  198.318207] binder: 5180:5183 ioctl c0306201 0 returned -14
[  198.336120] audit: type=1400 audit(1553676964.118:42): avc:  denied  { write } for  pid=5166 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
08:56:04 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x311)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:04 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

[  198.348433] binder: undelivered TRANSACTION_ERROR: 29189
08:56:04 executing program 5:
creat(0x0, 0xfffffffffffffffd)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x26, &(0x7f0000000280)=0xffffffffffffffe0, 0x4)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = gettid()
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x12, &(0x7f00000000c0)='/dev/input/event#\x00', <r4=>0xffffffffffffffff}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r3, 0x0, 0x16, &(0x7f0000000080)='/posix_acl_accessuser\x00', r4}, 0x30)
creat(&(0x7f00000001c0)='./file1\x00', 0x65)
creat(&(0x7f0000000180)='./file0\x00', 0x40)
r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x101800)
ioctl$EVIOCGSW(r5, 0x8040451b, 0x0)

[  198.397411] binder: release 5175:5188 transaction 523 out, still active
[  198.425698] binder_alloc: 5180: binder_alloc_buf, no vma
08:56:04 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0)

08:56:04 executing program 5:
creat(0x0, 0x80000000000008)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x244001, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{}, {0x20, '/dev/binder#\x00'}, {0x20, 'bdevwlan1@security}.GPL&self\'ppp0keyringppp1\x96wlan0trusted$.cgroupwlan0'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {}, {0x20, '+'}, {0x20, '/dev/binder#\x00'}, {}, {}], 0xa, "09d67535c435cc995edee1575d2d434cad01b008366c8212ad62cd630baad4a3d8e5d741af7c16c8f7761f1236b5e38f8a225a4f"}, 0xc4)

[  198.444102] binder: send failed reply for transaction 520 to 5175:5184
[  198.447236] binder_alloc: 5180: binder_alloc_buf, no vma
[  198.460804] binder: 5196:5201 transaction failed 29189/-3, size 24-0 line 3254
[  198.469643] binder: 5203:5208 ioctl c0306201 0 returned -14
[  198.471176] binder: send failed reply for transaction 523, target dead
[  198.477041] binder: 5194:5204 transaction failed 29189/-3, size 24-8 line 3254
08:56:04 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ptrace$setsig(0x4203, 0x0, 0x800000, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e)
socketpair$unix(0x1, 0x8000000000000002, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e)

08:56:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:04 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

[  198.508712] binder: undelivered TRANSACTION_ERROR: 29189
08:56:04 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r1, 0x7ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0be138d3d157dac3", @ANYRES64=0x0, @ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:04 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xe7y\x9dH\x96\x1a\"\xaa\xbb\xb2\x8f_\xe1R\x90\xcb`\xfa\xe0]8s\xf0H\xe5\xe9\xc3\x98\x1f\xc2\x93Q\x89k\xc57\xe1\xd3M\xd4,=q\xb2\x92f\xc2)\x94\b\x00\x00\x00\x00\x00\x00\x00g%\x9e\x8fm!X\b\x8b\xf7_\x01\xe0\xabd_o\xa7m\x16\x8c\x00\xad{;\xfc=s\xcbq5\x97\x01e\x83\xae-\b:g8l\rv\x05\xa0m\xfc\xe0k`\xd3X\xba\xd2\xd3M\xaa@0\x1a {v)\x00\xf2k\x86PI!\xa7\xfb\xe5\r\xdcF\x11m\x8f\x02\x1b\x1a?\\\xbdBU\xe8\xab\xac\xe3GvY\xc7W\'\xcb\xd1\xd6\xad\xf2\x0e\xd8}*\xcb:\t\x17&G0\x9d\xad\x8f\x836F\xc3<\x1d\xd6\x0f\xac\x95\xb2\xbeZ\xc5\xdd\xb0\t\xdd)J\xe9\xa1\xfc\xde\xfd\t/e\x8b\xa0\r2\x043\x8a$+\x84\x10\xfc\xde2\xd55\xa4\x17\xd9\x82\aM4}~g\xc7/=y\xcb\xf5\x81\xdaT\xe9\x05\xd3v\xfb1\xf4\x1b}\xa7\xe23!\f\xd13\xaaI\xc2\xe0O\xae:\xe4', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100))
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x2})
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1})

08:56:04 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  198.548918] binder: undelivered TRANSACTION_ERROR: 29189
08:56:04 executing program 3:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x10400, 0x0)
write$P9_RFSYNC(r0, &(0x7f0000000340)={0x5, 0x33, 0x2}, 0x5)
socket$unix(0x1, 0xfffffffffffbfffc, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff79, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x2000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1})
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
write$P9_RAUTH(r2, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

08:56:04 executing program 5:
r0 = creat(0x0, 0x0)
getsockopt(r0, 0x6, 0x0, &(0x7f0000000080)=""/97, &(0x7f0000000100)=0x61)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002680)={<r1=>0x0, r0, 0x0, 0x7, &(0x7f00000003c0)='GPLGPL\x00', 0xffffffffffffffff}, 0x30)
getresuid(&(0x7f00000026c0)=<r2=>0x0, &(0x7f0000002700), &(0x7f0000002740))
lstat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = fcntl$getown(r0, 0x9)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002840)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000002940)=0xe8)
stat(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getpgrp(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002a40)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000002b40)=0xe8)
r9 = getegid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002f80)={<r10=>0x0, r0, 0x0, 0x7, &(0x7f0000002f40)='vmnet0\x00', 0xffffffffffffffff}, 0x30)
r11 = getuid()
getgroups(0x9, &(0x7f0000002fc0)=[0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, <r12=>0x0])
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003000)={<r13=>0x0}, &(0x7f0000003040)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003080)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000003180)=0xe8)
lstat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
r16 = gettid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000047c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000048c0)=0xe8)
getgroups(0x4, &(0x7f0000004900)=[<r18=>0xee01, 0xee01, 0xee00, 0xee00])
r19 = fcntl$getown(r0, 0x9)
fstat(r0, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, <r20=>0x0})
r21 = getegid()
sendmmsg$unix(r0, &(0x7f0000004a40)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000001c0)='$', 0x1}, {&(0x7f0000000240)="e3da6c1d", 0x4}, {&(0x7f0000000280)="410ecf920dcaa8f6a1dcd6f21c9a9d8421b2ea56e92c311eeec15948374fd1a8e2d2c9234dfa8e6c3932c5dc4d2fda259b961740e2efe9651d8d98d609bfb7fa203e83e1861f7e8e6e3b90afde2ec24e9bfd98651311bf08af061027366925525ffed2cd149539af1d9690190d8258131440d58a38ef68", 0x77}, {&(0x7f0000000480)="af7129dfd642d8473be7f902d5a4defb500610358fb7bbea82413e4c11ae65a67ba82f33e574306a1ae42bd9d13d8b82d0a7f16e051033b2ca427a4c3a61f0f13add0c86ea934bf475f0116b9d3c0b34b10ad51a2dcd6303ac626484a6f84fe813b9b0c1c2e17f38f9f8f31597ae7775f1b4647b0886eea176cf1e855206c340053b36f9841134eae4b701ec5ff385b79535421710929eed76e4823b31df5095258805b5cead7cffe7f32d5e61f654ba5ab8", 0xb2}, {&(0x7f0000000540)="2fd5261f7725fd03c4d9bb44723f1a92e6cf6f39f026ba3198e13455904d29d1edaf04ce0e03e16f81a5242d91fe3560bbf68d75c7cd0c8e8941fd786e614a6927626187428fb8e8b406c1a953a0b8c351d46e3d32196fee4ecd31fb2eddf3c0f4fc431945724375f94114626c0a306e857b2a84746b8742f0852b2f19132d1b43909612ab9b0f81bf815092a6c5a379a0736dce20886d9a787eec64c3b3319c036fba03dc0b", 0xa6}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000380)="fb9eccb0e4eea70220e46c252a86512a0a120eaa84c264c7a87e6e9b8c", 0x1d}], 0x8, &(0x7f0000002b80)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r0]}], 0x90, 0x4008044}, {&(0x7f0000002c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="4ddb613d7c8cc8f4bda2300aee724264b8e7058a3922c4f3992a206148d9a804fb1f4cd45ac6bedac9b5414694ee90785a60fdc1921aa6106866253ad7e9693dae39d878856c87ff069b1d56ef3af2352a843beaf4538676036e789e", 0x5c}, {&(0x7f0000002d40)="a9ae55f2c6bbce6e5f733fcbe1f1f1ac2b6e7c96c214dfa6d8a00e9a8d30e352271c7dcb9e6d9725dcc24f10a0d2de5c9751995a4b69aceba6b9ccd0477dcca8d512ef9543d3d2963f8c577f91f5bbee3599e19971113a1ad1b5f6e52e512f1c534c6cf0ef1e3c9bae8bc9e687e2bfffa768d1945697daa6e774", 0x7a}, {&(0x7f0000002dc0)="0421a218c191d006ee8307593087ebbc011613bbd3f45813a11270c531bd821762c53532ebf566edaf36897a7e4db4695c6552f0ee95c2e141dcd729cb48b9756c454e0d762822db5a43fd911bd9d738b116b152a73d3dc59ac239a49264726c1d0fbfc9cfeaa4274b7c8dbd62cfcc877dc1b77780b1e65d368eb9a87153389dabfc2a3189dd2da7b8dd18fcf247a0c4453cfd4a97860d614baf778bb4c9f186ab96268a2d12d4", 0xa7}, {&(0x7f0000002e80)="0c43947e0bd79f36d41361e8126507182091bf5511a12395021d3f882c332b8b9a422b1259ee431c9859ba00969764b83fbb6a13a8a99c07ca98b95c45611990a9b65e80c0671f52b0b9404da7e8ab40685ecfba0c", 0x55}], 0x4, &(0x7f0000003280)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x40, 0x4810}, {&(0x7f00000032c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000003340)="c9e4821d61341d0452e2ee62eaff83764ba25d2710ed61e3188f6866ca7cd0b22613a9e89ded40f869e35b6728098a4040f51085743c0e81eb2ad46795906575aab9b9e2c00874834c3a6098d18e18272cddac01dc15cb2ca17b722086b1019db1a3b026f8bdc547aeadc65266d217b3fb35f4999b483238144f1e5a41bf694ac4f80df04a7279cc360bec1480d11c2aaee05ade79a81227e04b413996efe0", 0x9f}, {&(0x7f0000003400)="d6b2a024b3a9dbe4b113c3f7487a4576e32c868b982a0dd3116bf1e94da56e67f5d13b937202ccbd24032f8fb26a9ad7fa377e9220018292125404d419546d7927be5bca30d30070cc6f717f91", 0x4d}, {&(0x7f0000003480)="b110ec0af7b3a9845722021b070491a6a294fea5460e2232c45f493a3d42ec7d4dde82b3240c9a15c3303ec1294ebf0417c96d5efad70b3b6ac2aac70eec8cfd4b5aff4f40e835a6a9f62961ad1ca4b2612e953305dd6b8f511fe4224dc745764036a47880f434329897268a37897a657a57fe0646550acf222bfe9fadf4e55167f663f5075dcebb0e1201dd5dcc7cedbb9f2fc1d3604be9c908af4e03fdc8cfcfad271f85dbb54970f32da162dc80bf827e747bc552af0d7e6dc530320bf85f3c1acf397d6ea9727c15cc03b3b28ded207f345024518653352bfc9a9fab262fcf1523ec4db3", 0xe6}, {&(0x7f0000003580)="cf4398ed8225a67246b254d911f7527c178e300c96e4a34ea39cf2b57f4040612d77606d880a6fb14f737d363154033b269ef2938acb11b11ab4b40512430626b863280a2fb5413ce1571c6422c9573ef1621e8c14ce793e3fe17fcd9b9c8b29e3fb327709e29bd44296e0046c2cb6965438fd36d1a8d6ebd141b860d2b41ba203e2a8c217acc894a26ac17dd2d623958297a901832cd88d8b445fe95fe47236eda8cf52d4", 0xa5}, {&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="4eaa1ce1015a059b90e11c4abbf9a10a93063ea4eefd93ebdb963ceb1fe5b4457b82c928e0415f70bba340d42fd9b7e3cc67b38198cd8618edf396b86b2bde45473c60e4f0b7d0b8ee289ca1bca0bd00556fefa629d8387b7f86b3ebea37c91c8505ea5d31e9d9539fbfde3378978fa2b0adef2951f0033eec0475b19a454c53f974b220add0be1c081180765a271d01cbb4f34294de7d5704bb99666e189e32a5f1db7b538d198dc07c59947532bb08d3ca2907ff19e140640fc8dea4f4e4401117116a5b69d241b6cc5354de8a2e9ddf77d8ec22850e0d914e9935b6a6e2940adff1a7046f8e09a701877d28393756ad", 0xf1}], 0x6, &(0x7f00000049c0)=[@cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}], 0x58, 0x8000}], 0x3, 0x40000)
r22 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000aa41f8c05afd5c8e37ffe652f3487f6bc9e01eba6bd20a8a4a73249d36661c032038f5c46e99f22948f5ded6c6889d6afde75e1c66e71a4d83439863d4bca791b6e4a8ed44c410d51db10b9b9779a691c1d2b6f463391c5646f24d3d1cfb7389d5241619db6f0f661bb8"]], 0x0, 0x0, 0x0})

[  198.590293] binder: 5220:5226 transaction failed 29189/-22, size 24-0 line 3117
[  198.595693] binder: 5228:5231 transaction failed 29189/-22, size 24-8 line 3117
08:56:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:04 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:04 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x72, "6beb7b988adbd71d954b4901ef83fe1ecc1a16817423eb7dfca35ffc6a17ce50d0dc991cd9143149b6da29158fa6ef5876675f3a81c882017b31c21e0762b45b163ad974bd67963328583b7f750fcd08d2c175f65b887c5c4204468b9a88c1cd659eea1fee66fcb2263c9bb950ef3fc7baf8"}, &(0x7f00000000c0)=0x96)

