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", 0x1000}, 0x1006) r5 = syz_open_dev$binder(&(0x7f0000001000), 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x68, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000005015515b000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a68770e19bc1301000000000000000000000000000000852a62730b11000002000000000000000000000000000000852a68778a00"/72], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009800000000000000300000000000000031e46f40a636a657e63300000000000067bf4473bae83778d1f1cc2a7b9e52ded43d5429b768f520b510905fc0b99f404b7626f216262e78c4fdd65bebf9170ad132d28b457374d127a82b208cd00ffc9ef3e157f91cdacee666b26e04365faab597b5eaba21718a2751dfb011388b23ea641614567862e5bfa9e43da1e1e1fab3126a4ad39f3142f19c4bbfb4aa1ff42513a97df65251832efe1f8ada2fd14e2290f3f4ebda47d0ddf310c600"/211], @ANYBLOB="076304400000000007630440010000000f630c400000000000000000000000000b630000"], 0x1, 0x0, &(0x7f0000000180)='r'}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="086310400000007edaa987000000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001263484000"/172], 0x0, 0x0, 0x0}) dup(r5) [ 1997.206843] binder: BINDER_SET_CONTEXT_MGR already set [ 1997.212304] binder: 15712:15717 ioctl 40046207 0 returned -16 [ 1997.218597] binder: 15712:15717 got transaction to invalid handle [ 1997.225651] binder: 15712:15717 transaction failed 29201/-22, size 104-24 line 3128 16:29:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000280)=""/146, 0x92}], 0x3, 0x0) r2 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg(r3, &(0x7f0000000d40)={&(0x7f0000000440)=@isdn={0x22, 0x7, 0x10001, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="8b3ffcb9c2be6813c067754a08988c8361b492c30154c31d71dc4da6ae9b79821464d0ab", 0x24}, {&(0x7f0000000500)="50231f58f61c58fc3916c4536b1bec67cd3e3164ba370abcbab0189d1f265ed22231306db2cf08f37b07126cf7b793569128ba749afdc23140af74f41c4e2c1185c5937593bc69dabee65703b6c2d1df2b4c0f4034da9c157dbc95d52ad1a9c515f29d25968584d829ad06d92e0310b504955f8433ba055fc97aaf9ec4fa49bdcb57430f5fcf3224a9c76402c50edbe7e15a07f4eed568539e2970bbe7206ec7e743b37265849efa40de578808a02a89ec52639da9c03e673d96297f1ef196ef10", 0xc1}, {&(0x7f0000000600)="1e8ce1bc626eb83faf43ef66a89616e30a54b6dc1b9d92f3d97afaa491cc6ea38d914de462e9cb7f9afb20322372ee814abfe6f56a36e7ad9dba116eedf72caba908747d8f8a82f4bcae8b2d29", 0x4d}, {&(0x7f0000000680)="cb7a3d23eb4e886969f9c566376651d488ad3d32f988847d1ee53747cd440b6b648f14be39aff80c78886d4b9ba13cac66faac95e03b9e0f5e40306e44e3899b7abe35eb3005b8dbb2337f500826df56392f593e74b0f745a17d3043aa4503252a98379d264ebe26c66b973be5ca585b6ea8db863520dc785cda8179b653eb3856614d2940fbcc0eb7b909a806203b9a39a4288fd03a556d92ea2334ad04fede38c3c85f0563197151e095b6f5ded817a5b0bc033454c57e0c3ecc0aa8ae41e55a51b2db2552efef8f57fce9dba94c85a3c02a7cf6a419c3c0ec5761e7334dc27c", 0xe1}], 0x4, &(0x7f00000007c0)=[{0x80, 0x6, 0x13, "49ce4545b9c7f538d54caba3d5d582b800b4b654a779018bc7409636e9a5bc5b7303be96922f92f3c8df27547a475e3fe8843961be39843d3fdd4e4a0734ba5574fc1c971fed41bc0dcc4b8abc78efe35b01732eaa450b4a6aae018191643b7fb7d3ba6e01f45823f7"}, {0x100, 0x105, 0xf6, "8d4e176bff505375dab3b5f5338cb3a538bbb6dd59c12864a03ef35930d91b35a914f9c688eb063e4ac97ff4c03c0b0f98ff82d0899934f416617074d6b9a54b660f803e3caf39264b299463bc9bf10d0c3c47756296994b55630cd1ab10857ee3f38a7856fc9761ecbea1b48c765ca38a54b5fd6a3fdd43e29d3a5a0c14c9a5676001e32fb33fa59aa6b2461af9c1957176c051eefa8b83042ef92a873582dbe24614296b3bbcaee422a044e17118c260b9b1cfb6a73fccff89c6af2ae0d93324226b6dc384b921e9ebecd035699b4a89b91f38601072bcf6b604155af186cd079bdf761f3a3981e92498eccf7e"}, {0x108, 0x6, 0x111a40000000, "a6bd8a5ec21cbc04d2b3df0e1347cb76e59c730a6cfca2461e988046174509f1c5629e45333f4ba55dcaa14ca5ed05c6b956d4b8733af7f630eac7e5443d2aac6d11c874b1b650d9a15bd46d9a9fcd142e5542abb1fd6f7f5a7e2971542d9b5ac23fcc3202b20c9d7b63a3b0d1b4ac3145a55a5c5065f9cfb3eb4d24150302b6b7586f980c6e071346fe7f7cd7df829be403fad4f3eb07636143a379de750e7afe24aee3c8a1e7a4ef6a5c1bd4aae68b6ad7a1605352f575e46bf0c97df2f7bd976ab24f4808cb9f82e818852c86daa6d77e4ce7e358c5256bed6eab67ea51ed838a023a7c90d792b1020d5fffd35a9fab4ec33f702b"}, {0x38, 0x100, 0x8, "267dbab800088f2cc5d142b1b90ab88b89d54f7d27a244117f19121ef698802d341f20"}, {0xd0, 0x105, 0x3, "1361a011b2a45a52008ad562d6b984a7a7613370ff621e23213b78889426479c17f898ad626aec6b4f519c68dae66dfcdd8be103bba45916b04ec2f43532df6687b94efffbfb82105c7435021ba29709028ec866efba5423d851000efdb4cc19d6400ec64f58f26995083c075c5feff1ad9827e74b137a132f9b408aac6d38dd9b1100880b60f6582a3780f044cd69ec7fba6b094dcb2cd9a94f8dd7d029927d0968546021bf674db347a9e3648653df399aa34c3edf4dcb130b"}, {0x18, 0x118, 0x40, "c3"}, {0xf0, 0x6, 0x1, "7b8d94d769dc67df71f431a4e705bfbae687366b87b6afcef9c55a0961e4ea92beadf8bbebea26fd336804feef2c021c78bdd840e9ab5abcaa440857ec1505e86d184d83d1723bc4574bfa5171772564ec9d38291719fd67ffdfda2d42920e9f5638c02d092854234f47e9fab5c854717d76c61056b9f76c5b757b49256f797eb19e402fc25b01d2ffa36847840fc8481f3ba82d8e1acf81ebd6e2f90a4482ad1f8ec309a8b96fa998dbcaf98fbec2c77d29f6c47882aef5bfb41ec26578f5d340543d63a864c8b2e394f59f1e99b0001164aa1b91d379027924f53f95"}, {0xb8, 0x0, 0x1000, "62e15d3261d47fa74613d238d2776d486e7f729701fde23730d8c964730f7acd72d105b16f1273b51deee82a5e514b4a61beaf97dec2562598d67e74525632b7124a87903b8ac2110a95dc13b00f92eaa2146ce8401986a67bf855d0c13d0bbfb7a4082a47b5b0363158beaef4344cd35bee1e9f139a4ce2a7563831a645c23842919337fb1d9775a5b6e7cf4d39d43c6166df9335f588919e27115ba0a745bfad4c365d860f8a"}], 0x550}, 0x4000000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000200)=""/53, 0x127}], 0x3) r4 = socket$key(0xf, 0x3, 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000003c0)=""/65, 0x41) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0x68}}, 0x0) 16:29:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x329002, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x0, 0x10000, 0x1}) ftruncate(r1, 0x70e) [ 1997.326510] binder: BINDER_SET_CONTEXT_MGR already set [ 1997.331988] binder: 15730:15731 ioctl 40046207 0 returned -16 [ 1997.338307] binder: 15730:15731 got transaction to invalid handle [ 1997.344768] binder: 15730:15731 transaction failed 29201/-22, size 104-24 line 3128 16:29:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 1997.438537] binder: BINDER_SET_CONTEXT_MGR already set [ 1997.443986] binder: 15742:15743 ioctl 40046207 0 returned -16 [ 1997.450523] binder: 15742:15743 got transaction to invalid handle [ 1997.456871] binder: 15742:15743 transaction failed 29201/-22, size 104-24 line 3128 16:29:17 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:17 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) 16:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1999.974162] binder: 15748:15750 BC_INCREFS_DONE u0000000000000000 no match [ 1999.981704] binder_alloc: 2935: binder_alloc_buf, no vma [ 1999.995501] binder: 15748:15750 transaction failed 29189/-3, size 0-0 line 3274 16:29:17 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:17 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x200000, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x19) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) munlockall() r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e22, @rand_addr=0x7}, {0x306}, 0x60, {0x2, 0x4e22}, 'vlan0\x00'}) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2060084}, 0xc, &(0x7f0000000280)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x10000850}, 0x4000) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000000c0)={0xe, 0x0, 0x5, 0x4, 0x8c, "f1f780655ce73a8412d11a51d628bc01467a1084d16abc1d51918165b754e3c658a27b497137195c3b1461c79368f721ccb8040dc13b17c8ff339f49ba8b0e02397e2848437fb7aa40b7736305c4e786a755d972fc7defae571ea4dd91d7df13029f767aeed74a99c0d0a48809d4ded0ee1f3dbc2714ffd613f60a1d81b179c7ab08ef1e235c0d4b3ecdab24"}, 0x98) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x5) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000080)) finit_module(r1, &(0x7f0000000300)='\xf6}vboxnet1.securityppp0-}trusted\x00', 