[  198.645941] binder_alloc: 5224: binder_alloc_buf failed to map pages in userspace, no vma
[  198.657792] binder: undelivered TRANSACTION_ERROR: 29189
[  198.685144] binder: 5228:5237 transaction failed 29189/-3, size 24-8 line 3254
08:56:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:04 executing program 2:
getsockname(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000200)=0x80)
accept4$inet6(r0, &(0x7f0000000300), &(0x7f0000000340)=0x1c, 0x80000)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000005b25806200000018000000000000000800000000000000c48022a8a059646a28015d5da78634f2179a5cf46a47c64a6c0700000070d2760155cfdf3e210cad654b6a2250a265cee8246ce67e7b5f3265aa0a0faa3ff53ecc78837778f1deb7348b6f0a1b493eb84c4738e5d80a019e09358cf83d89dfbe", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="972a6273000000c3de9a0c87c5e4ae05b5ec740000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:04 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
socket(0x1, 0x0, 0x2)
syz_genetlink_get_family_id$tipc2(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x78)
sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

08:56:04 executing program 5:
r0 = creat(0x0, 0x200048)
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000628b331dac00007c0c"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c)
getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)

08:56:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  198.765542] binder: 5250:5257 transaction failed 29189/-22, size 24-0 line 3117
[  198.784915] binder: undelivered TRANSACTION_ERROR: 29189
[  198.792050] binder_alloc: 5260: binder_alloc_buf failed to map pages in userspace, no vma
[  198.802318] binder: 5262:5265 transaction failed 29189/-3, size 24-8 line 3254
[  198.824563] binder: 5262:5272 transaction failed 29189/-22, size 24-8 line 3117
08:56:05 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580))
getuid()
geteuid()
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000240))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x37)
sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
dup2(r0, r2)
write$P9_RMKDIR(r3, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x8b, 0x3, 0x6}}, 0x14)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x444e196218873afd, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000300}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0xd01, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4b1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
shutdown(r4, 0x1)

08:56:05 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:05 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:05 executing program 2:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000140)={'icmp\x00'}, &(0x7f00000001c0)=0x1e)
socket(0x10, 0x0, 0x0)
pipe(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
write$selinux_attr(r3, &(0x7f0000000340)='system_u:object_r:usbmon_device_t:s0\x00', 0x25)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
recvfrom(r5, &(0x7f0000000640)=""/69, 0xfffffffffffffecb, 0x10000, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x9bac3803f786a29d)
connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@unspec, 0xc)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x702b, @dev}})
write(0xffffffffffffffff, &(0x7f0000000480)="220000001e00070700be5bcea13e07010af000a3baf9d825d08ced685bf41e00", 0x20)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="4001000095fc599965908e717d9581d41cb1", @ANYRES16=r1, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x9c79b770d28ac019}, 0x4)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:05 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
socket(0x1, 0x0, 0x2)
syz_genetlink_get_family_id$tipc2(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x78)
sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

08:56:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:05 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="436a9cc6ed02604f"]], 0x0, 0x0, 0x0})

[  199.481887] binder_alloc: 5479: binder_alloc_buf failed to map pages in userspace, no vma
[  199.511438] binder: 5476:5485 transaction failed 29189/-3, size 24-0 line 3254
08:56:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:05 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  199.554202] binder: undelivered TRANSACTION_ERROR: 29189
08:56:05 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580))
getuid()
geteuid()
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000240))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x37)
sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
dup2(r0, r2)
write$P9_RMKDIR(r3, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x8b, 0x3, 0x6}}, 0x14)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x444e196218873afd, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000300}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0xd01, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4b1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
shutdown(r4, 0x1)

08:56:05 executing program 5:
r0 = epoll_create(0x8646)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=<r1=>0x0)
fcntl$setown(r0, 0x8, r1)
creat(0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000800636f29500068d7565ca931a6369a3d6621afc30f3f96cc60cca2605a363840ba2bbca3b0f435695af7ef"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="06c5000000040000ff227b29423a1512e6b713c3cdea3747075c8e016f000000000000"]], 0x0, 0x0, 0x0})

[  199.627370] binder: 5505:5507 transaction failed 29189/-22, size 24-8 line 3117
[  199.641928] binder: 5504:5508 got transaction with invalid offset (0, min 0 max 0) or object.
[  199.675976] binder: undelivered TRANSACTION_ERROR: 29189
[  199.689654] binder: 5504:5508 transaction failed 29201/-22, size 0-8 line 3348
08:56:05 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:05 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  199.721414] binder: undelivered TRANSACTION_ERROR: 29201
[  199.782497] binder: 5522:5526 transaction failed 29189/-22, size 24-8 line 3117
[  199.804714] binder: 5525:5529 got transaction with invalid offset (0, min 0 max 0) or object.
[  199.805769] binder: undelivered TRANSACTION_ERROR: 29189
[  199.837535] binder: 5525:5529 transaction failed 29201/-22, size 0-8 line 3348
[  199.858013] binder: undelivered TRANSACTION_ERROR: 29201
08:56:05 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10)
getsockopt$inet_int(r0, 0x0, 0x3f, &(0x7f0000000140), &(0x7f0000000180)=0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000001b00000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  200.011668] binder: 5559:5562 got transaction with invalid offset (0, min 0 max 0) or object.
[  200.016801] binder: release 5561:5565 transaction 553 out, still active
[  200.027231] binder: 5559:5562 transaction failed 29201/-22, size 0-8 line 3348
[  200.033459] binder: release 5561:5564 transaction 550 out, still active
[  200.046006] binder: undelivered TRANSACTION_ERROR: 29201
[  200.058519] binder: send failed reply for transaction 550, target dead
[  200.067026] binder: send failed reply for transaction 553, target dead
08:56:06 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
socket(0x1, 0x0, 0x2)
syz_genetlink_get_family_id$tipc2(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x78)
sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

08:56:06 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:06 executing program 5:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84000)
r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@caif=@dgm, &(0x7f00000000c0)=0x80)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
creat(0x0, 0x8)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:06 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
io_setup(0x1000, &(0x7f0000000000)=<r1=>0x0)
io_destroy(r1)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

08:56:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:06 executing program 1:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000140)={'icmp\x00'}, &(0x7f00000001c0)=0x1e)
socket(0x10, 0x0, 0x0)
pipe(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
write$selinux_attr(r3, &(0x7f0000000340)='system_u:object_r:usbmon_device_t:s0\x00', 0x25)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
recvfrom(r5, &(0x7f0000000640)=""/69, 0xfffffffffffffecb, 0x10000, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x9bac3803f786a29d)
connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@unspec, 0xc)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x702b, @dev}})
write(0xffffffffffffffff, &(0x7f0000000480)="220000001e00070700be5bcea13e07010af000a3baf9d825d08ced685bf41e00", 0x20)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="4001000095fc599965908e717d9581d41cb1", @ANYRES16=r1, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x9c79b770d28ac019}, 0x4)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:06 executing program 5:
r0 = creat(0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  200.370732] binder: 5625:5627 transaction failed 29189/-22, size 24-8 line 3117
[  200.378302] binder: 5624:5630 got transaction with invalid offset (0, min 0 max 0) or object.
[  200.382848] binder: undelivered TRANSACTION_ERROR: 29189
[  200.387790] binder: BINDER_SET_CONTEXT_MGR already set
[  200.401044] binder: 5626:5631 ioctl 40046207 0 returned -16
[  200.410769] binder: 5624:5630 transaction failed 29201/-22, size 0-8 line 3348
08:56:06 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00e6b8000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe37, 0x0, &(0x7f00000003c0)})
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)

08:56:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=<r4=>0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=r4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12000009}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x102, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffffe6, 0x721, 0x1, 0x7f}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x4000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  200.437474] binder: 5626:5640 got transaction with invalid offset (0, min 0 max 0) or object.
[  200.447800] binder: undelivered TRANSACTION_ERROR: 29201
[  200.453874] binder: release 5623:5638 transaction 563 out, still active
[  200.472747] binder: 5626:5640 transaction failed 29201/-22, size 0-8 line 3348
[  200.512050] binder_alloc: 5624: binder_alloc_buf, no vma
[  200.513228] binder: send failed reply for transaction 559 to 5623:5629
[  200.517909] binder: 5645:5649 transaction failed 29189/-3, size 24-8 line 3254
[  200.545422] binder: send failed reply for transaction 563, target dead
08:56:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  200.556521] binder: 5652:5658 got transaction with invalid offset (0, min 0 max 0) or object.
[  200.567611] binder: undelivered TRANSACTION_ERROR: 29189
[  200.578260] binder: 5652:5658 transaction failed 29201/-22, size 0-8 line 3348
[  200.595877] binder: undelivered TRANSACTION_ERROR: 29201
[  200.614462] binder: BINDER_SET_CONTEXT_MGR already set
[  200.619940] binder: 5669:5670 ioctl 40046207 0 returned -16
[  200.620306] binder: release 5645:5661 transaction 569 out, still active
[  200.627854] binder: 5669:5670 got transaction with invalid offset (0, min 0 max 0) or object.
[  200.655461] binder: undelivered TRANSACTION_ERROR: 29201
[  200.683767] binder: send failed reply for transaction 569, target dead
[  200.690708] binder: 5669:5670 transaction failed 29201/-22, size 0-8 line 3348
[  200.721607] binder: undelivered TRANSACTION_ERROR: 29201
08:56:06 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
socket(0x1, 0x0, 0x2)
syz_genetlink_get_family_id$tipc2(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x78)
sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

08:56:06 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000010400000000000400000000000000000000000000000018000000000000000800000017000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:06 executing program 5:
r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000480)="548d65f316f5f185937f71ec5cbcf738a826fccdb5355d84edd342689f13abf62abf971d710995edc858cf4bc4a02347bf432e7719aafb63ccadb42d3a79c0da2f54282d5cc9889751c60624e40fb22ffdfe62be1afb50f1d8a319eb50736a3f8866ba1397578584d1ab257440da553651c0e76c6c3573272f58b7f30a129a033fbe83ab59019136b773cebe427c66a82c8e45499e14b616cb2b6e5877676551c91f09ba3ea5b070e999916791cbb9ed41fe776aa92e6f8b", 0xb8, 0xfffffffffffffff8)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="9f30cd78677845c2d6bd65c99e1b4078a28edf974f52d579477d3a2092bb625a342fcbd200a63b350758115f7f2b991fa401e9d5bf850e80f3ec2caade5d1fcff7b162529a5dbf10fd09121910ce84b3938e046e43f3d0b0baaa02413ff5f02d04b5245ecae095bd21a37b16e32665f14461acce", 0x74, 0xfffffffffffffff8)
r2 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="22e2412caa4b551462ff66f8d97f33ead40bf465aeae276a3397f824bee1f92b3045df33dacf10b05c86e5b951f31cd6683cd407ac936a6c4c91f8a68c1bbf9b0e1f71b9037b5b4b3519d34f9243611902882424d83aa11713d4819aa6e0cf976cd9a9e3deab8ae81e23a451504b9eed51cfb93a089fa262bdeec37dc47466a60b10a0a12b4d34228569f67586ab98467191220adc39c0b0a8e460f898a5ee12dd91fe914ad0ca6209f9e3a79bccb0b4f82d7767e3c3e74d88532300a2a7f417eaf5fef44f5f4db47629ca20fa1168475be8633ec388e29a5617b440749525a2c1f5fc85bd7fd8b4e0c45b7488ce", 0xee, 0xfffffffffffffffa)
keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r2}, &(0x7f00000007c0)=""/173, 0xad, &(0x7f0000000900)={&(0x7f0000000880)={'sha256-arm64-neon\x00'}, &(0x7f00000008c0)="7a522fc87b5e8c1cd770598a3b0f3861e87fb7ff9cff27e4fed9ba0779f5577e6cfea5d730c7", 0x26})
r3 = creat(0x0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/checkreqprot\x00', 0x2, 0x0)
ptrace(0x421f, r4)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r6 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="0ed6399b10f69b980e05cf809efbf76c34353a09c39007538c2cf4e36764d127f6cbd222fa6e9704bc1660c7d23d341b8ba98b3956a8986cb5687eaff0e0580c779628f590b22a628eba66e25cd3f8ea848e37fb922ab9cc406b506b7746381fff19ea13aa9b2e04b73d52a93de5b521be7659d49605daa977cedee21e7578ff702713f56f36f915a419ba919777eaf2431bc1dc572c4c84fefaae3f745782e5ced850ec39727b852c5b77c0a88edff577f4a4d508875015001f3e6e41df5ac8497eebc2db417096f895c9e10377e59044fda372efe19213bd87b892edcf1e0ade831b7e97", 0xe5, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$unlink(0x9, r6, r7)

08:56:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:06 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  201.083457] binder: 5756:5763 got transaction with invalid offset (0, min 0 max 0) or object.
[  201.085030] binder: BINDER_SET_CONTEXT_MGR already set
[  201.101476] binder: BINDER_SET_CONTEXT_MGR already set
[  201.103965] binder: 5756:5763 transaction failed 29201/-22, size 0-8 line 3348
[  201.106992] binder: 5760:5764 ioctl 40046207 0 returned -16
[  201.120436] binder_alloc: 5756: binder_alloc_buf size 98784247840 failed, no address space
08:56:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 5:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x20000, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
creat(0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  201.125672] binder: undelivered TRANSACTION_ERROR: 29201
[  201.129165] binder: 5759:5765 ioctl 40046207 0 returned -16
[  201.141904] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  201.160909] binder: 5757:5766 transaction failed 29201/-28, size 24-98784247816 line 3254
[  201.166417] binder_alloc: 5756: binder_alloc_buf, no vma
08:56:07 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  201.180420] binder: 5759:5773 transaction failed 29189/-22, size 0-8 line 3117
[  201.192749] binder: 5760:5771 transaction failed 29189/-3, size 0-8 line 3254
[  201.200271] binder: 5757:5780 transaction failed 29189/-22, size 24-98784247816 line 3117
[  201.201658] binder: 5778:5782 transaction failed 29189/-22, size 0-8 line 3117
[  201.220685] binder: undelivered TRANSACTION_ERROR: 29189
08:56:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:07 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 5:
r0 = creat(0x0, 0x1)
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000380)=""/182)
r2 = fcntl$getown(r1, 0x9)
ptrace$getsig(0x4202, r2, 0x9, &(0x7f0000000000))
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180))
fsetxattr$security_ima(r0, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000280)=@md5={0x1, "34186ecbe16fcc1df2f85f00379856a2"}, 0x11, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a62760000000036a5f3cd1d9a15233ba56a0bb7cede6b87ab3d1e6604b40e88b309c806fa47f9160e63d15c6b55f963e313f0d41c489f93188466411b89f9315425c15eb73281938c9f3a37f2a902d6af72749098f5403fbf2bdee0afd32d251480edac3872582de20274bdf214ca75cd3abaf9479c27b5a8b79aaf8d39bfc5c60628badf369c0600000028ee4e8adf7f09031b37e85adf30134bd2515d5b1025ee10f2cbd6fea8eb0d716ce9ca0177a5485915632dd8", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10)