0x1) 16:29:17 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0) 16:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d3}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) link(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00') bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = getpgrp(0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) r4 = getpgrp(r3) r5 = geteuid() setreuid(r5, r5) r6 = geteuid() setreuid(r6, r6) sendmsg$nl_generic(r1, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000808}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1348, 0x15, 0x100, 0x70bd28, 0x25dfdbfd, {0x1c}, [@nested={0xec, 0x63, [@generic="7a1a404b7897f807e0138f07e9e83fec9a7e354a90230d2b94a42faa4591928a328dc217e0675c6c4faff3f837b72b9f65e1df93e05ab81684bf7d9ac7521910c7a5fe95955cf7afc6124c86ab0365a79c14f439b6a682896e8f525ea53b1c82f19e4ef108b774a8ddfaa5210cdf3c520a9268a6f09062508dc8694117e85cf5dbed2153f9efdd8ce3d1fa04be1962ac1c58", @generic="06a6589d841b6afc1edc37fa3a0844a59b85afab1a5d33672922a31fe03f806447d60022798b745ba13f97c5e3176f904ea64f7d304953e8c2f5bbef40077f19b649e2e7925b4bf9f5a98ba48e7dcbd891dc6f9e20c8"]}, @typed={0x4, 0x96}, @nested={0x1164, 0x62, [@generic="23cd530f785f0aa6df89d78c94e33d195ad8fabf4838563db393f8f4bc1f9a26785660899cc5381854f1f1d726df0102072ed7176f33c88cf0f10ca0694b9503727be7b3095e5145bb7fd8c8732c6e88", @generic="ce31600d5e83877365abae50406859255832ad6220c907ec84b97d018f58caad452e229d83256a30760028210f94db61e100e7b0f81e6893160b6f5510569bd96ee30c96765bbfe0dcb7025764cfef1470f9b3089434b5335bad102d5267865a7b7b0973bf279ebd1cefade47093a5d78fede3051d1cd6a5", @generic="19d6a11df5d23fd7924ae602a78015d50b106a4d3d072528b9a873c8aad3a3893b615fba0c07dabb1665975e14027253e05c3547556a779f281a9154b8bc0773d4cca054fcf143e4dc5688f2606f46788497c5e154e884fd9c59cf0ff5799eccbea5d1e4161aae2687a2da4b7a1650930b77cf7ca00cf7d3f84e242753ff0d", @typed={0x8, 0x4d, @str='\x00'}, @typed={0x8, 0x7b, @str='\x00'}, @typed={0x8, 0x6b, @pid=r4}, @generic="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"]}, @nested={0xe0, 0x5e, [@generic="30faae63b5fe9c9c001e56f8136d4ecc1f20247650c55087b36bb4b7f17d", @generic="8fcaa807dc48dc5ee6469427a9b35ba9826e3c37e860cdf93e88cc5e4cff", @typed={0x8, 0x88, @fd=r0}, @typed={0x8, 0x1e, @uid=r5}, @typed={0x80, 0x2e, @binary="6ad08707a85f73114b97be406d2b3b9ed4eba40eeb5f2e3f2e54dfbff669e72719ca0f1ac548ad7e5cb7eeea152803ab5fb024db5ba51908c6ceae4589ef1f150ac9c1d9c9305b4621c9bdc22faf87c87a32ae32e6e177987f73a9896a674a03d081f3d909bf03fa061d97754ff0743e77f1b13d88da2e35b68273f4"}, @typed={0x8, 0x52, @ipv4=@loopback}, @typed={0x8, 0x60, @uid=r6}]}]}, 0x1348}, 0x1, 0x0, 0x0, 0x8ede2ffb0bf5dd3a}, 0x80) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) 16:29:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4400, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/78) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) 16:29:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x101000, 0x0) close(r3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000000140)="bb52464a5d82c60c1fd0a5b5aedfc033dc7eb4f28e2cffe6c03e8ec3196343e85b3ac9b70ea1607013600ca224d813a2c1f3c408b2419c75319a3bcabbebfd91718d3bd2fe7005c102392e4cb52f10307d641c1cdc1a6cf38d2c22df8a4a1e6ab90550327da0dbce1f9a681371762b696aea77a7fb0c24b2c098a95295a64a015653d6ac2d328fc96dd3a98731cad9f0040191bafc020d03bd20fcd09b0fae38d0b50c8ff1165c71c78ada1d2e74a2d7c6a3c1c279244e6b66eea6ddb3e11f8056876d46cbfa6ae7081068006e99afcf", 0xd0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x866d, 0x40) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:20 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_key={0xf, 0x8, 0x368, 0x0, "07d16435dfe114ae40a717e35f66aeb3daf97ac77cb48c16002c8a5189b741fd807cdaa2860738bc5267b8e7e9fb1ad0a6506f3ca2d9ea93c077759e98cbef620af1b5da470609626d6f4c1113e9412ef0fa8543ef798200c2c9b876059b4fe7527372ee1d679bafa346cc0ca6"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xd8}}, 0x0) 16:29:20 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x16}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) inotify_add_watch(r4, &(0x7f0000000280)='./bus\x00', 0x1000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x80ffffff}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") signalfd4(r6, &(0x7f0000000200)={0xffff}, 0x8, 0x800) socketpair(0x11, 0x3, 0x10000, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000000c0)) 16:29:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/172, 0xac) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='\x10\x00', 0x105002, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300000f000000000000000000000001001800000000000500060000000000e7ffffffffffffff00000000000000000000a7bf85d35e7440df40bf1800000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000002200000ff0000000000000000"], 0x78}}, 0x0) 16:29:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2003.356084] binder: 15840:15841 BC_INCREFS_DONE u0000000000000000 no match [ 2003.363419] binder_alloc: 2935: binder_alloc_buf, no vma [ 2003.368883] binder: 15840:15841 transaction failed 29189/-3, size 0-0 line 3274 16:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000, 0x0) r3 = dup(0xffffffffffffffff) openat(r3, &(0x7f0000000140)='./file0\x00', 0x1, 0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 16:29:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x13, 0x6, 0x5, 0x14, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x2, 0x0, 0x400}, @sadb_key={0x6, 0x8, 0x130, 0x0, "96fc621f8c2420e57a185c49f0cd3823307edeabbff9cd3e1b87ca2a19c379c2f453d149a2b4"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @multicast2}}, @sadb_address={0x5, 0x5, 0x6c, 0x40, 0x0, @in6={0xa, 0x4e20, 0x8, @empty, 0xb8ac}}]}, 0xa0}}, 0x102) 16:29:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/224) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:23 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:23 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2006.252741] binder: 15846:15849 BC_INCREFS_DONE u0000000000000000 no match [ 2006.266715] binder_alloc: 2935: binder_alloc_buf, no vma [ 2006.272404] binder: 15846:15849 transaction failed 29189/-3, size 0-0 line 3274 16:29:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f000000000000000000000001003800000000000500060097801b6528b44741384f2d000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a0027f6b53c0000fe8000000000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000080)={0x5, 0x3, 0x1, 0x5, 0x3}) 16:29:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000000c0)='syz1\x00') 16:29:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x440203, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) 16:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = getpgrp(0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r4) syz_open_procfs(r4, &(0x7f0000000080)='net/fib_triestat\x00') r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fstat(r6, &(0x7f0000000140)) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2006.387543] binder: 15879:15881 BC_INCREFS_DONE u0000000000000000 no match [ 2006.394842] binder_alloc: 2935: binder_alloc_buf, no vma [ 2006.401561] binder: 15879:15881 transaction failed 29189/-3, size 0-0 line 3274 16:29:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'system.', '&keyringnodevppp0*\x00'}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:26 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:26 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x8, 0x5, 0xa, 0x1d, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bb1, 0x185d, {0x6, 0x3c, 0x5, 0x0, 0x0, 0x401, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@multicast1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x4d6, 0x200, 0x0, 0xf, 0x4, 0x40000000}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@rand_addr="0687d5e507e138b9d53eb09d16607608", 0x8, 0x0, 0x6}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x7ff, @loopback, 0x20}}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0xe8}}, 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000f00000000000000000000000100180000000000050006000000000000000000000000000000000000860d00000000000000fe050000000000000003000000000000000000000000000000ff000000000000000000c20700000000000000000000000000000000000000000000df8493b6712516a2656363c6a47c84a0d470b33b45b5c1386c7a0c590801293d916a3b561561a87517f6ada9dc68ac50f74108c0b3a537d52315cde1953ebeb0b5f9703f91a0e6e9f0fee70b5c2619ea3c438905bd9ebba29de5c1023400000000000000"], 0xd5}}, 0x0) [ 2009.279201] binder: 15896:15900 BC_INCREFS_DONE u0000000000000000 no match [ 2009.286484] binder_alloc: 2935: binder_alloc_buf, no vma [ 2009.292204] binder: 15896:15900 transaction failed 29189/-3, size 0-0 line 3274 16:29:26 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x4, 'Q'}, 0x3, 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:26 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3a2, 0x1051e0) ftruncate(0xffffffffffffffff, 0x8200) syz_open_pts(r2, 0x400000) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0xad, [], 0x0, &(0x7f0000000080), &(0x7f0000000140)=""/173}, &(0x7f00000000c0)=0x78) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:26 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0xfffffffffffffffe, 0x0, 0x98, 0x0, 0x1, 0x0, 0x800}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_mreq(r2, 0x0, 0x48, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x28}, @local}, 0x8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xfff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r6, 0x8200) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @multicast1, r7}, 0xc) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x3, 0x5, 0x11, 0x100000001, 0x65, 0x9, 0x3, 0x9, 0x0, 0x1360}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYRESDEC=r1], 0x14}}, 0x0) [ 2009.356598] binder: 15912:15918 BC_INCREFS_DONE u0000000000000000 no match [ 2009.368526] binder_alloc: 2935: binder_alloc_buf, no vma [ 2009.374515] binder: 15912:15918 transaction failed 29189/-3, size 0-0 line 3274 [ 2009.425854] binder: 15924:15927 BC_INCREFS_DONE u0000000000000000 no match [ 2009.426278] binder: BINDER_SET_CONTEXT_MGR already set [ 2009.438380] binder: 15928:15930 ioctl 40046207 0 returned -16 [ 2009.441588] binder_alloc: 2935: binder_alloc_buf, no vma [ 2009.445437] binder: 15928:15930 BC_INCREFS_DONE u0000000000000000 no match [ 2009.451229] binder: 15924:15927 transaction failed 29189/-3, size 0-0 line 3274 [ 2009.463239] binder_alloc: 2935: binder_alloc_buf, no vma [ 2009.469847] binder: 15928:15930 transaction failed 29189/-3, size 0-0 line 3274 [ 2009.531282] binder: undelivered TRANSACTION_ERROR: 29189 [ 2009.531998] binder: BINDER_SET_CONTEXT_MGR already set [ 2009.542148] binder: 15928:15934 ioctl 40046207 0 returned -16 [ 2009.548112] binder: 15928:15930 BC_INCREFS_DONE u0000000000000000 no match [ 2009.555496] binder_alloc: 2935: binder_alloc_buf, no vma [ 2009.561098] binder: 15928:15930 transaction failed 29189/-3, size 0-0 line 3274 [ 2009.590484] binder: undelivered TRANSACTION_ERROR: 29189 16:29:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$TIOCSIG(r2, 0x40045436, 0x36) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCFLSH(r0, 0x540b, 0x7) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:29 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:29 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000001c0)="14b12c054085fa7f7d05eaaa6e94c72f09bb2a96ccea8723332f90edc870fbb12122c0d81cf898f89f79b6517ea87f7c8afae528c5c784e7cb4357133a9b42d39b637de21c0e78e0d6e0662be0066a51682182961e477d6177274667b82eebbf7a6380b137b9f5e8312db47667b0c16f5702f0f256ce7269e64f2432c8be807f31", 0x81) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000140)=""/3, &(0x7f0000000180)=0x3) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x7}, 0xb) 16:29:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x4, 0x0, 0x9, 0x1ff, 0xffffffffffffffff, 0x8, 0x0, 0x6}) 16:29:29 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2012.303494] binder: 15936:15941 BC_INCREFS_DONE u0000000000000000 no match [ 2012.310899] binder_alloc: 2935: binder_alloc_buf, no vma [ 2012.319223] binder: 15936:15941 transaction failed 29189/-3, size 0-0 line 3274 16:29:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) write$P9_RVERSION(r4, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x3f, 0x6, '9P2000'}, 0x13) umount2(&(0x7f00000000c0)='./bus\x00', 0x10) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:29 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) [ 2012.385440] binder: 15953:15957 BC_INCREFS_DONE u0000000000000000 no match [ 2012.400123] binder_alloc: 2935: binder_alloc_buf, no vma [ 2012.405766] binder: 15953:15957 transaction failed 29189/-3, size 0-0 line 3274 [ 2012.488689] binder: 15972:15979 BC_INCREFS_DONE u0000000000000000 no match [ 2012.505576] binder_alloc: 2935: binder_alloc_buf, no vma [ 2012.511625] binder: 15972:15979 transaction failed 29189/-3, size 0-0 line 3274 16:29:32 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x8, 0x0, 0x2, 0x10001, 0xb, 0x8, 0xa2, 0x1000, 0x1e82, 0x1, 0x0, 0xff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:32 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:29:32 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e23, @broadcast}}) fsync(r1) 16:29:32 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 2015.313864] binder: 15991:15994 BC_INCREFS_DONE u0000000000000000 no match [ 2015.331500] binder_alloc: 2935: binder_alloc_buf, no vma 16:29:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0x16, 0x0, 0xffffffd, 0xfffffffffffffffd, 0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:32 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 2015.354599] binder: 15991:15994 transaction failed 29189/-3, size 0-0 line 3274 [ 2015.365380] binder: 15991:16010 got transaction to invalid handle [ 2015.376015] binder: 15991:16010 transaction failed 29201/-22, size 104-24 line 3128 [ 2015.395962] binder: undelivered TRANSACTION_ERROR: 29189 16:29:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:32 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x100203) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2015.460752] binder: 16028:16031 BC_INCREFS_DONE u0000000000000000 no match [ 2015.470935] binder_alloc: 2935: binder_alloc_buf, no vma [ 2015.479318] binder: 16028:16031 transaction failed 29189/-3, size 0-0 line 3274 16:29:35 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) socket$key(0xf, 0x3, 0x2) 16:29:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x23) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x2100, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0xa27}, 0xf) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{0x0, 0xfffffffffffffffc, 0x10001, 0x7}, 'syz0\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) 16:29:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82800) write$P9_ROPEN(r2, &(0x7f0000000240)={0x18, 0x71, 0x1, {{0x4, 0x0, 0x1}, 0x1}}, 0x18) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xc47, 0x20}, 0xc) signalfd(r3, &(0x7f00000000c0)={0x6}, 0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x242401, 0x0) getpeername$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) 16:29:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x0, 0x8000, 0x0, 0x3ff}, 0x6, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0xfff, 0xffffffff, 0x6, 0x4}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x7fffffff}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x800, 0xa437, 0x6, 0x9, 0xb, 0x7, 0x9, 0x691, 0x1ff, 0x204, 0x8, 0xe90}) 16:29:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x101, 0x2c0d2fa721b02645) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2018.358220] binder: 16038:16044 BC_INCREFS_DONE u0000000000000000 no match [ 2018.368553] binder_alloc: 2935: binder_alloc_buf, no vma [ 2018.378990] binder: 16038:16044 transaction failed 29189/-3, size 0-0 line 3274 