[  201.236299] binder: undelivered TRANSACTION_ERROR: 29189
[  201.262486] binder: undelivered TRANSACTION_ERROR: 29189
[  201.264961] binder: 5788:5789 got transaction with invalid offset (0, min 0 max 0) or object.
[  201.293284] binder: 5786:5791 transaction failed 29189/-22, size 24-8 line 3117
[  201.319689] binder: 5788:5789 transaction failed 29201/-22, size 0-8 line 3348
[  201.326101] binder: 5786:5802 transaction failed 29189/-22, size 24-8 line 3117
[  201.341455] binder: release 5794:5798 transaction 587 out, still active
[  201.356977] binder: release 5794:5798 transaction 584 out, still active
[  201.375275] binder: undelivered TRANSACTION_ERROR: 29201
[  201.386608] binder: send failed reply for transaction 584, target dead
[  201.398031] binder: send failed reply for transaction 587, target dead
08:56:07 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xffffffffffffffa3, 0x0, 0x0})

08:56:07 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x80, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 1:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffff0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1ffc00000000, 0x9, 0x8, 0x7})
arch_prctl$ARCH_SET_GS(0x1001, 0xf9)

08:56:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:07 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[  201.725264] binder: 5888:5892 transaction failed 29189/-22, size 24-8 line 3117
[  201.726720] binder: 5889:5893 got transaction with invalid offset (0, min 0 max 24) or object.
[  201.743901] binder: 5886:5895 got transaction with invalid offset (0, min 0 max 0) or object.
[  201.751053] binder: release 5888:5898 transaction 597 out, still active
[  201.753560] binder: 5886:5895 transaction failed 29201/-22, size 0-8 line 3348
[  201.763948] binder: release 5885:5894 transaction 593 out, still active
08:56:07 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
setsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000380)="a8c812a76886228e51409d60fea9fdc18db9ec1f98d2600010ad581680670906b010f95633bd96db628cf1ca15be8657950c552dbe735175afc7e0875db190f7ee2e", 0x42)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0xf8, r1, 0x10a, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9954}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbe2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x701}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd60d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000001c0), &(0x7f0000000280)=0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  201.766951] binder: 5889:5893 transaction failed 29201/-22, size 24-8 line 3348
[  201.789903] binder: release 5885:5894 transaction 600 out, still active
[  201.811610] binder: undelivered TRANSACTION_ERROR: 29201
08:56:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:07 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800e200000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

[  201.826838] binder: send failed reply for transaction 593, target dead
[  201.862974] binder: 5904:5913 transaction failed 29189/-22, size 24-8 line 3117
[  201.868419] binder: send failed reply for transaction 597, target dead
08:56:07 executing program 5:
r0 = creat(0x0, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={[], [], @dev}, <r1=>0x0}, &(0x7f0000000180)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x2, 0x6, 0x8, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc}, @exit, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x3, 0xb1, &(0x7f0000000080)=""/177, 0x41f00, 0x1, [], r1, 0x9}, 0x48)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  201.878268] binder: 5912:5917 got transaction with invalid offset (0, min 0 max 24) or object.
[  201.896497] binder: send failed reply for transaction 600, target dead
[  201.896527] binder: 5909:5915 got transaction with invalid offset (0, min 0 max 0) or object.
[  201.915123] binder: 5912:5917 transaction failed 29201/-22, size 24-8 line 3348
08:56:07 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  201.927708] binder: 5909:5915 transaction failed 29201/-22, size 0-8 line 3348
[  201.945878] binder: undelivered TRANSACTION_ERROR: 29201
[  201.967957] binder: send failed reply for transaction 606 to 5911:5916
08:56:07 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

08:56:07 executing program 1:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x8, 0x1})
unlink(0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000680)=""/219)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x8, 0x6, 0x9, 0x6, 0xfffffffffffffffe, 0x1ff})

[  201.990459] binder: send failed reply for transaction 610 to 5904:5927
[  202.001181] binder: send failed reply for transaction 613 to 5911:5916
[  202.012433] binder: 5936:5938 got transaction with invalid offset (0, min 0 max 0) or object.
[  202.016830] binder: undelivered TRANSACTION_ERROR: 29189
08:56:07 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0xe70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x84, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x77e7a6ae)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x480, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000002c0)=0x1e5)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000540)={0x0, {{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x20}, 0x800}}, {{0xa, 0x4e21, 0x90, @local, 0x8000}}}, 0x108)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x8001f, 0xffffffffffffffff, 0x10000000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xbc, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)

08:56:07 executing program 5:
r0 = creat(0x0, 0x0)
sendto(r0, &(0x7f00000000c0), 0x0, 0x8040, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)

08:56:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  202.040485] binder: undelivered TRANSACTION_ERROR: 29189
[  202.056363] binder: BINDER_SET_CONTEXT_MGR already set
[  202.066383] binder: 5935:5944 ioctl 40046207 0 returned -16
[  202.074505] binder: undelivered TRANSACTION_ERROR: 29189
08:56:08 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@loopback, <r2=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@deltclass={0x5b0, 0x29, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, r2, {0xffff}, {0xfff2}, {0x11, 0x2}}, [@TCA_RATE={0x8, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x4, 0x0, 0xf6, 0x800, 0x6b, 0x8, 0x0, 0x80000000, 0xfffffffffffff03f, 0x8, 0x1000, 0x8d70, 0x20, 0x80000001, 0xffff, 0xfffffffffffffffa, 0xffffffffffff8000, 0x400, 0x7fffffff, 0xe431, 0x2, 0x2, 0x8000, 0x2, 0x9, 0x7fffffff, 0x4, 0x2, 0x0, 0xffffffffffffff80, 0x4, 0x9, 0x6fe, 0x3, 0x3687, 0x9, 0x80000000, 0x8, 0x1000, 0x332aeb0, 0x4c, 0x1, 0x7624, 0xd083, 0x9, 0x3f, 0x10a, 0x7fff, 0x7, 0x4, 0x96c, 0x100, 0x370c, 0x4, 0xffffffff, 0x6, 0x3, 0x8, 0x1, 0x8000, 0x6, 0x5, 0x2, 0xfff, 0x5, 0x73, 0x6, 0x80000001, 0x0, 0x2, 0x0, 0x9f, 0x1000, 0x0, 0x9, 0xe3, 0xf66, 0x1, 0x7f, 0x2, 0x1, 0xffff, 0x7, 0x8, 0x3, 0xf37, 0xa1, 0x4, 0x4, 0x81, 0x0, 0x80, 0x1, 0x8fb, 0x6, 0xa4, 0x5, 0x2, 0x8d7, 0x3, 0x1, 0xfffffffffffff800, 0xa334, 0x7, 0x6, 0xfffffffffffffffd, 0x8, 0x1800000000000000, 0xfffffffffffffffc, 0x2, 0x9, 0x101, 0x0, 0x1ff, 0x602b, 0x1, 0x4, 0x81, 0xe7, 0x5, 0x5, 0x1f, 0x40, 0x482, 0x7, 0x3513, 0x5, 0x8000, 0x7ff, 0x2, 0x4, 0x0, 0x4, 0x4, 0x260a, 0x4, 0x2, 0x1000, 0x7, 0xec7, 0x3, 0x4, 0x7fff, 0x2, 0xff, 0xffff, 0x20, 0x1, 0x80000000, 0x0, 0x3ff, 0x1, 0x5, 0x6, 0x7fff, 0xffffffffffff467b, 0x40, 0x3ff, 0x40, 0x8, 0xfffffffffffffffe, 0x100000000, 0x4, 0xfff, 0x81, 0xc0, 0x4a00, 0xfcf, 0x100, 0x1, 0x80, 0x40, 0xc815, 0x3ff, 0x1, 0x800, 0x7, 0x2, 0x5, 0xaa, 0x9cf, 0x80000000, 0x3679, 0x3, 0x7, 0x2, 0xffffffffffff65be, 0x8001, 0x1b14000000, 0x0, 0x8, 0x6, 0x8, 0x5, 0x8000, 0x6d, 0xfff, 0x200, 0x2, 0x8, 0x1, 0x100000001, 0x6b6b, 0x1, 0x9, 0x9, 0xff, 0x100000000, 0x36, 0x1, 0x8001, 0x7ff, 0x7, 0xb94c, 0xfa83, 0x9, 0xfe0c, 0x80, 0xec87, 0x8, 0x9, 0x1, 0x2, 0x4, 0x7ff, 0x5, 0x6, 0x8, 0x5, 0x7, 0x1, 0x8, 0xff, 0x100, 0x1, 0xfff, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x1, 0x8, 0x8, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0xbd, 0x7, 0x100000001, 0x8b2, 0x2, 0x6, 0xfffffffffffffff8]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @TCA_RATE={0x8, 0x5, {0x6, 0x7fff}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xfffffffffffffd87, 0x4, 0xcc00000000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8001, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7ff, 0x80000000, 0x3ca}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x7fffffff, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x200, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x4, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffffffffffff, 0x0, 0x100000001}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x80000001, 0x20}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5ba, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x101, 0x8001, 0x12383f6}}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x40}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}, @TCA_RATE={0x8, 0x5, {0x10000, 0xfff}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfa71}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000180))
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x7, 0x6, 0x7, 0xc43b, "f1bd2af47b71e17cfc4f3713c4a82a517225de6bcddc4b946859c91725bc208c"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  202.089115] binder: 5935:5939 got transaction with invalid offset (0, min 0 max 24) or object.
[  202.093137] binder: release 5946:5952 transaction 625 out, still active
[  202.100608] binder: 5936:5938 transaction failed 29201/-22, size 0-8 line 3348
[  202.114592] binder: 5935:5939 transaction failed 29201/-22, size 24-8 line 3348
[  202.119279] binder: release 5946:5950 transaction 619 out, still active
08:56:08 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)

08:56:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:08 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
delete_module(&(0x7f00000001c0)='securitycpuseteth1)+keyring\x00', 0x800)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'caif0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@deltfilter={0x2c, 0x2d, 0x21, 0x70bd2c, 0x25dfdbfd, {0x0, r1, {0xfff3, 0xffff}, {0xd, 0x1}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xac5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46fcfa6bbf1cd036}, 0x1)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xff3)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78af91e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xb0}}, 0x4008000)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000b14b"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7ff, 0x800)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:08 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000006d1e7a84285c3f20b3f8c572ea6f12d57bd548bae5355c308057a870b2553ad50fe05b6cb5f0972e9b64d86516160409bd7604805b911327dc2bdd89ae7954a32e80a748538a28366cba", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

[  202.146926] binder: undelivered TRANSACTION_ERROR: 29201
[  202.161925] binder: release 5960:5964 transaction 634 out, still active
[  202.182361] binder: release 5960:5962 transaction 631 out, still active
[  202.228555] binder: send failed reply for transaction 619, target dead
[  202.257480] binder: send failed reply for transaction 622 to 5947:5951
[  202.265315] binder_alloc: 5974: binder_alloc_buf, no vma
[  202.266874] binder: BINDER_SET_CONTEXT_MGR already set
08:56:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:08 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000100000000"]], 0x0, 0x0, 0x0})

[  202.282281] binder: 5973:5981 ioctl 40046207 0 returned -16
[  202.288233] binder: send failed reply for transaction 625, target dead
[  202.292036] binder_alloc: 5974: binder_alloc_buf, no vma
[  202.300484] binder: send failed reply for transaction 628 to 5947:5951
[  202.301104] binder: 5974:5979 transaction failed 29189/-3, size 0-8 line 3254
[  202.313495] binder: send failed reply for transaction 631, target dead
[  202.315586] binder_alloc: 5974: binder_alloc_buf, no vma
08:56:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  202.328395] binder: 5969:5975 transaction failed 29189/-3, size 24-8 line 3254
[  202.332037] binder: send failed reply for transaction 634, target dead
[  202.336019] binder: 5972:5980 transaction failed 29189/-3, size 24-8 line 3254
[  202.346563] binder_alloc: 5974: binder_alloc_buf, no vma
[  202.363782] binder: 5973:5981 transaction failed 29189/-3, size 24-0 line 3254
[  202.369982] binder_alloc: 5974: binder_alloc_buf, no vma
08:56:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8562ac2a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/87)

08:56:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
fgetxattr(r0, &(0x7f0000000000)=@random={'system.', '-nodevsystem\x00'}, &(0x7f00000000c0)=""/88, 0x58)