16:29:35 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:35 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'team0\x00'}, 0x18) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2018.421515] binder: 16057:16059 BC_INCREFS_DONE u0000000000000000 no match [ 2018.428726] binder_alloc: 2935: binder_alloc_buf, no vma [ 2018.434430] binder: 16057:16059 transaction failed 29189/-3, size 0-0 line 3274 [ 2018.496683] binder: 16068:16073 BC_INCREFS_DONE u0000000000000000 no match [ 2018.517413] binder_alloc: 2935: binder_alloc_buf, no vma [ 2018.523031] binder: 16068:16073 transaction failed 29189/-3, size 0-0 line 3274 16:29:38 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = geteuid() setreuid(r2, r2) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="adf1f298ac1bac9c3d6f3dd7088ea654b4d0c0216fd6039c9f3599f4eb90e9fa9662a65d09962ab7985f28190c268be092caad1a44a30b9cb7ffb74ba55a08d87a17b142b3767782e5b9dca7bf952e0c54fe24c41f7ec528036c0641a850e7e13bb3e1f8d628563930c484d5f4c7e6f57eb8210ae214170116934c7c4b9ecd38ebe379a4e370e6b036d4558d2c6a22f98bff9a1e6c0f32bd9fc1f1c2d3d42b351434a95544db8db01a6370828055e048246b9cca39ce36a812f2ce6975c8f20d8b1c156a842cc2ddce5ad756caa98ba0b4ceedb3f59dc50e2f832f77145425903391f84e4488e41d389923ee22c813923b0ddf78781242793b4a58b7d1b32f3c9e0e11f3ccd2bb9cb92364453a89cc9e9188cf075959f164daeb894937ef7ccfe675d841879bf5d9f41d427bee1a707fb5cdb87a369e7ad0778906f92d743ae9da5bd145c344ae748c41e4980816e6e5f30548125d8a8e78f08e742e876c3708db6934b9eadb446b7d406ded73d01f989936ca214b1c4cc24c741f9992e238a2d44fd9bdc474e11d3de5b86b97bb1468f0da8236c48e3dbe4925212dca23d462b8f87feefee83487ab429cb57aeb02c17e53ba39778e546ec827ffc5c0cc0ec0ddd876a0268ed27a1ffdd200d546ef1d9df96e0db747465df2e2ebdef50c907f5a23b0f23cefe866dc6a9e6e2fdb0e525ff5533e2bcb5df452e5601a840cca9fd0052ff1211276ec405e5816e41c010b242a63fa3b97b0a4d79fef738f263a16fbdb734fb11ef174bfd09709d8ebabe8e9b774c3a34d7f3146ead0cc4c6b329ec5ab3b4a58b40cf9f47199a794ccd89326d9e57d5d8faee65a21c34e49cb8994d6e69df42d0927cbe82e667cbd2ec0ecd89c8ba490ee78e4a11635587e5ccbb5fa3f93d3b776d4e522748e2bbf1dc2cb6d826a1d60d010981cf4305ec59f948f80a21c36ad3b10227825cde0c3f82f2960ddbc9e6dc31038f4b184440562cc3e74604b9162cec885324cfdf48da6c18c78fee359b53d8fe80e6b7a1d9fa37eda00179e517d9ef87c31486f184817051b7ff4421d016fad8728ce2d71435a102387084a9819b87c7858c267e1706455ee0a6dd069c057bb88df0fc7cddfd7298d273994e726fe747fffaff6b91d1bc6efe5e98f68ed762d20f8ee47ac5efd7bde79e106b84b886ab8cb69d8f3955ffd6eaca423b35d9a2d48444d296b5ac40877a137cdb150182c670abf67fdd8156a1a1da6eef74e1f6e01b771789d6b39fda761b0de124086c86d02e3912473efdc8082b3b9c97231464b6e286dbba0fa079d273ec82d620f459dda008d3975ac848794c9b47ac13bb401b1ed54544cfb010a929596a77ab12f8d78629ff81524fa66743e8197adaf9014fa51e590d6c54996dc52bca8cd965bcdcdc6d711d9b40b6fb5834e62e0ba5c41a25376393b1d79be14fee3400536f758c9c483a85d451b8f764241c2266e26449f588827ad7f2433c7810ef6f892d2da86b1109c14cef4c78796474b2f6d5c6761ea8debc6ad9a201395dbcc58d5dd098b965d76876d50dbd4cd1f3184a87cbd9d2c845d005ffece73dc9644c6d3876ea79c630d885ccf2ca10432094801bd0407f932f623132b66f690f59f163f942dd14f7a50881721e65ed674815fc0b70e57d2afdd90a58ea22cbefd117e7e2b3bbd08cf0287788d2e770cbc25bd10f5a0bf9d4fd604ff415b6e32bee283e8079c2f176911820de7d9a71d392796f396d0a4aebb1e54e1daf5a50712390e8294b288887da5ad9990b61846701c79de2f77c2fe259cb06e438b11d2b9fb9ef0dcd5666f3339326a46da9bd09d5004156eec0a4e09880a2a838fefc2d3a491eff358919d4c15ce6f0c9d32abdac334887be04601cfaf4092a8f4df25e8c4ea28ea8eb0d003d603ccc91a1555b2dc3b055c05d8b908a1d19890d7e31e6539e90021d57f040df5c2554d083c4345579c815c677d6e6a42e5b2e9f76635ec5908bd80bcb4fdb25012ea02104f86f9e31643608c1b18fcd94d04f59bc8658ebf09ca78837830c6453d8e143a474f715bacabc76f88e6742ac68fef2f6644bd0d3de978ff5f269b27ec6f1a5e025c2a0c01f1e9bf0ea7b4d54a80b4498a85307aad5f6098b335d22f0d31625ca95ed1856b55cd02dbf6431da0b536b7f5e073d22cbe7b09784f389a4935f5d854c64c7a3753f28dc2bac480343374d86f3278170233a3e74eaa461fad0590f8ce715981532203edaa762d23db1705e8efee53a85a8f5548a71d12a9644b025e782d88c87e46698ce1260a3ef37d8add19f895b712325e26ca5b6165e7ec28061925e18ca70f44c02d082cbb74e78915894a3a3de96f5ce3198d0b7e11d97a708dad811cc66424e1a741e979fdac0a15a62a5252b8f34deb23798f84469ddfc968e8961268868715affd8dc6a43b5c8716dd94372e331a6e0cebf4fd8696bc9133984e060efaee80f9921dbf3b18d510eff7fb414b961eba0e88f83dec6c66121ffe068f3a646eb86b631362d49cd38e1aa6704f0397908a0babf9cb962de4aec4b20530e2225e3ba7c8263d9a8a90640b12a9d0633eef22a42ccc478d1b0d1bf6a9590e0b9803479509c89b0187fb35ffe1aa6703e7d48c75281cdbbc6cce1e2e5f0bcd8689071747cdbac317a7d71430312927b95b1cd0fc15603da8395825aeb6499acc811e6974d4e46c8f6a7c17c8edc9727b9a68d65e7a1efb2b8085bbc0640e6fc56550a2e4e93d4b11bace5a9676716c44b1f2d5b2ab18ed45c6c71f6a58078d5814f925a52b1a601cd675c3e8ce218013895c071abcf2501cf24499cb5c3531b98a9b97dd762ed9af6f8d22c720f156c38eb7a27eabe22fa93d292497e8da1285ac223ad30a624542e2082f78adbe1059b2e7e6e831a850f0e9d71ade8c011cfbcb0718707fd6bf5b865c4af381bf431a5b22be6143ef12acb4e992c0361fabc14cfefeca590217c7416598a12623066e6b31b77c6839d6cc63e4a494d16616bcd0eab082b946bc90f324c3ffa131378b02937f677f6803f80d802cda7dac607aabe9df8bc19594711d12c85726ce4bcd6f686d13bbf391721f634b89216e1c947f88134c8b9df912306974a9140c68fe1badf8c0f693a197131846881f3ef0b3ae3ed3fbbde90b6acfa4e018000f1ac0b63bc4810690014d44dc8fe8ca5ac88f584a890f47786737a507cde305991ea0156db425e9f540b32ae01acf493db8bae8705fe46724dfdcb453cf4ee93b9305d29746b3628ea8e322ac70170ec02797e1c897e476f74d8b4d70eef872c4305015391304647c5c55171790e24188cd3e08db1b507f022b2b81c5d88abc776a41e0070c86c297ef832e548497a8b65e6bdc249c1a90ca0d72a0f2ff4b04206aad4c5bf55c7b84dde974a2e87504d2145aea3d3b478ebc028e88728b3e834d0f9f6ace8e0b570923b07e390971b035d9e4d1b6fd77db56f4196e55622c34897204690bfd3c69665a66e04f97d4b5e193f20632f5c57ab9aa496e274978b147f84bcf7e3be85bfa9245c2f55296619bdc9bdf1fb0986573206cc95ca47cb13cd663f82ea8042e42a3e8bc61c832f1745f83f1b8529d623406fa8184779141b58269adbd220afc546aa6a4d3be27567793a8fff83d71cec3ab7e59e5943f388ed3b1f3e8e254d6c6143fd0e63b4a2da47dbbebad178a323e2ccce33adeb1d4974c5cf6ab59c732afab6854a55cc165cefc17641bdb17e907d9d18b5dcc3155b8101153c30ccdc3e0bbf749bad08b4d201b35b564cb74323bdf6346bf956a3448ec6f7ca99f7e37a069b7771b32c15e2e0e5c9d6898e70e6ed0641516da2f95b7a34516883366b0b22358fd12e934934a4642ee1a8eb78225f74e8aa34e3906ed6d9585869a752e7db2b8c99a02c62512c1a435ae09fc7ef06caf578a4c7965ad684c044d336b8cf7e540cf14e6c6ebced155eb0c7b33a12754d451310adc3e5a737a31e978483004cc1a12c80c97cf316830a780b9dff407bf394b84ecbf37703849e3c37a4401d010f05be8cd5f9a011e2bfb7df829cc3efeb9479eca41e44c459329a0d2008073f156adfe0928ee8d5234cc568fc0ec128b5fbc23f445fcf8d4cfaeaacf3ea691ebfc7efc75dbf17d50f1d9eaa783c5116c086738b3434f7d71316fc96930f18f91f77ad6a2d6f30287f54b97f91f8062cbea7c4fa5ef38c970ef64aaef5a7ffdf2ffb999ae82e6f4227f69b2a3c330be24c34afc5eee54fdf8939ee4770a3b5f0f6cf07319530b1b4758d3c1ce2832300c3a2a54d9861335b12c72c3ba6105a1a1eae961fcfdae3e92390302c50ec28111549532411a505dd33b61e948e49afc8e3523e906c0bed14c7aad27aff202db4d3a415c41bedec87d37afe26915da864d812e9d1b4e5a140b1769935cdfb7223cd94d00657f9b70641759a481266b7026bb1a0fd0bbb643d0364b7b3d3535866d73db248f4bdd71f6fff2ef618b1556b92f337a4b4bbd8fa0d3c8ec1b9d01521044e1133bae69c52e44dabc3e7d4ad9503cefa382e0e7cd395dde86539c6f1d5b74315988766d3f5e7da0a45e2cce2ccb2090d8100abd35e0d40a3fc2d86258cf7d5d86cb033bf6057542768067a4ecb56e7e1b88ac0e7033adf86a59aa451ac2552b85de4e9bf88ac301733f05c99be883565d1637b522924f950aaac8cfd606b701c39192b55184a8c2366875c1e6d90e667f66d46596a0c155efa0ca09914a19d971220cad2b67d200489cdd70b59416d5442267d0a06cb2e6b8dfe7064736a40c7b1780fbc2600f659cffe8d79d620cee33c7504d6dc65023d4d8234ec04478ec25ec0e162abd0220c3c46e3901a0803be8bb5e7c45a19e7facce5593d48f04b4203983bbf5d9849742301d6e11436c2cae72d6af88f02ac1d3e50bbc489398dab9e5662d2c6062fdb187d30f607409723a817704bf742ad32f654a3e5a8c8743851e0d0391058f7eda7d686a4d544d7ad261bd818ce7df60e9f9467810f41da6315fd72a80a1a276619b4a39d7123d2ccd5bd15022edd65bfa93c068958564d2fb4c4f002512f6f9846529c6c1d5c051af467786d7d1ed5b66fa9834e6a9240bc56dbbd15d2a3ea6cdfadb2a19fd3b8df2c42e27f5833b93ce70ce0e7cf0bf6bafca369c82ccde75a119e589a7321f060979c5bf8dfc64112aabc269e8f1f83f304e17ae20a828396bb9721fdcf56861f2e5aae062a46b29cfb6c74a873ce2dc7da69a27fa7d5081e9c1a9dce056bea2cf6e9397c70d4317f322e73faaeb906c922e0e47149f4acf42f9517be203aea8aa759baafd63abdd3be6bc5a7cd34f2d01865fe8fbbe671935bb7ba1f889c0018fd0dc9ca365cd7b9a787fbb7a923661b681cb82b0d0c29b9e67431fc94de4c1291246a463dd8029cafd0a67954c4397b444c911aea08d7aba2661ec34b5153de3060a84e0f91d36bb5dc782953f32461cb3826d8b4d1364dccd9e84ea54273f93717c2b050b22a9ff773ff6ed6e29c06b406026b2b984aed2d43a6af6ff461c81e67f582ed161e92069e9bb8f5f33e3979b2f174336bf9a79a06ca842f75877a504b3ae4fe2fe18d936c2036af6cfda84ff93d64734a5b3c6ad267cde9e1127ffe4773a93ac640961d1c8f01285633ab9506956f8d772e017dbfa85a1b7dac433e27b7b0d64c31fa7654812c05bf0d395b98bc667ff836fa1a920bdfbfc0f38e96002a48a993e13e88a4e4f31fd3ee03b128bd17627fc10abb7e690fee7bfe5d38c305473da919581a9238cb361", 0xffc, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r5 = getgid() keyctl$chown(0x4, r3, r4, r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="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", 0xffc, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r9 = getgid() keyctl$chown(0x4, r7, r8, r9) getgroups(0x0, &(0x7f00000000c0)) fchown(r1, r2, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000f000000000000000000000001001800000000000a000000000000000000fcffffffffffffff00000000000002000100000000000000000000d53e53b8d25e75250000000000714992048dae3483c91300004d74f51a9e813e8d48e173fb4ec79300000000ff00"/122], 0x78}}, 0x0) 16:29:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000080)) 16:29:38 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000280)={0x1, 0x3ff, 0x2, 0x4, 0x1b, 0x8000, 0x1, 0xffffffffffff727f, 0x1, 0x8, 0x8, 0x75ee}) r5 = getgid() getgroups(0x3, &(0x7f0000000240)=[r3, r4, r5]) [ 2021.381209] binder: 16077:16080 BC_INCREFS_DONE u0000000000000000 no match [ 2021.388439] binder_alloc: 2935: binder_alloc_buf, no vma [ 2021.400528] binder: 16077:16080 transaction failed 29189/-3, size 0-0 line 3274 16:29:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000001540)='./file1\x00', &(0x7f0000001580)='trusted.overlay.origin\x00', &(0x7f00000015c0)='y\x00', 0x2, 0x3) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000001500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001480)=[{&(0x7f0000000100)="6cb87713a7b29aa626de08285343147baf73c2936e587585877051979b85e1d40f88ed1803fc5c09b6cab476aa427c1e27908984a2feba7e3192367e7ac825e380b856665539563eefda06cf5f1b5986717273ed1ac32ad12fc8ebc119b2a3f90a9dd6d133390a2ff00301e34d119c24f40355073dc7e6d690d999c5133689ad51950145673c04054be81296e8d197653d74dc1c8ace313bebfdf4c40bbd1b7f2951fbb01e8b543b795b9077", 0xac}, {&(0x7f0000000300)="dbc2fd7ec979e93dee28b6683f7f733d8b1f7e511961a6feb1cd7bdb611b1012ef98388eb3c2aca53ea0a722d4c52121ce6bec10ca51fc0d8228fb23b0ef6b2a5593290b2e8dce5c980b10e915bd515ea1196b96a99be758fe00bdb924366c0e496f8762e6493540b8501a062627cad512ba4bea966a8246ae826a481baa0223c82724356f7618c162f3e3370a9156344ebb2e75b62ac21cce685aa55ff1830a191d2f4874ea52c262df5038b63feefd1efab8cd397a8cab5e848a7a582e79b21033c3fefe21ccbd4623f5a73a15c89bc9f8185be33f2b9e51e9badb82c0c3904179caa42a700f4313c725a367595719759ffbfc2288a3c404b698d62100cb41b97d6c46814be8d322a506aaa9fafeb0cf7372fc6b01d7d98614b050130854b39509a216ddefdc81f20741adf939de328353de4547eee9ecb88aa14ea69108d457afb88a85b8bccfc208c0929ec433e68df0a0aaec53a22623f6a7549aad738dfd9ac83e8b7fc8e637df3533fe150394a02026aa11875fe0669a5c2a7df8ff714e764a2ad11c999aed94d570b2404b004662d0dfff6af9880a826253e3e0d4d341dcd5100f6750586a2aea98f68cac3076d29542ef2685f8e840e7788cf9536aad92bc4c3b91ef1232cfd62216de104dc19820dc02fa7dd67310d76c527d91e7c25a819cfde2f9a9cfe31f39554be5a711f9d031f963c74d32eecef40283b3dd8ae812e817e6b375f4cda259f0d4a3c54c56543e7aba5617c426a6eaf8ba9622a4d3c87a3932e7ae6960ad7664499102042b0ae87e19f3e2cddb1ad895cad0436ff730fbd0162025d8b67f665963ac88fda8ab69a8110cf7491d99385cfc320ea88a6e6924d590904eda5ee6d30debfead7bebe19f327d79b4b2ba974f0f27f32dd9aed96cbd2c9e810ebc31f09f19cedc3a86147bcd2a1cc2e9b7865f1d6ba0946f6dfe6ccdc791941a6b7711353e75ecac727fabf6c04f5927e40ecf639af69ffe347b8c24673e4803460da056ce6625f87d53b6bed89d959d17f1cc1901d974e6cd90521bbbe0c95748e1fda8b2e0a2f0cf37c6bffec71129887f2ad955ffc54042441b4c25292c83278533f180d2d742b64c62a49111fa7f47fb886986b4f90f54525f47789c3bbacee1ffc155601abc2eacb965d03997243b303627d9d27bcfcf34588e5d07aaf27e8131ece346e36bf4538373da25dc708ca06625a5650669ef2cb591e52f9c4fc842325aac02811a86d96afbae17a5ff2a71ef28c180074f92c9d07cb37080f55fb4d12d41aa470c1ff5c856aae528235c63c2f873707d95c50ccc389ded25837c564a9203f890341a59520ef4eb873b6f062484c33c10b5eafefe73ddf82e8f5be323d2f73b16c6a84602ec05cdd8a52ec305a0c81ddc6f234e704f58c6326a0dc932171a483b45c5cdfa4ba3c5632baa2cc2d17bf3bc7800df9f171868f2fbc27e0bd709cbd15a83316ba1440e6914fbb37e875c2e64948ff1de52b6c4e0d0a25ed998b6484c1aeb574ddd1debad1326205e91a818bb9b592b8eb20ea01cb75d917b1ccfeacc4b00c9981fdb8ff679e68104e5ca6d2ff6530b3936e9cff27eca7c750aeaf1bb5aa86ae70ba9a9554239c1fdc97d51d54a94c00b52a9177753758eba802ac6ab123811e2c45f804c9bcdf57ea171b1a27707ef0be97c829ba889b6c66f81701928fe6e1dd92fe60abebbd8527ca1ac83fe9e3e2ee39f43c5e62243140f8370b8fc968a307cec91abe927aaf34ac52514c5a015032f8a86db95d61e621f6fa45763849e1c9a6c1bb0e9f16de79eb8aeb7a844329bc1dd38e0cfa2bb62014668a02ff7abd65f667290d60a91e1a6cea9c906d60f56d3df8d11b0229c094dee8126e1e845b0b6ef4c61f7c26e78db712b2e1aaa3e7208bde643f6f423c911714a088bd31feb8c7920c9a537886ad01c942b0e901c15bd4908121dfe1a7285b7a1b0e542b6b0cb48e34f3a7a52e5fbbee40110ad07b15fa8e46324243982532a970e04f64d25dc8c413cb384abb69453a5957a47919f3fcc0972ca1cffe161e8551c97cb8b62e60e58f32848efdc6bd488da0955b3ff0208cc36d301ee33ff7f22c60ad80939ddfb4542f057116bd58f8bbf4ac56707e3ed6d870b9df8d834f50c3133bb696bad15b3a938f89917d690ec391c7051d6ba87919f2c403b00eb9748e3d20297418fad65744fd5c73f253d571e8b2df61fb3589402ebba2d64d9e1e56f714cd9fb5ca0b8323f74283dd26acaf04a305895097c22b76fc1f4869223ad71f4e8a48915ce2012ed22b7f545052dc3096a723604f46b1c8c23425f739ceeefae40fcbd59cbb21d0ed07da1ceb31b363fd72008678f28b3f19854eb9c430bfeec67fae4ce4b55f7894583ca2b6be53367308400347da8f89944ffc8867f1ff19643dfb17bcfc282594b21e5abcf174b70a205c24bb600d7bda4bef9c75c90e282733dbea8ac5e0f7094ffb7b050556c5bcae45ce3f57299b77e1292959b3b9df85ca72c6663390855001c9a49e698843922c652e830b05b33efbf089847aa15388a8e2a06a0924f5a0593b8a1971a478110317be1d2724c9692ead6c295f553b5165d730b45037e2996ad782afff5aa1087500986e37c4e095ed747ac77c22e74e84df301242d0ba8dca9923e41db56b6268366674eafefb5a884b83baea65cbbb541d29d778442261d05e82e1d65f5c6be97cf9ce7dd6340abdaca8f4fdafd1e8487d7f8b3f0207560102f5cc77226a82ad902a2b58e4cecad0e943b75747006861c107955464d3021aed0e51aaa2e81b2589cfa84e2df8173bea69c4d7ffd8e2653d00a2f063a52108ab9b8ab5da18f8a249d678d108233a91752e2485e5962a9f0c0e82431261d6335a6e53a31b5e489fbe7f86fd6032555e17e839e032f50c485ad604123d9a422cb2add2021b46beb8a9032d2d7665149389237c45e241f8b4a0e76261562a3a8fdbf664e5540181c1d406079cc0e1c226fe16e3730286579f2fe1e398cb547a275add899b0df9ec6bf077b93c3594ce3dd94298724ad584d681313cdc2fec57ce8a9f592cc3189b1d4f42a327970fc5481dfc9138dd7419fbaf36f551a1dd768e8ac355a40242e771a90541a6a5fe26ae7a3520a38660e4db4efd1c2c87c6ea3a2539969387ddb79bd2004e571d2717281226cd30a596f7d6fb268ada2f0b0fe158c5ab884bed4af2eba5f32e2f8d3a6fb26fdc4a94a088a6ef3e8bd8599c7b67442bec77cc58ae6a9253e901dca6a1d2cbb25052bc7f9c33a77b7baf22f4f463a8d4d9aea73d25586d1646119e07d621c92876d03a427a9aa333d91e247fb5001e9e38d30baef04e72d03e9bfcce1b63b935ba1eb4d9cc04883a49982220e38bcb8c806bc6a4a2ccbda2ecf95c0a406ab0ef482afe96a2cf0c6a80ee31e5edf9b7e2c44cfa6be8ac849e586195891af53ab3feae68147e725e03a2eb0a207a9cdacdfbebd9d5e92a840d6eca3237baeb09423f888b50d7b6a1bb58126123c8bfc26e42d60ee8d92b41c3e80b27d24f35cde0240c6f3321c4c5a98892898f0775baf3fd2c8d017064c0c994610e29c8bc8a5dc34b5a2435b87266d4f535858e4d558ed6fea5275e28d10a977097247d64aafb83238834ca6f7237a84de4dec19ee11d6d034ad79516035fb999a73a30