[  202.377736] binder: undelivered TRANSACTION_ERROR: 29189
[  202.378149] binder: 5969:5990 transaction failed 29189/-3, size 24-8 line 3254
[  202.409911] binder: undelivered TRANSACTION_ERROR: 29189
08:56:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  202.431544] binder_alloc: 5995: binder_alloc_buf, no vma
[  202.443580] binder: undelivered TRANSACTION_ERROR: 29189
[  202.458390] binder: undelivered TRANSACTION_ERROR: 29189
[  202.462207] binder: 5995:5999 transaction failed 29189/-3, size 0-8 line 3254
[  202.464077] binder_alloc: 5995: binder_alloc_buf, no vma
08:56:08 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:08 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:08 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@loopback, <r2=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@deltclass={0x5b0, 0x29, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, r2, {0xffff}, {0xfff2}, {0x11, 0x2}}, [@TCA_RATE={0x8, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x4, 0x0, 0xf6, 0x800, 0x6b, 0x8, 0x0, 0x80000000, 0xfffffffffffff03f, 0x8, 0x1000, 0x8d70, 0x20, 0x80000001, 0xffff, 0xfffffffffffffffa, 0xffffffffffff8000, 0x400, 0x7fffffff, 0xe431, 0x2, 0x2, 0x8000, 0x2, 0x9, 0x7fffffff, 0x4, 0x2, 0x0, 0xffffffffffffff80, 0x4, 0x9, 0x6fe, 0x3, 0x3687, 0x9, 0x80000000, 0x8, 0x1000, 0x332aeb0, 0x4c, 0x1, 0x7624, 0xd083, 0x9, 0x3f, 0x10a, 0x7fff, 0x7, 0x4, 0x96c, 0x100, 0x370c, 0x4, 0xffffffff, 0x6, 0x3, 0x8, 0x1, 0x8000, 0x6, 0x5, 0x2, 0xfff, 0x5, 0x73, 0x6, 0x80000001, 0x0, 0x2, 0x0, 0x9f, 0x1000, 0x0, 0x9, 0xe3, 0xf66, 0x1, 0x7f, 0x2, 0x1, 0xffff, 0x7, 0x8, 0x3, 0xf37, 0xa1, 0x4, 0x4, 0x81, 0x0, 0x80, 0x1, 0x8fb, 0x6, 0xa4, 0x5, 0x2, 0x8d7, 0x3, 0x1, 0xfffffffffffff800, 0xa334, 0x7, 0x6, 0xfffffffffffffffd, 0x8, 0x1800000000000000, 0xfffffffffffffffc, 0x2, 0x9, 0x101, 0x0, 0x1ff, 0x602b, 0x1, 0x4, 0x81, 0xe7, 0x5, 0x5, 0x1f, 0x40, 0x482, 0x7, 0x3513, 0x5, 0x8000, 0x7ff, 0x2, 0x4, 0x0, 0x4, 0x4, 0x260a, 0x4, 0x2, 0x1000, 0x7, 0xec7, 0x3, 0x4, 0x7fff, 0x2, 0xff, 0xffff, 0x20, 0x1, 0x80000000, 0x0, 0x3ff, 0x1, 0x5, 0x6, 0x7fff, 0xffffffffffff467b, 0x40, 0x3ff, 0x40, 0x8, 0xfffffffffffffffe, 0x100000000, 0x4, 0xfff, 0x81, 0xc0, 0x4a00, 0xfcf, 0x100, 0x1, 0x80, 0x40, 0xc815, 0x3ff, 0x1, 0x800, 0x7, 0x2, 0x5, 0xaa, 0x9cf, 0x80000000, 0x3679, 0x3, 0x7, 0x2, 0xffffffffffff65be, 0x8001, 0x1b14000000, 0x0, 0x8, 0x6, 0x8, 0x5, 0x8000, 0x6d, 0xfff, 0x200, 0x2, 0x8, 0x1, 0x100000001, 0x6b6b, 0x1, 0x9, 0x9, 0xff, 0x100000000, 0x36, 0x1, 0x8001, 0x7ff, 0x7, 0xb94c, 0xfa83, 0x9, 0xfe0c, 0x80, 0xec87, 0x8, 0x9, 0x1, 0x2, 0x4, 0x7ff, 0x5, 0x6, 0x8, 0x5, 0x7, 0x1, 0x8, 0xff, 0x100, 0x1, 0xfff, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x1, 0x8, 0x8, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0xbd, 0x7, 0x100000001, 0x8b2, 0x2, 0x6, 0xfffffffffffffff8]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @TCA_RATE={0x8, 0x5, {0x6, 0x7fff}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xfffffffffffffd87, 0x4, 0xcc00000000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8001, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7ff, 0x80000000, 0x3ca}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x7fffffff, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x200, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x4, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffffffffffff, 0x0, 0x100000001}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x80000001, 0x20}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5ba, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x101, 0x8001, 0x12383f6}}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x40}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}, @TCA_RATE={0x8, 0x5, {0x10000, 0xfff}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfa71}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000180))
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x7, 0x6, 0x7, 0xc43b, "f1bd2af47b71e17cfc4f3713c4a82a517225de6bcddc4b946859c91725bc208c"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  202.487940] binder: 6000:6004 transaction failed 29189/-3, size 24-8 line 3254
[  202.503705] binder: undelivered TRANSACTION_ERROR: 29189
08:56:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  202.533770] binder: release 6007:6014 transaction 647 out, still active
[  202.544965] binder: 6011:6018 got transaction with invalid offset (0, min 0 max 24) or object.
[  202.561416] binder: BINDER_SET_CONTEXT_MGR already set
[  202.563871] binder: undelivered TRANSACTION_COMPLETE
08:56:08 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@loopback, <r2=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@deltclass={0x5b0, 0x29, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, r2, {0xffff}, {0xfff2}, {0x11, 0x2}}, [@TCA_RATE={0x8, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x4, 0x0, 0xf6, 0x800, 0x6b, 0x8, 0x0, 0x80000000, 0xfffffffffffff03f, 0x8, 0x1000, 0x8d70, 0x20, 0x80000001, 0xffff, 0xfffffffffffffffa, 0xffffffffffff8000, 0x400, 0x7fffffff, 0xe431, 0x2, 0x2, 0x8000, 0x2, 0x9, 0x7fffffff, 0x4, 0x2, 0x0, 0xffffffffffffff80, 0x4, 0x9, 0x6fe, 0x3, 0x3687, 0x9, 0x80000000, 0x8, 0x1000, 0x332aeb0, 0x4c, 0x1, 0x7624, 0xd083, 0x9, 0x3f, 0x10a, 0x7fff, 0x7, 0x4, 0x96c, 0x100, 0x370c, 0x4, 0xffffffff, 0x6, 0x3, 0x8, 0x1, 0x8000, 0x6, 0x5, 0x2, 0xfff, 0x5, 0x73, 0x6, 0x80000001, 0x0, 0x2, 0x0, 0x9f, 0x1000, 0x0, 0x9, 0xe3, 0xf66, 0x1, 0x7f, 0x2, 0x1, 0xffff, 0x7, 0x8, 0x3, 0xf37, 0xa1, 0x4, 0x4, 0x81, 0x0, 0x80, 0x1, 0x8fb, 0x6, 0xa4, 0x5, 0x2, 0x8d7, 0x3, 0x1, 0xfffffffffffff800, 0xa334, 0x7, 0x6, 0xfffffffffffffffd, 0x8, 0x1800000000000000, 0xfffffffffffffffc, 0x2, 0x9, 0x101, 0x0, 0x1ff, 0x602b, 0x1, 0x4, 0x81, 0xe7, 0x5, 0x5, 0x1f, 0x40, 0x482, 0x7, 0x3513, 0x5, 0x8000, 0x7ff, 0x2, 0x4, 0x0, 0x4, 0x4, 0x260a, 0x4, 0x2, 0x1000, 0x7, 0xec7, 0x3, 0x4, 0x7fff, 0x2, 0xff, 0xffff, 0x20, 0x1, 0x80000000, 0x0, 0x3ff, 0x1, 0x5, 0x6, 0x7fff, 0xffffffffffff467b, 0x40, 0x3ff, 0x40, 0x8, 0xfffffffffffffffe, 0x100000000, 0x4, 0xfff, 0x81, 0xc0, 0x4a00, 0xfcf, 0x100, 0x1, 0x80, 0x40, 0xc815, 0x3ff, 0x1, 0x800, 0x7, 0x2, 0x5, 0xaa, 0x9cf, 0x80000000, 0x3679, 0x3, 0x7, 0x2, 0xffffffffffff65be, 0x8001, 0x1b14000000, 0x0, 0x8, 0x6, 0x8, 0x5, 0x8000, 0x6d, 0xfff, 0x200, 0x2, 0x8, 0x1, 0x100000001, 0x6b6b, 0x1, 0x9, 0x9, 0xff, 0x100000000, 0x36, 0x1, 0x8001, 0x7ff, 0x7, 0xb94c, 0xfa83, 0x9, 0xfe0c, 0x80, 0xec87, 0x8, 0x9, 0x1, 0x2, 0x4, 0x7ff, 0x5, 0x6, 0x8, 0x5, 0x7, 0x1, 0x8, 0xff, 0x100, 0x1, 0xfff, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x1, 0x8, 0x8, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0xbd, 0x7, 0x100000001, 0x8b2, 0x2, 0x6, 0xfffffffffffffff8]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @TCA_RATE={0x8, 0x5, {0x6, 0x7fff}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xfffffffffffffd87, 0x4, 0xcc00000000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8001, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7ff, 0x80000000, 0x3ca}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x7fffffff, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x200, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x4, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffffffffffff, 0x0, 0x100000001}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x80000001, 0x20}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5ba, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x101, 0x8001, 0x12383f6}}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x40}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}, @TCA_RATE={0x8, 0x5, {0x10000, 0xfff}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfa71}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000180))
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x7, 0x6, 0x7, 0xc43b, "f1bd2af47b71e17cfc4f3713c4a82a517225de6bcddc4b946859c91725bc208c"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xffffffffffffffff)
fstat(r0, &(0x7f0000000100))
r2 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x5, 0x10010, r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101000, 0x80)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000003c0))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={r2})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x19)
pwrite64(r0, &(0x7f0000000000)="7258b6b488eda600637ab0f78486889396236ed7b62bc86b4ec8767a050a45a710851d5b", 0x24, 0x0)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0)
open(&(0x7f00000002c0)='./file0\x00', 0x200000, 0x10)
ioctl$KDSETLED(r4, 0x4b32, 0x1000000000000001)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="852a627317b4a64bc55ae923d9702800000008", @ANYRES64=0x0, @ANYBLOB="00000000000000ed"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="18009100"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  202.582888] binder: 6015:6019 ioctl 40046207 0 returned -16
[  202.603159] binder: send failed reply for transaction 647, target dead
[  202.610998] binder: 6011:6018 transaction failed 29201/-22, size 24-8 line 3348
[  202.619397] binder: 6015:6027 got transaction with invalid offset (0, min 0 max 0) or object.
08:56:08 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@loopback, <r2=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@deltclass={0x5b0, 0x29, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, r2, {0xffff}, {0xfff2}, {0x11, 0x2}}, [@TCA_RATE={0x8, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x4, 0x0, 0xf6, 0x800, 0x6b, 0x8, 0x0, 0x80000000, 0xfffffffffffff03f, 0x8, 0x1000, 0x8d70, 0x20, 0x80000001, 0xffff, 0xfffffffffffffffa, 0xffffffffffff8000, 0x400, 0x7fffffff, 0xe431, 0x2, 0x2, 0x8000, 0x2, 0x9, 0x7fffffff, 0x4, 0x2, 0x0, 0xffffffffffffff80, 0x4, 0x9, 0x6fe, 0x3, 0x3687, 0x9, 0x80000000, 0x8, 0x1000, 0x332aeb0, 0x4c, 0x1, 0x7624, 0xd083, 0x9, 0x3f, 0x10a, 0x7fff, 0x7, 0x4, 0x96c, 0x100, 0x370c, 0x4, 0xffffffff, 0x6, 0x3, 0x8, 0x1, 0x8000, 0x6, 0x5, 0x2, 0xfff, 0x5, 0x73, 0x6, 0x80000001, 0x0, 0x2, 0x0, 0x9f, 0x1000, 0x0, 0x9, 0xe3, 0xf66, 0x1, 0x7f, 0x2, 0x1, 0xffff, 0x7, 0x8, 0x3, 0xf37, 0xa1, 0x4, 0x4, 0x81, 0x0, 0x80, 0x1, 0x8fb, 0x6, 0xa4, 0x5, 0x2, 0x8d7, 0x3, 0x1, 0xfffffffffffff800, 0xa334, 0x7, 0x6, 0xfffffffffffffffd, 0x8, 0x1800000000000000, 0xfffffffffffffffc, 0x2, 0x9, 0x101, 0x0, 0x1ff, 0x602b, 0x1, 0x4, 0x81, 0xe7, 0x5, 0x5, 0x1f, 0x40, 0x482, 0x7, 0x3513, 0x5, 0x8000, 0x7ff, 0x2, 0x4, 0x0, 0x4, 0x4, 0x260a, 0x4, 0x2, 0x1000, 0x7, 0xec7, 0x3, 0x4, 0x7fff, 0x2, 0xff, 0xffff, 0x20, 0x1, 0x80000000, 0x0, 0x3ff, 0x1, 0x5, 0x6, 0x7fff, 0xffffffffffff467b, 0x40, 0x3ff, 0x40, 0x8, 0xfffffffffffffffe, 0x100000000, 0x4, 0xfff, 0x81, 0xc0, 0x4a00, 0xfcf, 0x100, 0x1, 0x80, 0x40, 0xc815, 0x3ff, 0x1, 0x800, 0x7, 0x2, 0x5, 0xaa, 0x9cf, 0x80000000, 0x3679, 0x3, 0x7, 0x2, 0xffffffffffff65be, 0x8001, 0x1b14000000, 0x0, 0x8, 0x6, 0x8, 0x5, 0x8000, 0x6d, 0xfff, 0x200, 0x2, 0x8, 0x1, 0x100000001, 0x6b6b, 0x1, 0x9, 0x9, 0xff, 0x100000000, 0x36, 0x1, 0x8001, 0x7ff, 0x7, 0xb94c, 0xfa83, 0x9, 0xfe0c, 0x80, 0xec87, 0x8, 0x9, 0x1, 0x2, 0x4, 0x7ff, 0x5, 0x6, 0x8, 0x5, 0x7, 0x1, 0x8, 0xff, 0x100, 0x1, 0xfff, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x1, 0x8, 0x8, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0xbd, 0x7, 0x100000001, 0x8b2, 0x2, 0x6, 0xfffffffffffffff8]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @TCA_RATE={0x8, 0x5, {0x6, 0x7fff}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xfffffffffffffd87, 0x4, 0xcc00000000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8001, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7ff, 0x80000000, 0x3ca}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x7fffffff, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x200, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x4, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffffffffffff, 0x0, 0x100000001}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x80000001, 0x20}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5ba, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x101, 0x8001, 0x12383f6}}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x40}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}, @TCA_RATE={0x8, 0x5, {0x10000, 0xfff}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfa71}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000180))
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x7, 0x6, 0x7, 0xc43b, "f1bd2af47b71e17cfc4f3713c4a82a517225de6bcddc4b946859c91725bc208c"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 5:
r0 = creat(0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffeea, 0x0, &(0x7f00000001c0), 0x744f37e96097ca24, 0x0, 0x0})

[  202.626832] binder: send failed reply for transaction 649 to 6000:6009
[  202.641339] binder: 6015:6027 transaction failed 29201/-22, size 0-8 line 3348
[  202.647995] binder: undelivered TRANSACTION_ERROR: 29189
[  202.654250] binder: 6011:6033 got transaction with invalid offset (0, min 0 max 24) or object.
[  202.663932] binder: 6011:6033 transaction failed 29201/-22, size 24-8 line 3348
08:56:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:08 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/binder#\x00', r0}, 0x10)

08:56:08 executing program 3:
getgroups(0x2, &(0x7f00000001c0)=[0xffffffffffffffff, <r0=>0xee01])
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0xfffffffffffffe77, 0xffffffffffffffff)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3)
setresgid(r0, 0x0, 0x0)
setregid(0x0, 0x0)

08:56:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff00000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
renameat(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00')
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a6273040000003861c7092ccdba1bf9433890188146f1e43d0e16d4b3f210f2795a5d84aa93511ee57d96935ea47c2ec3ba11c446c5cb7c083cee3ca46fc999a398b3", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32], 0xffffffb6, 0x0, &(0x7f00000001c0)})

08:56:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x130, 0x70bd2a, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
getpeername$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=<r3=>0x0)
sched_setattr(r3, &(0x7f0000000280)={0x30, 0x2, 0x0, 0x9, 0x3, 0x6, 0x6, 0x1000}, 0x0)

[  202.691543] binder: send failed reply for transaction 653 to 6023:6025
[  202.709069] binder: undelivered TRANSACTION_COMPLETE
[  202.717823] binder: undelivered TRANSACTION_ERROR: 29189
[  202.724056] binder: undelivered TRANSACTION_ERROR: 29201
[  202.762501] binder: release 6041:6044 transaction 657 out, still active
[  202.772043] binder: undelivered TRANSACTION_COMPLETE
[  202.795731] binder: 6051:6056 unknown command 12582915
[  202.796537] binder: 6049:6057 got transaction with invalid offset (0, min 0 max 0) or object.
08:56:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x286)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x3f, 0xfffffffffffffffe, 0x3}, 0xc)
sendto$inet(r0, &(0x7f0000000180)="4e9e1562147aab77cf5b1f5ac4bbddf3a1b17bfaae9d994913c869d8ee8f980aa5a5235655efc8422eedd5e7c53a51dffa6c4642e0e50f330037cb64b98eb991b2b33bcca6", 0x45, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x114}}], 0xaf7, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3090000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf25020000001000040001000000050000050800040005000000ae74159d4adf1150db5de09eb77f7e2636722d6150fe55575bfefd29bc4bbe8830290e63cdd14ed67ffdcd01ce"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)

[  202.808405] binder: 6051:6056 ioctl c0306201 20000440 returned -22
[  202.811347] binder: send failed reply for transaction 657, target dead
[  202.823611] binder: 6047:6059 transaction failed 29189/-22, size 24-8 line 3117
[  202.831347] binder: 6049:6057 transaction failed 29201/-22, size 0-8 line 3348
[  202.843870] binder: send failed reply for transaction 658 to 6047:6055
08:56:08 executing program 5:
creat(0x0, 0x101)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000d0000000010080000be614a886fd26c2200000000180000000000002308000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

08:56:08 executing program 1:
r0 = socket$inet(0x2, 0x806, 0x100000001)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x73fc537d09109ff9)
r2 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
io_setup(0x10000, &(0x7f00000001c0)=<r3=>0x0)
io_submit(r3, 0x5, &(0x7f00000016c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000280)="d276f4f2d08452baa3482b1bc54c05f3e53827251f2021bdaf32175498eccb6a861fe05c03c834f4cc1c9f8943d977aae25c56a3f7f916fad5a992166eba916e0e281703b697b2d4f6626312e15caa3b54b576e6d5fc238053f8d21c90e4b6f1c8cd", 0x62, 0x4, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x10001, r2, &(0x7f0000000480)="8452b2369d71f532359f52533dc3ed30467da4358f2c475f832d3ac7c20a06213a1ce7df1f2c7d7d20f558e5722082b7cde8746873a23db6aef4c8fcdc815208829bbe02b9cd883ae108a1b9b61bc4c652d51ff705224b616322cbb6261f10237dd6084514442ee05c7b215633525ce400cc1fa55222bff3992a213e0b186b86710e440b101dfbd9be3ce6a9437db37fb32c03b9933116d19f3b22e2ab7b2137cad666235de8f4b614a10fbf064ed88cf9e21cca9253c484b7f436b0f146a8eb8f8ee53d97726ec0c660acd596c41009ea21810a381bd0", 0xd7, 0x7, 0x0, 0x0, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000380)="a4f8ad5f46b79f88f6d13165a4baa0fdad07a56820dddba07a49bce35d23d6aa26f11e2dd0ac05bd6252787762b525cd7959a7d3ed127b5b79af8739d709b778d92c8e7b41aade184ad36b5ef89e25a76bb4e075bd9fb1bad6635e2dbf76d5367870a203bc564a3a0040", 0x6a, 0x9, 0x0, 0x0, r2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f00000005c0)="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", 0x1000, 0x1, 0x0, 0x3, r2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f0000001600)="4fbdf45cb6d22ab1feb439fcf88778f2f0aa5b209e6438ce3a4f50877da54b7bf67c3b2584a823c606b0fdee8de461b39b3031a44fdb226543bdb598a6e86ac056acb4b35af9086d5e3f51965bc59770593c96ee12fbd23d27d43a3cce171aaf1767d25d8532958a017f4397659f2fa09a8eaa0144822a44", 0x78, 0x5, 0x0, 0x1, r2}])
unlink(0x0)
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='\x00', 0x1, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180000000000000008000000000000006735b1f715c749697cb2109e09e048845772f5a8d1771c460efe25d33fe78f5fb6d387c20024399ec7f487fcb47244c0ca1cd84b75c076cc03953dbc44af5c142c60f8547b86ebd71b6dd9823f77021a62fb0ce29a61513d24cdb3dcb29f4aeecd1058f89f971d3b7d40fa5e30266cfb53eae5b60be0d791c7fbf9da3d0d3eb414b270c3cedb4b3ec68cdd7533f88332505dc3f5dcf5bcbca12c", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  202.861807] binder: undelivered TRANSACTION_ERROR: 29189
08:56:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  202.898806] binder: undelivered TRANSACTION_ERROR: 29201
[  202.905878] binder: 6051:6068 unknown command 12582917
[  202.912587] binder: 6051:6068 ioctl c0306201 20000440 returned -22
[  202.927461] binder: release 6063:6064 transaction 664 out, still active
[  202.934035] binder: 6074:6077 got transaction with invalid offset (0, min 0 max 0) or object.
08:56:08 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002840)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000002880)="5479731011362a6cd341e2977fc4bc0d5c366d2dcf08a75ec1071b0be841d4f20e9431a9146fb442735a076d14c4a1328554e95aff4653f5324ed2339f8f4533f5490efa7257ede672282ac6ca712e05df9ed4ae0514b779eeca0a6a60b302485557277f32ee5e02a5d0df45d2b0a244e83687b7e25027efc9c90df515538501c59c29682aebe81ee97566059ea1b1ab5b4df729b39095c16c0d958fdcdea23dcc267adb296b224f5553e2b9300b2d2838556885b45cd7e0cf6255503db48d17996c6e12f4587c2fff734a91655f", 0xce)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x420000, 0x10)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="1bb837b8352fb91814be606e289b82bd69b24a6c6ecdc34535a02d3c4c3fd19959539201764ba84afcf489b86b0c3b851c7be364ed48", 0x36)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 5:
r0 = creat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000080))
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\b'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
fcntl$getownex(r0, 0x10, &(0x7f00000000c0))
readahead(r1, 0x101, 0x3)

[  202.957156] binder: undelivered TRANSACTION_COMPLETE
[  202.964798] binder: BINDER_SET_CONTEXT_MGR already set
[  202.983490] binder: 6074:6077 transaction failed 29201/-22, size 0-8 line 3348
[  203.007648] binder: 6080:6084 ioctl 40046207 0 returned -16
[  203.007710] binder: send failed reply for transaction 664, target dead
[  203.016152] binder: 6080:6090 transaction failed 29189/-22, size 24-0 line 3117
[  203.020984] binder: 6071:6076 transaction failed 29189/-22, size 24-8 line 3117
[  203.040767] binder: 6086:6088 transaction failed 29189/-22, size 24-8 line 3117
08:56:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:08 executing program 5:
creat(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  203.053179] binder: undelivered TRANSACTION_ERROR: 29189
[  203.070289] binder: undelivered TRANSACTION_ERROR: 29201
[  203.088050] binder: 6086:6094 transaction failed 29189/-22, size 24-8 line 3117
08:56:09 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80000000010, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

[  203.105225] binder: 6096:6099 transaction failed 29189/-22, size 0-8 line 3117
[  203.121582] binder: 6071:6103 transaction failed 29189/-22, size 24-8 line 3117
[  203.133519] binder: release 6100:6104 transaction 673 out, still active
[  203.147886] binder: unexpected work type, 4, not freed
[  203.174015] binder: undelivered TRANSACTION_COMPLETE
[  203.196818] binder: send failed reply for transaction 673, target dead
[  203.204015] binder: 6108:6112 transaction failed 29189/-22, size 24-8 line 3117
[  203.230377] binder: undelivered TRANSACTION_ERROR: 29189
08:56:09 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
write$input_event(r1, &(0x7f0000000040)={{0x77359400}, 0x16, 0x7fff, 0x7fffffff}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="7365637572698479000000000000000000000000000001000000000000000000d70635ef0000000048030020280300000000bd444f5dde4658"], 0x1)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x2f)
r3 = getuid()
ioprio_set$uid(0x3, r3, 0x8000)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0))
ptrace$cont(0x1f, r2, 0x0, 0x0)

08:56:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:09 executing program 5:
mkdir(&(0x7f0000000380)='./file0\x00', 0xfffffffffffffffd)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
r1 = creat(0x0, 0x0)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/52)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0xffffff5f, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r3], 0x0, 0x0, 0x0})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}}}, &(0x7f00000001c0)=0xe8)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0)
lchown(&(0x7f0000000000)='./file0\x00', r4, r5)
write$selinux_validatetrans(r1, &(0x7f0000000440)={'system_u:object_r:update_modules_exec_t:s0', 0x20, 'system_u:object_r:dhcpd_exec_t:s0', 0x20, 0x3, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x87)

08:56:09 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(0x0, 0x0, 0x1, r0, 0x7ffffffffffffc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
prctl$PR_SET_SECUREBITS(0x1c, 0x8)

08:56:09 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = getpgid(0x0)
ptrace$pokeuser(0x6, r1, 0x100000001, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  203.268484] binder: release 6108:6117 transaction 681 out, still active
[  203.275507] binder: send failed reply for transaction 678 to 6110:6115
[  203.283274] binder: send failed reply for transaction 681, target dead
[  203.290499] binder: undelivered TRANSACTION_COMPLETE
[  203.295619] binder: undelivered TRANSACTION_ERROR: 29189
08:56:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

[  203.349326] binder_alloc: 6124: binder_alloc_buf failed to map pages in userspace, no vma
[  203.357168] binder: release 6126:6131 transaction 687 out, still active
[  203.371063] binder: unexpected work type, 4, not freed
[  203.381872] binder_alloc: 6126: binder_alloc_buf, no vma
[  203.387563] binder: 6125:6130 transaction failed 29189/-3, size 24-8 line 3254
08:56:09 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x78, 0x0, &(0x7f0000000080)=[@exit_looper, @register_looper, @dead_binder_done={0x40086310, 0x3}, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000040)=[0x78]}, 0x4}}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x0, 0x2}], 0x7e, 0x0, &(0x7f0000000100)="623c9d976e3972ecee3ead5a621810a4667e33fa98cbd3daa974654e4b19e7c069b17ce477bd9a1d6cef8794d5173bb8556cd3f882ee58eeddf62e74002cc7049bc77828c3867139e5dd91ac8088a290dd4bf96a84b8890324b5237f33ee699af51d114e16b0c696c8cdb8122bf93f146e799fa60b9cc876ca295a1509c9"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00f2caa9b60900000000f400000000"]], 0x0, 0x0, 0x0})

[  203.396427] binder: undelivered TRANSACTION_COMPLETE
[  203.407467] binder: BINDER_SET_CONTEXT_MGR already set
[  203.410724] binder: 6128:6133 transaction failed 29189/-3, size 24-8 line 3254
[  203.419388] binder: 6140:6142 ioctl 40046207 0 returned -16
[  203.426266] binder: send failed reply for transaction 687, target dead
[  203.441588] binder: 6128:6149 transaction failed 29189/-22, size 24-8 line 3117
08:56:09 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r2=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r2})

08:56:09 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfffffffffffffff9, 0x40, 0x2, 0x7, 0xb, 0x8, 0x4, 0x1, 0x7, 0x8b0, 0xfffffffffffff0a6, 0x9})

[  203.442029] binder: send failed reply for transaction 690 to 6125:6130
[  203.464464] binder: undelivered TRANSACTION_ERROR: 29189
[  203.486488] binder: send failed reply for transaction 696 to 6143:6146
08:56:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = getpgrp(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0))
sendmsg$unix(r4, &(0x7f0000001640)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, r6}, @cred={0x20}, @rights={0x20, 0x1, 0x1, [r5, r1, r2, 0xffffffffffffffff]}], 0x78, 0x40081}, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
io_setup(0x7e, &(0x7f0000000240))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0}, &(0x7f00000003c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'team0\x00', r7})
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
epoll_create1(0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f00000002c0)=""/64)
r10 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r10, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0xbe3c}]}, 0xc, 0x3)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000300000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="23e0bc090000000000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