dedd6dacc977999252590006a9c6bf0081cd53de50f932e4c4611c04d1315f113a3e33241e79363dfc5cf52350fdd30175c20cd8c57d0d797a741f37b9da777f0b63f57cb360c2ecfda2c1c51a839e37031882e16361ad4f4bd23997f7434689772d3428a68ee3108983f70fae8bd018f6fbaf9942afe9d64288559073ccdc5768b3ce310e722165190c77a63a1eac6f05b892dd4d7277bcd83e6af79db72f6192026ad09dbb83cf5a5c7e9007f77f90d9d5171ce7150a50711768d11f924ed725725c2ccaa0a70d2fabc61b363e74a8437fe001c59e4195decdb40d8af35c24087286226d6f99f29d25ed371f37816e92ae419f1b014fc0ac7fc09eb5750c06d3b5ae4e129a42ae904c9e39d894b71b89a478e5e8b6c28c8df85c3e3636f11eb2e1a99e72f181d9d402fce46e7dbcc655561abae07717a0d04035f6f007afa5cd38226f9535094120e5efbe5aaedeeb17d03da423f0861b5a13e8e3531269cff02b8f632ba5ec37e27fab47bc7708469805560734557f318369c2830c7c9733c22ca5ce5e1c6bee6e8cd1fdb294b05812e54439f7a314ee22cbe970f2346f071ff4f0bdcbd42536b932bf49297395191974c6a7caf9942043f8b4d025911274cb8dc3c574fb937cae74ba53db400ceba1e36e47f6a099c1912d0a904d7df95fb195bf689d2665f8479a15d67ebebc0bf666b56c214638b534611df85ee186b72c82c24dfe5e33148655f85318448c71b1d7b2dadb241ab77f59d0ff37f26d63a5e767b4401cfc8afef4dd5163bbc54e6441c89843aa5faaaaee9a6d8b82eb217150e94e331541871317f873ebdec93e86da9525ba7cda2f4470af796594dfadb8858d072bbd82d8746a1a92aa0222eb8d5409d05c5e9ab0990e848c891b883284db2974707a937b8e788d2380df7e1cf5df056b3b5b85e6527db48bc83a03cbbc1861f79aba901290f480f3f4806b621f92d6642f79236118f2cab69c600d0c365dad7d36be1a2db44b08636bf5aa09607b2706755ed1e5f504053e20a79775af60146cba2805b2de08d344aef9dd0f1844730ceb04d33e26a281b38d9e105e0e51474317b5159311b2f115efde82508c339fa962f8aea42bff2717f5671ba1f40df47d8b82213a534575172dbcaaa0e395e93d4291b2cb48b3025844bfdfcdb0fa643607dd9cfcd09825a9a50ce18dcfc2eff45f82d5edf6d3b6adf8e7d5ace43528b7bffd2b7a7bd2aa781e1cb06952217b75cdee4a10d0c09840c9ab10d5dd26e28cd1de387eb395f2e2fa45d1dd98af8619fb881b73cbb47f8d2b20853b45184eaaa0449cb6dc423c1f2a97252babf9cc95e810d5ea3679e7e4166e406b9daef6020a1bb105e0c43a872d94b695118c54e1c2b5ef9d9786ce04d003297c3606397522e13d3062d6f1c7c2e10fba5ae39a0c0fdf16387eb779c5791df0fcf419024ed1004b9c70e5ebbb2722a739d2d509124cbbe5599bc69316a6f2435dee5009149506655d18e65302580252cd855245fb1e1543b2675dd5c295171c6c4692fe7653b88a0a656e99710700cbc6247656958c4092d15dee80849b2bc40e109210de4282976c33ff36cef275698774971003dbdaa49ac45cd1e27a8b706650b9e5cb82ba694905ae120bfc8ef9852795cf26273188e36d4df37e65e567532e71edc92f3d1f3e8bb4386b5be45f1c15ea3df9178a73e1277bcb91a40a44ddb12900f8437af95a54411c91e63949ddbfa78f5260a4cc5a146540c392a5c73b604b00c55c56317e1624ba4ee45e102f4b4b7174d0b8c79fbe2752ca01d6accbd2cceb34c6aff1a73d0fbb7e55e480108fda7d31b80471548f3b9c881b242eed8770424fc056e9a9949429ff1c510ba3c905667e7366ec6a611e1473a9ff77f22da9cf002323c821cb3aa284bc721624a0b9afe97b36e6b0acf712170f175eda277bb96e4a91d3a4944f0470531d8c5041b03b73c6f126b36b6b072c360e175d9569149b860d14f7d04963ff9f252c53fc39f7385d4585b1fc07f666bbdc5caa7f8bdbc703c42e697b92f7987b576337161e763d4c051b160242622143318143414e91fde632f4ffc3d1f3e9be6473970f2caeded68", 0x1000}, {&(0x7f00000001c0)="aec91d64d071f26f4a224612099237fe007583b0974836fdaf654fc5d67c9fd2295a1d57f6989553789e621b96d6f93e1ea368d61270248c59f52d355ac9a282114e3d1dc96501dcf85dc874d791a5218c9b2ba1cd1c93069dc5214f5bff471306298f9f245cd31b9f28a895fb0a75f4162e5e754b9a9d2e5c7a5dedf396c46d945001b92bd6f0a4db30880e9c6d3579698a24949a64131af308e062a2ffb6f6b2", 0xa1}, {&(0x7f0000001300)="2a67b6aa04ac4d08a3c5e4fa9be6d6f2e88dbacafeb6432b0d9bf7c55b60c0916bb8172f6faa05ae0e74feb1095790d6787a28110c611580796957c480c1792c43f6573c926ecc8cfd3715f05491154a6acc905ea61427dc89addc94c95b46e653ecac450f4e831994fc691783ce89e65368c36ccc3d84b92a97c80cdd385ce1060c7b1e1c8bf74297ca655b15b010dc9ce85af4f75830dbc3d5e871fbd8bda97b604b371d687a64e4ef6ee693da6da0b26741fb54ed", 0xb6}, {&(0x7f00000013c0)="9c32ec7698d556fe40d397b7aa1be6b372e1a95eab18d481265187d2b675b3227505576943ce7be01757c9fc0fc7c7ec0e0995694c3560012ddfed4bae4c0855b1b62932310bd7d6893d8a1f1705e5d03d980039526820c7e5a347006c9384766a6cf6dce22175e967b09466efb876688fb8ab6f83ac87b3cd0322ca6d42b81d797fcd232ac8814c651c9fcda346be9eb3b39cb5c8c7ab0408fa73404aab3c9f696dcba1c654762cdfa5e6f0f0cd87aed92be12b09553939192b6fe583d45771", 0xc0}], 0x5, r3) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x300) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) setxattr$security_smack_transmute(&(0x7f0000001600)='./file1\x00', &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001680)='TRUE', 0x4, 0x5) 16:29:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200), 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000000c0)=[{}], 0x0, [{}, {}]}, 0x98) connect$inet6(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x6, 0x0) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)={0x16}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2021.457269] binder: 16095:16098 BC_INCREFS_DONE u0000000000000000 no match [ 2021.464495] binder_alloc: 2935: binder_alloc_buf, no vma [ 2021.470516] binder: 16095:16098 transaction failed 29189/-3, size 0-0 line 3274 16:29:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2021.525520] binder: 16105:16111 BC_INCREFS_DONE u0000000000000000 no match [ 2021.537106] binder_alloc: 2935: binder_alloc_buf, no vma [ 2021.543283] binder: 16105:16111 transaction failed 29189/-3, size 0-0 line 3274 16:29:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2021.576041] binder: 16122:16123 BC_INCREFS_DONE u0000000000000000 no match [ 2021.583935] binder_alloc: 2935: binder_alloc_buf, no vma [ 2021.589486] binder: 16122:16123 transaction failed 29189/-3, size 0-0 line 3274 16:29:39 executing program 1: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x4003fe) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10048) lseek(r2, 0x0, 0x4) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) [ 2021.625864] binder: 16128:16129 BC_INCREFS_DONE u0000000000000000 no match [ 2021.636348] binder_alloc: 2935: binder_alloc_buf, no vma [ 2021.642274] binder: 16128:16129 transaction failed 29189/-3, size 0-0 line 3274 16:29:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:41 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x0, [], [{0x5, 0xfffffffffffffffa, 0x80, 0x0, 0x20, 0x3}, {0xff, 0x1d0d, 0x7ff, 0x0, 0x3ff, 0x80000000}], [[], [], [], [], [], [], []]}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xf, "3db3d5e297e931aaf670bdcc1f1b05fbcfd30d67"}, 0x16, 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2024.427795] binder: 16137:16139 BC_INCREFS_DONE u0000000000000000 no match [ 2024.435007] binder_alloc: 2935: binder_alloc_buf, no vma [ 2024.440575] binder: 16137:16139 transaction failed 29189/-3, size 0-0 line 3274 16:29:41 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/29) socket$key(0xf, 0x3, 0x2) 16:29:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000000}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = getpgrp(0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r4) syz_open_procfs(r4, &(0x7f0000000080)='net/mcfilter6\x00') ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000140)={0x80ffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}) 16:29:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:41 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5be6}) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20100, 0x80) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xf) setresuid(0x0, 0xee01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x4, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(r3, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1680f90}, 0xc, &(0x7f0000000800)={&(0x7f0000000240)={0x58c, 0x6, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0x1}, [@typed={0x8, 0x7c, @u32=0x80000000}, @generic="991ba8c9da4e4ca515767801e69fba9b25bdf2204754c2a6de9bb3a9fa36934efc53fbec3ca7665ffd274a5e096948cfd8078e6ebae378c1fb640ff7257076a5982d06f804ca833ff5ff025e158668ba28fbc6e8c2640eb4966a4474c5c2b91f21fce183c63fa9a6cc92f364e4c0fe82ddb20671913681ab08a6691e0316458184f192a2", @typed={0x10, 