[  203.499604] binder: send failed reply for transaction 699 to 6151:6153
[  203.512878] binder: send failed reply for transaction 702 to 6151:6155
[  203.519644] binder: undelivered TRANSACTION_ERROR: 29189
[  203.537157] binder: undelivered TRANSACTION_ERROR: 29189
[  203.550372] binder: undelivered TRANSACTION_ERROR: 29189
[  203.659575] binder: 6159:6167 got transaction with invalid offsets size, 3
[  203.666979] binder: 6159:6167 transaction failed 29201/-22, size 24-3 line 3308
[  203.752718] binder_alloc: binder_alloc_mmap_handler: 6159 20001000-20004000 already mapped failed -16
[  203.762477] binder: BINDER_SET_CONTEXT_MGR already set
[  203.767763] binder: 6159:6171 ioctl 40046207 0 returned -16
[  203.773747] binder_alloc: 6159: binder_alloc_buf, no vma
[  203.779328] binder: 6159:6167 transaction failed 29189/-3, size 24-3 line 3254
08:56:12 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r1=>0x0)
perf_event_open(0x0, r1, 0x3, 0xffffffffffffffff, 0x3)
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x5)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write(r0, &(0x7f0000000480)="04f37308d407e95b256dfce042428a3cc30e81b3bd2898dbb7d696542376aaef8a87b4fe991362bbd32ee2dc4452f79c3a4938e431c94274e85f0ac41f2adeac01fe6216ca4eb425a5cb2a8735481431abff8efad99c373a2d1318aa1e41a0b95fdc64c2a76c4f3bedcef482526fa6668ece1c8bf090ba51d7ca3c743c07784578be254b7c509b6e3a2a2fc7c46234548bbeb32e7fba6617a667b1218f8fa2b64c4487f529cc50e04458302224763eecdf2e861ada317e376930797c957dae13998ea0022d16eb5167aeb5660df656c97d9379be10191f9781ab7c346b61d4d09f7b2c658f7b88ff133c00b9336bcaafba3540cb239c222999c038e094b8f91ea9a4328db04700e88dc99972caa1bbbfdf9439a7fd1e16e3cd7c5be2526a6c5106353c86935cfd46e1cb8e0f43ed81154f3d89fd53f13be1eec28ce58215323c6feaeb7ccc6751fa573887fa8de838d3c1548363dc66781d4f91b34871aaaf1acf4cb13956279360eebea8da162bd630953d7fa28ecde72b6459f043d7a6525f979afb45c446f9400533a11c439e5cc9822d4b3de4e8bead6392a65fc637adc5baea1592fb069d0cc184c2ac8da7c142cdcf1b5aea11261d5d7b0355cc967a559c5ee392b8af25e4869537cf324c86410268f4883fde0158c0e92fe0007de0e2a588513ecb74a9675a85f1991a99003c12b19007586849898b88c0d5dbae83aa01694391c66e1f90771df986c6a0c66910cfe767375fe74a6b9da0365539598258cf4fd954848f8b3695147ad38b8a23c15e6781a1669f319f3b3df1bee7c07581285391edd3768b658be3ead634aa12ceca15de935af6d440d4d0d9e319283cc7355c586bc6c19d8b4b71f58bfbe7732850006f62ee024b368412cc51c11a61b7493b18b5f189ba5947363496ce438da9cf7e2d0e07bbe1a00ff7c047214b5dc7e544168b980d64788d1adca8db6958c548e5ef2e3241ca20da2ee1ed2e60201f3291c2c73a4d13eb52fd55c572fd0923b9ead4237300fcaec30973d7aa92ffff27b371d8da4d3c82efb0f44334d16ca058b6d0f9328b4fce0ba78129bd4f4d819aa6bad3a9498ee1bbaae54c199a63d888831dc344a689c1f1998e0475b45ff8b0d2157e23b14ff82003ad2cac02d715d28e60f2741b1136b3c97fdba75c299feec3f6fd2966b26ea0f5715c89967aaac1f3772d0ffd0f4c9d6b77a2d05253b70158c5259442849eda469b7b9fd908d100dd5a7681aa8f1ae62ec35ff84deea865d694cc5f35e316c49456bad2d66a9f41468f0af0d2777de62cb84ac80bb277944c4b9560011319270a85a980f40cb24b48207c03b65cf52cd68c8757f539a577813c16c1922f88c9b5450dc45ef65e9ed42090ae65b26ddb95d4fc17d294a31ffeae1a1cb4062f50e04c123474152c4b6498599788b1cf294e772cf0fa8c56b5ebb2d6963f4dd491b83528ebff1d1c9cf591ccfac6a609e410767bc76f37c1bc1a3bcde8292d1ef9c1cbdb8ab6b6c8ed3911f4807b71382801042b0d8ea86066115ad49cdb7597284de419dce46fda2ff51b5f47b2f13a2e76d01fe03398e4ee52b9e64da0752c45233218683963239f688f250ddeae213e119cd5d42131d820da31de050de0242e61024fe91c0e4c0fe678fa6c91d51f54b6533d7a475793f2d23463807c370360d002edf4dad97d8d73e0a58b3442e7ea01ed9fd1bdbb420fa4b4e73ea041a8672162886ecb1e89a5e7e32a190cc9b49b9506072825163f99b78a111a69bef9a3102ba340a47b63224c0cb5d6fe54162711286e5d913cfa7061ef3166fb013fe905f6529649c0d43ca519e517615f280373a563890c1f50ae5ebccc190eb1f8063ad6e878d092f0ab903eafcee5d8f0286c98766d89b5de7c5e12eb42bcfe61e81d4438fc792e0116360a8c60ebaa813ea976a26929650981eac9c5a8d594ace513c2eaba430c20670c15fe8cd76166c6d427a7ccc83114f5b4e7b2d65cd7ce25ec3d48d7ac37036681cca5f9164393eead3daaab12bbfc0f06e4a1601eff7514c513dcd4f5f218876a0043608fc9d56fd872d2404792dbd5529874e810d31d2e867c8d78da8ebc20691a3591cdbb28d62b815ad55c7383603ab34360fd238d48f24fd9de93c4578629c17be492e6a5255b5af4aff31c10af6ee26cb7ea187c20acbaa8636a44884391def3e7c2f12d15768c4e48cfef375678bcda7747e928dd48806ac27f6abd25ceef6b31cb7b8c8edb37edbb0c74b1ee59ab5b63d41428d1757fcceb82b6014214b7a974f38b27b0604a353388d0e4ecc90da1cbaec03c3974d262a1874601fe13b6c48b4fde78bd5b8f8959f105c83ba3dafe27b9f55a2892afb25d83901e4d07a9672e489400cf29174ad7800c9d14c05568816fae6be0d3c7198e1aedebf22b662b5351592eebe5e5f3106dd9e16b41504de4d5bc0ef8a2f1db0ca36b32446578a5539632112eca5b50afaab2af975147204271f2e98ad87a6a76e3a9836ad8341fd5351d78439b2fc9213526b72abb8c42f71b95477527494fce8970a9838f146ea1f9d1027d0e4c8c651fad532cf7781c94296b584f77fefa196759951e3aa3d6e741fb85bde350a88fd8bf0474afe009d4f0c41f9dba7f7792367096fefb0f8159b8ea3c39f9e3dc5e277c266332451da57532752ca7b3e07ff35d0c8a05ae25022ad6c3afded85c6ec1d7f460bbe0cfd33c48e5b393440859ebe2b0597a52a8e3ffaa1ec7c0081d3c13610c7c5ff3eb232caa7d1e136214c4068123d41f4db6542cf0ec1557753043f3246fd5bcf00f00e7fd3f41adcf9f371d8d40ed8040dd24463c82e32049bea43eb760e72b184f022b6558fe6b1333fde6ad193064f741378605e197c782257d32e0b98a4e79943ed4ab313e567704bf144eae222affedd1c0f00520e8fa8996616446fc1c04fc7e75170089f99bc466f3dbcdbc462c09e94f524183d0d2d4578deabacfd27d03d30bce44770dbd2e3c5430462d362bc49bbb95e97af8ae2e6aaf471f04e068c66b71340be9f3a14646a3afbfb741262ce096a347ecb8f5fbb06e2bb38546e0266cec53b30c30499bdbd87efdc34f26129b4fc9d7c0eb81ff15cd9dd10a04d5b67df8287b93468df49ff215a421340967deaf535add6849969d94ea6eece1c0186414682961e7b917b789f423838c807b5edf60ba9ad13729913ce5c9e4c77f67961aa0641493d3a742355c046790924698962c348215b6eab30984c2d986cd78b0e5f2e5b45ee111406b1dd3e4f079cde598029616234a877198f5b9ef7377e3c38ecfe9a712c4062c0293a8ab75c15793b08745cae44a4a6f18a3721f03676f7bdc39dd1afd3b48b80010559303f25239f08312dfa7d7de64620c5a01ba7822df31030b11c4477db7db59caaf184e0ac03d74b119357f0665f3f6dbb7305dba564beff2bfeab30f6209034aed291cc867687111975cd9d9749bdcf3aca358fa025f6e66913f63143685649ccd19862e6e683461747723ec1c1c1979d76652aedd112580019049c889faa175749b07c2433ad81808394328d88e7d54de635b54b8a7c4144edfd9901474ed3f4336706267413868251db00fbba342d9645b7bb67342134a48e4297af0352c59e1263c22a4a0d2073d2a8f240465dbf28fd5ff7ab4e3d74444e6c382a4ffd9e23a2f509b29ff10b30af1d06844e3637ad3c3c4c383f90885b1dd1747311c31d3d616459ef580bdd1a49d23b87a98b99aa30d973027e422c16957ac96f2b2112e8400a74ae3d03623f30b4ddedf1b2156e7b415cd7fd73dfdaab4fae6fa41c1b222e33a470aa88d72c391be0b9c4dc3d21c6b2cf0d336ace91e548a152da4e20a2ad767f4b69849e95f406dcdc37da5697d35e0f1a0a3731d5515be6a8fcbdcd1bafd93324580591139f78cf937b4ae26bb55c174af96ede44951d41f00578c40a40576f7a3817e85ffcfdfee5eb245f74318eded5b8fbcccafb3125001d148630d6dc25a66c79cf1b3927bc70fdba4183ba23fa0370dca33eff74146aef9885f7e10515e59149e72157b0f55bf8ac9bda9b997e7b6ca642547dd99129ea1e8cb0b660a5c5aaf2d8a9b68c8cb50b5df0b59a48ff583e765713086ae6424986b9e8b1dda7dc9297b39e5b4df1e2fe76c00a1fce46ad9b3badd36b81279e072c3cccba90ba97d071d08e2f5ff69fe9db4e0b68953b5234385a770feda770cada256d50fbe66e057488c90f633ef783affe3c4a3fa4725b9a45aada6be25a91d485581cc40a12f14558d53d51c235e86a7930118b7e97e347318fcec07ef023afe9b4fd81d28dc20a78540232a48bbdd4a38e3fd00785611e810c462e31674c34f1211c9475c568ff13043d2a02e6d1a4a1fc95f1c9f6b8b479e82fd5a04c1b05018b3426482db0f26d26d321f19d52b4e66c3da6409061d28ec51ef0c24c9acca0cf4191cff28ef338a43f8ed55b6e07b4c26871d7d9f6ef9766fc5e3b8017d0fc13296c6349655efa29bbfabb2c9ff8afb748b978e61a06ebf1fa836841d08caa630f2980d6ae967c4cf0621565d44ed9790906c8fa2868ccfe6f93c308630718bf6fb274835e0142a4594b6550fc64846636d3fe54a0318b1e33d8c25a1896984e46ceede185bdd9865fa859d40ca732f099799c0796d12ff414dbb17651f39ca773b60c2920ca736aabbf7a43dc60c1b077cc9f05e890ac6d9cb3858ed9de774104bf1b6119ffb47503230a794192ccc48f2bbe800caad4746013c30f94aeb051d5c926120c49c80960ef691b970d70c6d75b61419c9f36f2441521f70616cf26b39d1088b84a228bc31dd6bd70fa40d25e107778fe5bbe23d5549ef26ff4389b9e8e183443c5fad08ea8cf293a5964a637137fd416089de99dd0559ab515e090bc5eaf0a3ff12833b2ffdf60fe6c57360c8d94ed8ce0faea26819bff8450ff8fe9aedc73ed0112837aec58de6653ccb2f86f1ab309a5244b1f3f8dbed7b64d3633eeb090fc53cfd65c25bbb0d0d8a0b80c8d7c792d23913507774660f04973ed8154117c79676f4f441b7bab41afff053caf0840518b4183485320451e01de22ac5e2a948a7159abc0cbab193ec80ac170b921770b5faa8ee0f57d9c4dc6ead988893ebfc5557001c63259ab6a1deed1ed546119693dd986d9efdf9ccb80b27e58a9e9334c04e33924f8a0dfdbb9a50ef6bb2281a7495678b9f47522e2622b5d76d3e5e078016ffb5de83b60a711f0de8d6884d0e8bdbe2aa62ef4ea3e4bd498cc8f4130c6733f610b9f7db85f9b822e470cff00eccec64724753c6a2d9f3b98d7cc7023d0b5952a68fbdd0a07391357f1b178c35384681ed1a67c60af5276e61f5ba87011f3dee045da5c2db7876d95efacd4da97d845ca69c4678c3d7b4bbfd19d641b0f997081a72ced1aafd9c27cf45a4e49d54655cee31713deb26a5f6ec7b1325651a43f9adebdb41ca992681506aaa2dac6058f8d748325c3bfc71651805eaaa734d4e5fa273ac98a4370c774532480d580f54994ed87a8bbaef6b56287f97d81e3eca885365423bc0d9d412a3ae7bfc1c3f8727ffcba878aae430ab9be122c3c815bce69abb46db6b5af36aa892553e28b4c85c00f10e7d01f5773c6a7b38a912ab0c71f0a0f4a8be7af02bbf43dc0edcffd7573863d8683cf1ec245bb6785b75b0f4a89650b32bd646e6199b95f456e7f9ed97a7ef7fe4cfe3fc4b1e619f5cc895e54e6c790dfb6ba0408ae099f2fce88afed7cb0ab651143a82819f48eb704dbc00c08ba492555f894b", 0x1000)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000100))
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$int_out(r2, 0x0, &(0x7f0000000140))
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00@\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:12 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

08:56:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = getpgrp(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0))
sendmsg$unix(r4, &(0x7f0000001640)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, r6}, @cred={0x20}, @rights={0x20, 0x1, 0x1, [r5, r1, r2, 0xffffffffffffffff]}], 0x78, 0x40081}, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
io_setup(0x7e, &(0x7f0000000240))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0}, &(0x7f00000003c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'team0\x00', r7})
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
epoll_create1(0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f00000002c0)=""/64)
r10 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r10, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0xbe3c}]}, 0xc, 0x3)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000300000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="23e0bc090000000000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

08:56:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:12 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
write$P9_RLCREATE(r0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2002, 0x2001e, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$set_timeout(0xf, r2, 0xce2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
keyctl$set_timeout(0xf, r2, 0x5)

08:56:12 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  206.371930] binder: 6174:6178 transaction failed 29189/-22, size 24-8 line 3117
[  206.381426] binder_alloc: 6176: binder_alloc_buf failed to map pages in userspace, no vma
08:56:12 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="6b2a620500000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x7, 0x6c1, 0x0, 0x14, 0x6}, 0x14)
setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "913a522dab9eca"}, 0x8, 0x2)

[  206.414117] binder_alloc: 6180: binder_alloc_buf, no vma
[  206.436939] binder: 6177:6182 transaction failed 29189/-3, size 24-8 line 3254
[  206.439201] binder: BINDER_SET_CONTEXT_MGR already set
[  206.446025] binder: 6180:6185 transaction failed 29189/-3, size 24-8 line 3254
[  206.451182] binder_alloc: 6180: binder_alloc_buf, no vma
08:56:12 executing program 5:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:iptables_conf_t:s0\x00', 0x25, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000649ec4aadc9ee0f0e9d6000000000000000000000004faff2000030010000800006a0dc566000df96f0f65707b98e341cd", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

[  206.473375] binder: 6189:6191 ioctl 40046207 0 returned -16
[  206.485166] binder: BINDER_SET_CONTEXT_MGR already set
[  206.494406] binder: 6180:6194 ioctl 40046207 0 returned -16
[  206.500198] binder: 6174:6186 transaction failed 29189/-3, size 24-8 line 3254
[  206.513175] binder_alloc: 6180: binder_alloc_buf, no vma
08:56:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  206.519113] binder: 6177:6182 transaction failed 29189/-3, size 24-8 line 3254
08:56:12 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  206.545442] binder_alloc: 6180: binder_alloc_buf, no vma
[  206.560202] binder: 6180:6185 transaction failed 29189/-3, size 24-8 line 3254
08:56:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = getpgrp(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0))
sendmsg$unix(r4, &(0x7f0000001640)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, r6}, @cred={0x20}, @rights={0x20, 0x1, 0x1, [r5, r1, r2, 0xffffffffffffffff]}], 0x78, 0x40081}, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
io_setup(0x7e, &(0x7f0000000240))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0}, &(0x7f00000003c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'team0\x00', r7})
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
epoll_create1(0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f00000002c0)=""/64)
r10 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r10, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0xbe3c}]}, 0xc, 0x3)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000300000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="23e0bc090000000000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

[  206.588178] binder: 6203:6206 transaction failed 29189/-22, size 24-8 line 3117
08:56:12 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r2}, @release={0x40046306, 0x3}], 0x7e, 0x0, &(0x7f0000000040)="e572600d3f20518ab74454d1e7f7d84138c85ac86e72e75b90dd0e9052eeba0a4e249d17657232066403e32155c741de64af6e1cfa75ff46b4438a2aa0993afc54e9de89dfe5c2cdffd89fa300fe90aa29083011719be8cbbff505627a39973d0276a11802b7d44a6af3d3b4c1bb8087466966d38cb2449cc4418598737c"})

08:56:12 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:12 executing program 5:
r0 = creat(0x0, 0x25)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10)
accept4$inet(r0, 0x0, &(0x7f0000000040), 0x80800)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x10)
getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000280)=0x78)

08:56:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000005}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)

[  206.640266] binder_alloc: 6207: binder_alloc_buf failed to map pages in userspace, no vma
[  206.682263] binder: 6203:6212 transaction failed 29189/-3, size 24-8 line 3254
[  206.701389] binder: 6215:6221 transaction failed 29189/-22, size 24-8 line 3117
[  206.714598] binder: BINDER_SET_CONTEXT_MGR already set
08:56:12 executing program 5:
memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x4)
creat(0x0, 0x0)
getresuid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x8, &(0x7f0000001980)=[{&(0x7f0000000580)="b428d32c9b22edd16c1de2f7724e6bd397bb51d9f2a9817476488acbbd0f41e53012952a90d6d14322dd7f9a6c4319e38820350d02839d09ad6f1b6b03507d3192a46dae32646ee26a21a4271cf6f410c0a397b2c4b0154039e4a54d9922ab28f727232bf919dc65f6542e0e9eacfd9118296971e6065c409ad8deacf77f3dba00a7e98469194b8a0bf340869a11f8ba7d13e613620f6f927f9d24ebb8ece7542047453a69c3bcc94149f346b70ac72ff4e0317f3bfb7e314fc4bdc52db891be58", 0xc1, 0x3}, {&(0x7f0000000280)="7977a907190eefd6fe13cc9601b2b9231f699ba108dba573ee758631136b1eff024c40ea5cd138f7b254b447a29b0d9391e5667daa7a424b3a4b8dc936fd174c01d12e633b26091e0b6648236e0dac2f1844b994e42f4546e3a5d41061eab65ab02808de81458881", 0x68, 0x5}, {&(0x7f0000000380)="583fa64cec9ca46d7000bd8ac43bf7e39e3d038cdd35c66d6c75e67e833d33b68a2fdfc6834db497d35a690a06537d62f6662c116ac3ce29b9bf7d7be49f053dbcb17467da7de48855c8d58284794117389e60ce35bb19ad70ac16f60d2515be8de5d6", 0x63, 0x1}, {&(0x7f0000000680)="fd9684ef89f2f0e9202c9aa05326a5a115d9155c942fc8f597c7f670eeb3259e3d7fd260a6d6628b446a4a330e46a07de878cc820ef6f4221f923a9f1cdaa99dffdac0ff24fabd4715a660c21d04d9204e29638a9dc6d5b5dcb5cc975ba7d19c981d2bb3907592b159a7069f0430eb4ac03edf7703c9777dfa7ed16f6d0a7a086178df5fd176216932c3eb30e2f3fd75ba29f1626ea7d54872cfdc469890abdfd25274518927ff95854622ed96ab1bd921c0ff7dfb2797cc1bf6740f0388219448131aa62a0523a711d739d1b9882e8fab42fcafd5f1d83ef1f8ce7905b359cb54a80cbb7149609a310ed41e97c71075fee28407174b", 0xf6, 0x6}, {&(0x7f0000000780)="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", 0x1000, 0x401}, {&(0x7f0000001780)="a5736cd60af57d8ae3db795c7f", 0xd, 0x7000000000}, {&(0x7f00000017c0)="bbe2fc050f09567a25b2dc50887823cc21e0e5fb443f272f7471a38c3179cfb812e2acc539d21a85698daf73b666eae8a9734e3cdf3ded3cc5145e6f95555509741580b6034c3d4bd4e3d8ea37ddaa493f2260061441900e4037d5eca31b0c79a28eb0ace94575925c38dc10600a82dfe89c3632b108ca0b4906d533ec00a43e816b3a8a9706a9223252809798ded2b7346bfe5b0154014cef3d5fd88e91685bd67d47caba0bfa9b2d2d3c9820cb", 0xae, 0x200}, {&(0x7f0000001880)="c05f9df8007437e596272260f394ba8d12a2777f7b3baf30274cd7433ecedacbc01de5046d5ae95599ae95e03794d66f2c7cb4755a1467c139d05fc3018877a83c3ab94b55f4ccae461fb12a9e289e52d38521a887d31b25970bccd41ea3324dde35d9477041d2f5a2d94192825e581a0bdeba6b671d960adbbaffab3c0b1f59d17a0ecb2c9e2a56828320ff3a516b98a226f1188b29931b23750aaaaff0ef9294278581d6913a2a8cfee0ed66b432f4fee03af83eaea92e5f878f6b67d1e53950645e8b972aef87b32d21d1b939ad42e42af5d06b8eb1a5", 0xd8, 0xdb}], 0x818000, &(0x7f0000001a40)={[], [{@euid_lt={'euid<', r0}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<', r0}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}]})
quotactl(0xa8a, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000480)="846e6c023729561d356a8e2ef4600033551dc1cac31cee4354da158e01521b4c75a5df2598a1de4aa8666fa1b9b2e026f32cc47634060d978554c1730b24e04c7d12ab6f46db5737bc591b075b11db5ec5f6570e222d33f2164f23a1aca5425bca510d29f0117c3c7f839ddb26e28157a18e75b49b3abe4cf592d0212a6b0c2c557e022a37a85d6e499ea1e06bdbe35af4a68c6de18e0ebf8fd36a0c8ee12fbaa61b909802cbb9c700c7f36922470324f53cc520152933ad5fb4dd598a5ab7b6d9698badffd699a4e5c9766bedd9851dc7c29f2259b5a9ff86f352adcdcc5f30f8aca30b32e370e95611963c62687439197e329bfdc3b72fd6841c")
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
mknod(&(0x7f0000000140)='./file0\x00', 0x400, 0x2c9)

08:56:12 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
dup3(r1, r0, 0x80000)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000006ac607f22defcc7c7dac609ed716dabb9d"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  206.740138] binder: 6218:6223 ioctl 40046207 0 returned -16
[  206.764450] binder_alloc: binder_alloc_mmap_handler: 6220 20001000-20004000 already mapped failed -16
[  206.775418] binder_alloc: 6220: binder_alloc_buf, no vma
08:56:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  206.798162] binder: 6215:6235 transaction failed 29189/-3, size 24-8 line 3254
[  206.798198] binder_alloc: 6220: binder_alloc_buf, no vma
[  206.819354] binder: BINDER_SET_CONTEXT_MGR already set
08:56:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = getpgrp(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0))
sendmsg$unix(r4, &(0x7f0000001640)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, r6}, @cred={0x20}, @rights={0x20, 0x1, 0x1, [r5, r1, r2, 0xffffffffffffffff]}], 0x78, 0x40081}, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
io_setup(0x7e, &(0x7f0000000240))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0}, &(0x7f00000003c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'team0\x00', r7})
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
epoll_create1(0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f00000002c0)=""/64)
r10 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r10, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0xbe3c}]}, 0xc, 0x3)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000300000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="23e0bc090000000000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

08:56:12 executing program 5:
creat(0x0, 0x100)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x120, 0x0, 0x0})

08:56:12 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000318000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="c52a4b7300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  206.842191] binder: 6232:6236 transaction failed 29189/-3, size 24-8 line 3254
[  206.849762] binder: 6220:6239 ioctl 40046207 0 returned -16
[  206.856198] binder_alloc: 6220: binder_alloc_buf, no vma
[  206.864484] binder: 6220:6225 transaction failed 29189/-3, size 24-8 line 3254
[  206.892894] binder: BINDER_SET_CONTEXT_MGR already set
08:56:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x2)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x504, 0x3, 0x6, 0x8fc, 0x0, 0x3, 0x3f, 0x100000001, 0x2ac, 0x40, 0x96, 0x3, 0x1, 0x38, 0x1, 0x101, 0x4, 0x4}, [{0x60000000, 0x5, 0xfc5, 0x674, 0x6, 0x9, 0x40, 0x100000001}, {0x7, 0x9dcc, 0x1a0, 0x2, 0x2a3, 0xa89e, 0x5, 0x9}], "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", [[], [], [], [], []]}, 0x15b0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

[  206.918773] binder: send failed reply for transaction 721 to 6220:6225
[  206.926233] binder: 6241:6248 ioctl 40046207 0 returned -16
[  206.932651] binder: 6251:6254 transaction failed 29189/-22, size 24-8 line 3117
[  206.940130] binder: undelivered TRANSACTION_ERROR: 29189
08:56:12 executing program 5:
r0 = creat(0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x3b, @local, 0x4e22, 0x4, 'none\x00', 0x24, 0x5, 0x40}, 0x2c)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  206.962591] binder: 6241:6255 transaction failed 29189/-22, size 0-8 line 3117
08:56:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

[  206.997322] binder: 6260:6262 transaction failed 29189/-22, size 24-8 line 3117
[  207.005990] binder: undelivered TRANSACTION_ERROR: 29189
[  207.013885] binder: 6261:6264 ioctl c0306201 0 returned -14
[  207.019952] binder: 6251:6265 transaction failed 29189/-22, size 24-8 line 3117
08:56:12 executing program 1:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
tee(r0, r1, 0x2, 0x9)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x10000000003, 0x3}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$RTC_AIE_ON(r0, 0x7001)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c)

08:56:12 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

[  207.049252] binder: release 6260:6262 transaction 735 out, still active
08:56:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x4, 0x7, 0x10000, 0x79, 0x0, 0x3, 0x1401, 0xe, 0x89, 0x3, 0x2, 0x100000001, 0x3, 0x7ff, 0xff, 0x9, 0x10000, 0x2, 0x80000000, 0x4, 0x0, 0x5, 0x1, 0xbc1, 0xffffffff, 0x2, 0x1, 0x3ff, 0x1000, 0x6, 0xe, 0x4, 0x400, 0x2, 0x0, 0xe2, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0xa02a8c0815eb6196, 0x8, 0x7f, 0x8, 0x6, 0x2126, 0x9}, 0xffffffffffffffff, 0x6, r0, 0xa)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000140)="6982b30524fd2ab28c6716b8", &(0x7f0000000480)="a94da1d86bdfc722601ea18b3a42c5524dbe3b49d661e81a04bd3ab146b38a350c14a889ab0d077797df52295a9935dd4584325af350565232354f3a1aba5382ddbdb3d0a7a78bf0b23b8fb90e3b4562a550dc171cb09f5af99483a8a77fcc2b5b61594fc059f4156830a604862ad054a9102fe389fe3b73b9726a2b212d37f2b71d6acaaeaa32e2b7c4ba0a417c156c", 0x2}, 0x20)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  207.094372] binder: BINDER_SET_CONTEXT_MGR already set
[  207.112651] binder: 6270:6275 ioctl 40046207 0 returned -16
08:56:13 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000a439ec6a00000015b9f242e84e7ffc41d606720fb9b84669b74603d5094fb4074b6de3db31a5dc62697083c67b5db0f627ea07f8896465c0e4ba1a8bbe9dd634b7cba2bf8e3c375121bb97bfd46744d8800b9772bd4e9ca138af235f44025a42437f92ef9466dbe3d1742e7216a3d4f7546db6d7b47344a1462b001b30b0363c140ade1518323eaca26e158a97eec41a1b6fe2d094b176332253b5a87eb5ceb19476a3433cc9d4595b11cfe443afe543b1fc30712783f5"]], 0x0, 0x0, 0x0})

08:56:13 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000380)=@v3={0x3000000, [{0x0, 0x1}]}, 0x18, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80)

08:56:13 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0xab1cbc6f)
r0 = creat(0x0, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x310d)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  207.139461] binder: 6270:6275 got transaction with invalid offset (0, min 0 max 0) or object.
[  207.171288] binder: release 6282:6290 transaction 742 out, still active
[  207.178233] binder: release 6282:6287 transaction 739 out, still active
08:56:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  207.187290] binder: 6270:6275 transaction failed 29201/-22, size 0-8 line 3348
08:56:13 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000100)={0x100000001, 0x7f, 0x100000001})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x100, 0x0)
r1 = creat(0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x100000001, 0x20}]})

[  207.219447] binder: 6293:6296 got transaction to context manager from process owning it
[  207.239976] binder: undelivered TRANSACTION_ERROR: 29201
[  207.259146] binder: 6293:6296 transaction failed 29201/-22, size 24-8 line 3108
[  207.268222] binder: release 6298:6303 transaction 750 out, still active
[  207.282301] binder: release 6298:6299 transaction 747 out, still active
[  207.308183] binder: BINDER_SET_CONTEXT_MGR already set
[  207.325534] binder: 6293:6308 ioctl 40046207 0 returned -16
[  207.338565] binder_alloc: 6293: binder_alloc_buf, no vma
[  207.344648] binder: 6293:6296 transaction failed 29189/-3, size 24-8 line 3254
[  207.792938] binder_alloc: binder_alloc_mmap_handler: 6261 20001000-20004000 already mapped failed -16
[  207.803188] binder: 6261:6276 ioctl c0306201 0 returned -14
[  207.803228] binder: BINDER_SET_CONTEXT_MGR already set
[  207.814273] binder: 6261:6310 ioctl 40046207 0 returned -16
[  207.822153] binder_alloc: 6261: binder_alloc_buf, no vma
[  207.827724] binder: 6261:6310 transaction failed 29189/-3, size 24-8 line 3254
[  207.835663] binder: send failed reply for transaction 732 to 6261:6264
08:56:13 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffe1f, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)
dup2(r1, r0)

08:56:13 executing program 5:
r0 = creat(0x0, 0x0)
r1 = getegid()
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0))
ioctl$KDMKTONE(r0, 0x4b30, 0x8)
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setgroups(0x2, &(0x7f0000000080)=[r1, r2])
r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd)
write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/185, 0xb9, 0x1000, 0xffff, 0x2, 0x9}, 0x120)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

08:56:13 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0710705c816e47fc0000e7ff8000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
getsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x1033, r0, 0x0)

08:56:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x232)
r1 = dup(r0)
write$UHID_INPUT2(r1, &(0x7f0000000000)={0xc, 0x16, "29b9aab1b184629bcb1d48dd3ca6ee83bce5e590a780"}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x3, 0x8, 0x1, 0x40, 0xffffffffffff8001, 0x6})
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="3305ff0f"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x3)

08:56:13 executing program 5:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffcd, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  207.842503] binder: send failed reply for transaction 735, target dead
[  207.858201] binder: send failed reply for transaction 739, target dead
[  207.880588] binder: send failed reply for transaction 742, target dead
[  207.887868] binder: 6312:6323 got transaction with invalid offset (-268124150924570617, min 0 max 24) or object.
[  207.899823] binder_alloc: binder_alloc_mmap_handler: 6317 20001000-20004000 already mapped failed -16
[  207.900826] binder: 6314:6322 transaction failed 29189/-22, size 24-8 line 3117
[  207.909498] binder: BINDER_SET_CONTEXT_MGR already set
[  207.922578] binder: send failed reply for transaction 747, target dead
[  207.925257] binder: 6312:6323 transaction failed 29201/-22, size 24-8 line 3348
[  207.929686] binder: 6316:6324 ioctl 40046207 0 returned -16
08:56:13 executing program 5:
r0 = creat(0x0, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000))
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="052a627312000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})

[  207.942200] binder: 6314:6331 transaction failed 29189/-22, size 24-8 line 3117
[  207.950743] binder_alloc: 6317: binder_alloc_buf, no vma
[  207.952104] binder: send failed reply for transaction 750, target dead
[  207.956774] binder: 6316:6333 transaction failed 29189/-3, size 0-8 line 3254
[  207.965385] binder: BINDER_SET_CONTEXT_MGR already set
[  207.979005] binder: 6317:6330 ioctl 40046207 0 returned -16
[  207.988003] binder_alloc: 6317: binder_alloc_buf, no vma
08:56:13 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0xab1cbc6f)
r0 = creat(0x0, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x310d)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x40)
setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000480)="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", 0x1000)
r2 = syz_open_pts(0xffffffffffffffff, 0x10001)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00d3f3b7628178be984b76634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:13 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="ea838541f1d23a6a3e586e8cc7316675c6602e3d"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  207.988692] binder: undelivered TRANSACTION_ERROR: 29189
[  207.993899] binder: 6317:6320 transaction failed 29189/-3, size 24-8 line 3254
[  208.009503] binder_alloc: 6317: binder_alloc_buf, no vma
[  208.011073] binder: send failed reply for transaction 756 to 6317:6320
[  208.015234] binder: 6312:6332 transaction failed 29189/-3, size 24-8 line 3254
[  208.023714] binder: undelivered TRANSACTION_ERROR: 29189
08:56:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="2f25d8ad66aa899d49487e81fe36808023efa0b31422ee91fc1e0ccdb885f1f6eac78d108ec4182247e666095d1377ed8ce26fe6b805e29715130e4ceac33a99f729fb11cd02a558bffba6cf5a62294e46298113627e3be5c773220e881daeea6dab12cabca9326c0ef9bedb79e643d01aa8f3e8ad54bcc287cca3acf351e4422f612b428685e4cc6e27be7fb0378e3fb78b85705b845f2c52394995d489ad0ce0160ff9b3be5d4869d0b80a3e5baf9ff517318470", 0xb5, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2, 0xf, 0x810}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'cmac(des-generic)\x00'}}, &(0x7f0000000380)="a229c273b35209fd906b832ef06b61e77117772e96a72525cc7177f121e4f63a295f7e7a9d69a24958a49f9cacd7ed254007280fe684c70641f655157f23506f12610f792bfd344556009cd3ae966faef4e1cf91ac218907d698dc8e922ecc20775f53a9702007d4c05a45", &(0x7f00000001c0)=""/60)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="e8b038c0a023eead58b87342c34690b1088ee32ad96a58827ded480bed6f5e98"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

08:56:14 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0xab1cbc6f)
r0 = creat(0x0, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x310d)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  208.067472] binder: 6338:6341 unknown command -1208757504
[  208.100386] binder: undelivered TRANSACTION_ERROR: 29189
[  208.100990] binder: 6338:6341 ioctl c0306201 20000440 returned -22
08:56:14 executing program 5:
creat(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:56:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

08:56:14 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r2, 0x17)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  208.117665] ------------[ cut here ]------------
[  208.122444] kernel BUG at drivers/android/binder_alloc.c:1130!
[  208.123333] binder: release 6345:6351 transaction 770 out, still active
[  208.156316] binder: release 6345:6348 transaction 767 out, still active
08:56:14 executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0xab1cbc6f)
r0 = creat(0x0, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x310d)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

08:56:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  208.170865] binder: BINDER_SET_CONTEXT_MGR already set
[  208.183806] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  208.189712] Modules linked in:
[  208.192917] CPU: 0 PID: 6349 Comm: syz-executor.4 Not tainted 4.14.108+ #39
[  208.200014] task: ffff88819a705e00 task.stack: ffff8881c8ec8000
[  208.206085] RIP: 0010:binder_alloc_do_buffer_copy+0xc7/0x500
[  208.211897] RSP: 0018:ffff8881c8ecf5d0 EFLAGS: 00010216
08:56:14 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="01c4a6f462f7cac78ea90f8cdcc7", 0x0, 0xadde}, 0x28)
r2 = dup2(r0, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map={0x18, 0xf, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x7b, &(0x7f0000000140)=""/123, 0x41100, 0x1, [], 0x0, 0xf}, 0x48)

[  208.217347] RAX: 0000000000040000 RBX: 0000000020001000 RCX: 0000000000000348
[  208.224619] RDX: ffffffff82237477 RSI: ffffc900039a3000 RDI: ffff8881ca796ad8
[  208.231889] RBP: 0000000000000020 R08: ffff8881c8ecf8b0 R09: 0000000000000028
[  208.239164] R10: ffffed10391d9f06 R11: ffff8881c8ecf837 R12: ffff8881d9155918
[  208.246433] R13: 0000000000000028 R14: adee23a0c038b0e8 R15: ffff8881c8ecf8b0
[  208.253698] FS:  00007f8dc75d7700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000
[  208.261915] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.267783] CR2: 00007f8df74694a0 CR3: 00000001ceec6005 CR4: 00000000001606b0
[  208.275046] Call Trace:
[  208.277633]  ? binder_alloc_do_buffer_copy+0x1ef/0x500
[  208.282910]  binder_get_object+0x90/0x190
[  208.287053]  binder_transaction+0x1e2d/0x5640
[  208.291579]  ? check_preemption_disabled+0x35/0x1f0
[  208.296586]  ? binder_inc_ref_for_node+0xba0/0xba0
[  208.301503]  ? perf_trace_lock+0x11e/0x4e0
[  208.305735]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[  208.310698]  ? __save_stack_trace+0x7a/0xf0
[  208.315039]  ? __might_fault+0x104/0x1b0
[  208.319095]  ? lock_downgrade+0x5d0/0x5d0
[  208.323230]  ? lock_acquire+0x10f/0x380
[  208.327196]  ? __might_fault+0xd4/0x1b0
[  208.331184]  ? __might_fault+0x177/0x1b0
[  208.335239]  ? binder_thread_write+0x512/0x1f90
[  208.339903]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[  208.344826]  ? binder_get_thread+0x1b3/0x800
[  208.349228]  ? binder_transaction+0x5640/0x5640
[  208.353894]  ? lock_downgrade+0x5d0/0x5d0
[  208.358031]  ? lock_acquire+0x10f/0x380
[  208.362008]  ? __might_fault+0xd4/0x1b0
[  208.365976]  ? __might_fault+0x177/0x1b0
[  208.370030]  ? binder_ioctl+0xd48/0x14ea
[  208.374085]  ? binder_poll+0x230/0x230
[  208.377971]  ? __lock_acquire+0x56a/0x3fa0
[  208.382194]  ? perf_trace_lock+0x11e/0x4e0
[  208.386418]  ? check_preemption_disabled+0x35/0x1f0
[  208.391424]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[  208.396365]  ? check_preemption_disabled+0x35/0x1f0
[  208.401382]  ? binder_poll+0x230/0x230
[  208.405273]  ? do_vfs_ioctl+0xabe/0x1040
[  208.409321]  ? selinux_file_ioctl+0x426/0x590
[  208.413803]  ? selinux_file_ioctl+0x116/0x590
[  208.418294]  ? ioctl_preallocate+0x1e0/0x1e0
[  208.422783]  ? selinux_parse_skb.constprop.0+0x16b0/0x16b0
[  208.428399]  ? __fget+0x1ff/0x360
[  208.431843]  ? lock_downgrade+0x5d0/0x5d0
[  208.435977]  ? lock_acquire+0x10f/0x380
[  208.439943]  ? __fget+0x44/0x360
[  208.443304]  ? check_preemption_disabled+0x35/0x1f0
[  208.448322]  ? security_file_ioctl+0x7c/0xb0
[  208.452722]  ? SyS_ioctl+0x7f/0xb0
[  208.456277]  ? do_vfs_ioctl+0x1040/0x1040
[  208.460413]  ? do_syscall_64+0x19b/0x4b0
[  208.464472]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
08:56:14 executing program 5:
creat(0x0, 0x80)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  208.469830] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0d 04 00 00 48 8b 6d 58 48 29 dd e8 33 33 0d ff 49 39 ed 76 07 e8 29 33 0d ff <0f> 0b e8 22 33 0d ff 4c 29 ed 49 39 ee 77 ec e8 15 33 0d ff 41 
[  208.489065] RIP: binder_alloc_do_buffer_copy+0xc7/0x500 RSP: ffff8881c8ecf5d0
[  208.496706] audit: type=1400 audit(1553676974.058:43): avc:  denied  { prog_load } for  pid=6372 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[  208.521458] binder: 6354:6357 ioctl 40046207 0 returned -16
[  208.523150] binder: 6354:6368 got transaction with invalid offset (0, min 0 max 0) or object.
[  208.530769] ---[ end trace 94df56243a5ce967 ]---
[  208.542342] binder: release 6358:6362 transaction 780 out, still active
[  208.549139] binder: release 6358:6371 transaction 775 out, still active
[  208.558545] binder: 6354:6368 transaction failed 29201/-22, size 0-8 line 3348
[  208.562355] Kernel panic - not syncing: Fatal exception
[  208.571623] Kernel Offset: 0x3a000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  208.582580] Rebooting in 86400 seconds..