0x81, @str='/dev/ptmx\x00'}, @generic="c1fb83e7504d2278283293aad4c6e17890e6915af08e4ed6b7e59e23f8098ec8820b8f257bfb6b7d61468a3949aa5f9b5b6b14bd21f97982dab216054830c0663b25c9453cf3e7bc34ae7ac87c37a4337c12210e4211d3761087af0fbd64a4b73c2c7f461bb9502b889e32739d9637927d1132968e2e9d52a401cd88355b6462bf48acad936afdeac38ffa3537a6c04a7afc2e8a80afeaee4c2b352a2b910e", @generic="b64ec446db4ee2d437921dba1acc06085659fa717b29bb6e67804e808253611f967d59aae4235ec9c70bec1daeb5b644ea21d521bb4a28d1b7076d7d16037bbf86cc1e9c012e6600c7a4eba5442ffde2e8a7c93dff4f6b7b2b038ce0447d5a7075469cdae3a23448b1ea1b4dc8e7e731c5b6bb66b99b6563e4ec275fd23a0fdd367c38a091eeeab32d38094286d131a1f670f692698fd4bfaa311dfcd0cc4b9a75aa7f0e2bf849d2f62c53f1753528f1b3af89d244c315c6f1306b7b491f44b6bc2842a5dd52bc2b747ef2c4b3dc", @generic="47acc558ea73ff8964fa9893212a28aa361b814518204b32a9c2bb802690584293e5550743798813ce3241b272e4e667a18d7bf1ec4a238ffd8b670dd631d9d4397dfe19bcf96a597a5536cea965aa2ce201", @nested={0x270, 0x51, [@typed={0xc, 0x22, @str='\'ppp0-\x00'}, @generic="fed2ccee9abc7a6afe67fc2d327e992879c40a30edbb7d4bbd6c9dcc1f8b38635f62a19b7a3279718353753fcadcd0e3a4935e3852d576c4aecff329c56ffc23dfda29a7a54781ce1b93a47525df6c24e24e97ee368c20", @generic="332cf2a29a0ff8f3c3c1769e80c25fed29b38b10c40b1fdca95ddc9d913631abd903fcab4b6cf5a870c5f64df3da05d511adb7917b94375b4f6c87818c36e8aa73cd431842b931fd38d20f5a33ef8d3ee5cc3094041fcb37517bda8321bb4b599d7e86cc123cf1f4519005d6752f8506f5a9b360f20273f9334c62301e4903b11ff0f3ce29a15b2cddf6108cc84cba9840bb119f189885ae1aa39a8e35d9e6a8d78d50", @typed={0x8, 0x34, @uid=r2}, @generic="9bf0cf283c807506e012e4051df85dd183e6bf67635d94cb7238093b85a59e4d6a5a71be0840193707cf676d5c957472186144bdb5a4138c4c2a379074871e6a659a562257a60b58ad4d922fdcab6304c15561bb34a52044183666722964dd3564cf1551bf40bfdaa280ec5dfc74561950621e95e2a35d2e23d375066d5251c460786a8cf1275ee4d321a464538938b12071299bd4d19b0621a8b151e4300d258bd0bf355e0d0cbcb8c78a7689089e99fe5e84c5c28dd00b0fe07d17b7a6efcfacca8abdd078b133bc417a77a5db149721d2e87a02e285601c670db5b94b7ee706d05b4975145a0f2365f073483b760f3604db", @typed={0x8, 0x6f, @uid}, @generic="a5e8e3f5a9f04bbbc70654db92d47d29748b1ee713e6a9cbd2c92ae061acc697c033e482eb4171ec48d7e52c725236899ce754930ec2411d7337737157526580757a45b96c61467dc7927d99362247f21406806e635895fbdc77d7f9f720c334e5d897"]}, @nested={0xa4, 0x2b, [@generic="2db8ef303630628be1d6d9bfcaf22d47a71213460b8e153c17ffbca60878454267e76ca6069ffad6414c16ce627e2f8d1a6a4e96ebf7de43a0e3d6a8133a203e8f5c5a3a50ea5cc10768fdb7c8784e8e7bc326c803e5dbdf213078801c9a46527917b815d0", @typed={0x8, 0x47, @u32=0x73}, @generic="1b1867da2610072e33811104950c1854850875fdd32b703f8ae5c78a5f5ac16c0d839bb1050f879f3198f2f9bee32bb0"]}, @typed={0x8, 0x2f, @ipv4=@rand_addr=0xfffffffffffff800}]}, 0x58c}, 0x1, 0x0, 0x0, 0x24008810}, 0x4000800) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x80ffffff}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000880)={{0x2, 0x4e23, @local}, {0x183, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8e3483c21e7f9330}}, 0x6c, {0x2, 0x4e24, @broadcast}, 'dummy0\x00'}) 16:29:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2024.537104] binder: 16148:16153 BC_INCREFS_DONE u0000000000000000 no match [ 2024.545292] binder_alloc: 2935: binder_alloc_buf, no vma [ 2024.552996] binder: 16148:16153 transaction failed 29189/-3, size 0-0 line 3274 16:29:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2024.629596] binder: 16173:16174 BC_INCREFS_DONE u0000000000000000 no match [ 2024.647153] binder_alloc: 2935: binder_alloc_buf, no vma [ 2024.653337] binder: 16173:16174 transaction failed 29189/-3, size 0-0 line 3274 16:29:44 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:44 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001840)={0x0, 0xeb, "fb70882f3ed7d57c1b7d565c6af38c79a69a6f9d96e97aea7b1c64b2250b3402ef484f90ec069dba0ce780921c1c7b8bcbbdb72f822e80d0eff75b189852fdb2f444eb4f5f2adc3b0742f470e6ac1ac0c56f1c7d47dc44103d2cb030bb8d93f541398bfa673d8919c27ce436b5c423e426310438e89dbf81d852084b77217a9e83d21f23a51d5a97e4c2a87a047772fab19fc204dc38d48a71164477e5ca90454fbb6600fd8281d92f1b628078d5cad03544046f77aa802506d598176ade2283b8d07dd05819164ae8e110e0c67deb9bdc1910810fedda2fa0586bf4a56bb548ce2a3107600cf165dbe0bf"}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x80000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001940)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000440)=0xc2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="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", 0xffc, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r10 = getgid() keyctl$chown(0x4, r8, r9, r10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) write$P9_RSTATu(r3, &(0x7f0000000300)={0x7e, 0x7d, 0x2, {{0x0, 0x57, 0xdcea, 0xc, {0x4, 0x1}, 0x1000000, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xa, '/dev/null\x00', 0xa, '/dev/null\x00', 0x6, 'system', 0xa, '/dev/null\x00'}, 0x12, 'eth0cpuset\'*wlan0\xe6', r6, r10, r11}}, 0x7e) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040)) 16:29:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 16:29:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2800006, 0x12, r3, 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0xfffffffffffffffc}) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10003, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x1}) 16:29:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000140)={0x2, 0x6, {0x51, 0x5, 0x4, {0x5, 0xcf0}, {0x6, 0x2}, @const={0x3, {0x3, 0x8000, 0x1, 0x1}}}, {0x56, 0x0, 0x1, {0x80000000, 0x80000001}, {0x6, 0x5}, @period={0xb1, 0x3, 0x8, 0xe63b, 0x8c, {0x4, 0x0, 0x7ff, 0x7}, 0x2, &(0x7f0000000080)=[0x8a, 0x2]}}}) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2027.474889] binder: 16188:16193 BC_INCREFS_DONE u0000000000000000 no match [ 2027.485972] binder_alloc: 2935: binder_alloc_buf, no vma [ 2027.493682] binder: 16188:16193 transaction failed 29189/-3, size 0-0 line 3274 [ 2027.539209] binder: 16207:16208 BC_INCREFS_DONE u0000000000000000 no match [ 2027.546779] binder_alloc: 2935: binder_alloc_buf, no vma [ 2027.552552] binder: 16207:16208 transaction failed 29189/-3, size 0-0 line 3274 16:29:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:44 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0xffffffffffffffff, 0x100001ff, 0x0, 0x8, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0xffffffffffffffff}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x20}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:45 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) open(&(0x7f00000001c0)='./bus/file0\x00', 0x44001, 0x80) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f5, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="080053f72000000000000000000b8c65000000000000000000e6c56c2d00"]) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0) 16:29:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x1, 0x27, 0xd1, 0xd, 0x80, 0xc9d9, 0x6c5d9c6f, 0xffff, 0x6, 0x7, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2027.629713] binder: 16210:16213 BC_INCREFS_DONE u0000000000000000 no match [ 2027.644187] binder_alloc: 2935: binder_alloc_buf, no vma [ 2027.649827] binder: 16210:16213 transaction failed 29189/-3, size 0-0 line 3274 [ 2027.675610] binder: BINDER_SET_CONTEXT_MGR already set [ 2027.683479] binder: 16219:16222 ioctl 40046207 0 returned -16 [ 2027.698664] binder: 16219:16222 BC_INCREFS_DONE u0000000000000000 no match [ 2027.705815] binder_alloc: 2935: binder_alloc_buf, no vma [ 2027.711909] binder: 16219:16222 transaction failed 29189/-3, size 0-0 line 3274 [ 2027.770415] binder: undelivered TRANSACTION_ERROR: 29189 [ 2027.777117] binder: BINDER_SET_CONTEXT_MGR already set [ 2027.777123] binder: 16219:16229 BC_INCREFS_DONE u0000000000000000 no match [ 2027.789484] binder: 16219:16222 ioctl 40046207 0 returned -16 [ 2027.789535] binder_alloc: 2935: binder_alloc_buf, no vma [ 2027.800996] binder: 16219:16229 transaction failed 29189/-3, size 0-0 line 3274 [ 2027.840856] binder: undelivered TRANSACTION_ERROR: 29189 16:29:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) io_setup(0x1b99, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0xfffffffffffffffc}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x0, 0x800, 0x11, 0x0, 0x3f, 0x0, 0x4, 0x0, 0x0, 0x12}) 16:29:47 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x10, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005340)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xe0, r3, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x678}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffdc51}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a8f}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f2e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b0000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x80) 16:29:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2030.495566] binder: 16231:16235 BC_INCREFS_DONE u0000000000000000 no match [ 2030.503480] binder_alloc: 2935: binder_alloc_buf, no vma [ 2030.509660] binder: 16231:16235 transaction failed 29189/-3, size 0-0 line 3274 16:29:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80000000, 0x7ff, 0x0, 0x0, 0x19, 0x7, 0x3, 0x8, 0x9, 0x2918, 0x7ff, 0x7f}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0xfffffffffffffffb}) 16:29:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f000000000000000000000001001800000000cb56000500000000000a000000000000030000000000000000000000000000000000000000000000000200010000000000000000000000000005000500008000000a00000000000000fe7b4f9da7d445d8574f9a595bcf54800000000000000000"], 0x78}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") recvfrom$inet(r1, &(0x7f0000000000)=""/234, 0xea, 0x40, 0x0, 0x0) 16:29:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2030.647178] binder: 16254:16257 BC_INCREFS_DONE u0000000000000000 no match [ 2030.654612] binder_alloc: 2935: binder_alloc_buf, no vma [ 2030.671333] binder: 16254:16257 transaction failed 29189/-3, size 0-0 line 3274 16:29:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x2, 0x3f, 0x4a}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2030.701767] binder: 16254:16266 got transaction to invalid handle [ 2030.708040] binder: 16254:16266 transaction failed 29201/-22, size 104-24 line 3128 [ 2030.718950] binder: undelivered TRANSACTION_ERROR: 29189 16:29:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcf62c57000"/25) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x7f}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x35eb9e15ff27430a, 0x19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x9, 0x12) [ 2030.752835] binder: 16275:16277 BC_INCREFS_DONE u0000000000000000 no match [ 2030.770227] binder_alloc: 2935: binder_alloc_buf, no vma [ 2030.781699] binder: 16275:16277 transaction failed 29189/-3, size 0-0 line 3274 16:29:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5be6}) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20100, 0x80) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xf) setresuid(0x0, 0xee01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x4, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(r3, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1680f90}, 0xc, &(0x7f0000000800)={&(0x7f0000000240)={0x58c, 0x6, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0x1}, [@typed={0x8, 0x7c, @u32=0x80000000}, @generic="991ba8c9da4e4ca515767801e69fba9b25bdf2204754c2a6de9bb3a9fa36934efc53fbec3ca7665ffd274a5e096948cfd8078e6ebae378c1fb640ff7257076a5982d06f804ca833ff5ff025e158668ba28fbc6e8c2640eb4966a4474c5c2b91f21fce183c63fa9a6cc92f364e4c0fe82ddb20671913681ab08a6691e0316458184f192a2", @typed={0x10, 0x81, @str='/dev/ptmx\x00'}, @generic="c1fb83e7504d2278283293aad4c6e17890e6915af08e4ed6b7e59e23f8098ec8820b8f257bfb6b7d61468a3949aa5f9b5b6b14bd21f97982dab216054830c0663b25c9453cf3e7bc34ae7ac87c37a4337c12210e4211d3761087af0fbd64a4b73c2c7f461bb9502b889e32739d9637927d1132968e2e9d52a401cd88355b6462bf48acad936afdeac38ffa3537a6c04a7afc2e8a80afeaee4c2b352a2b910e", @generic="b64ec446db4ee2d437921dba1acc06085659fa717b29bb6e67804e808253611f967d59aae4235ec9c70bec1daeb5b644ea21d521bb4a28d1b7076d7d16037bbf86cc1e9c012e6600c7a4eba5442ffde2e8a7c93dff4f6b7b2b038ce0447d5a7075469cdae3a23448b1ea1b4dc8e7e731c5b6bb66b99b6563e4ec275fd23a0fdd367c38a091eeeab32d38094286d131a1f670f692698fd4bfaa311dfcd0cc4b9a75aa7f0e2bf849d2f62c53f1753528f1b3af89d244c315c6f1306b7b491f44b6bc2842a5dd52bc2b747ef2c4b3dc", @generic="47acc558ea73ff8964fa9893212a28aa361b814518204b32a9c2bb802690584293e5550743798813ce3241b272e4e667a18d7bf1ec4a238ffd8b670dd631d9d4397dfe19bcf96a597a5536cea965aa2ce201", @nested={0x270, 0x51, [@typed={0xc, 0x22, @str='\'ppp0-\x00'}, @generic="fed2ccee9abc7a6afe67fc2d327e992879c40a30edbb7d4bbd6c9dcc1f8b38635f62a19b7a3279718353753fcadcd0e3a4935e3852d576c4aecff329c56ffc23dfda29a7a54781ce1b93a47525df6c24e24e97ee368c20", @generic="332cf2a29a0ff8f3c3c1769e80c25fed29b38b10c40b1fdca95ddc9d913631abd903fcab4b6cf5a870c5f64df3da05d511adb7917b94375b4f6c87818c36e8aa73cd431842b931fd38d20f5a33ef8d3ee5cc3094041fcb37517bda8321bb4b599d7e86cc123cf1f4519005d6752f8506f5a9b360f20273f9334c62301e4903b11ff0f3ce29a15b2cddf6108cc84cba9840bb119f189885ae1aa39a8e35d9e6a8d78d50", @typed={0x8, 0x34, @uid=r2}, @generic="9bf0cf283c807506e012e4051df85dd183e6bf67635d94cb7238093b85a59e4d6a5a71be0840193707cf676d5c957472186144bdb5a4138c4c2a379074871e6a659a562257a60b58ad4d922fdcab6304c15561bb34a52044183666722964dd3564cf1551bf40bfdaa280ec5dfc74561950621e95e2a35d2e23d375066d5251c460786a8cf1275ee4d321a464538938b12071299bd4d19b0621a8b151e4300d258bd0bf355e0d0cbcb8c78a7689089e99fe5e84c5c28dd00b0fe07d17b7a6efcfacca8abdd078b133bc417a77a5db149721d2e87a02e285601c670db5b94b7ee706d05b4975145a0f2365f073483b760f3604db", @typed={0x8, 0x6f, @uid}, @generic="a5e8e3f5a9f04bbbc70654db92d47d29748b1ee713e6a9cbd2c92ae061acc697c033e482eb4171ec48d7e52c725236899ce754930ec2411d7337737157526580757a45b96c61467dc7927d99362247f21406806e635895fbdc77d7f9f720c334e5d897"]}, @nested={0xa4, 0x2b, [@generic="2db8ef303630628be1d6d9bfcaf22d47a71213460b8e153c17ffbca60878454267e76ca6069ffad6414c16ce627e2f8d1a6a4e96ebf7de43a0e3d6a8133a203e8f5c5a3a50ea5cc10768fdb7c8784e8e7bc326c803e5dbdf213078801c9a46527917b815d0", @typed={0x8, 0x47, @u32=0x73}, @generic="1b1867da2610072e33811104950c1854850875fdd32b703f8ae5c78a5f5ac16c0d839bb1050f879f3198f2f9bee32bb0"]}, @typed={0x8, 0x2f, @ipv4=@rand_addr=0xfffffffffffff800}]}, 0x58c}, 0x1, 0x0, 0x0, 0x24008810}, 0x4000800) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x80ffffff}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000880)={{0x2, 0x4e23, @local}, {0x183, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8e3483c21e7f9330}}, 0x6c, {0x2, 0x4e24, @broadcast}, 'dummy0\x00'}) 16:29:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = open(&(0x7f0000000080)='./file0\x00', 0xa800, 0x201) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2033.658205] binder: 16299:16301 BC_INCREFS_DONE u0000000000000000 no match [ 2033.682827] binder_alloc: 2935: binder_alloc_buf, no vma 16:29:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:29:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:29:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 2033.704921] binder: 16299:16314 got transaction to invalid handle [ 2033.711219] binder: 16299:16301 transaction failed 29189/-3, size 0-0 line 3274 [ 2033.720792] binder: 16299:16314 transaction failed 29201/-22, size 104-24 line 3128 [ 2033.730854] binder: undelivered TRANSACTION_ERROR: 29189 16:29:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2033.779979] binder: 16322:16326 BC_INCREFS_DONE u0000000000000000 no match [ 2033.797557] binder_alloc: 2935: binder_alloc_buf, no vma [ 2033.803491] binder: 16322:16326 transaction failed 29189/-3, size 0-0 line 3274 [ 2033.859283] binder: 16334:16337 BC_INCREFS_DONE u0000000000000000 no match [ 2033.866317] binder: 16336:16338 BC_INCREFS_DONE u0000000000000000 no match [ 2033.869502] binder_alloc: 2935: binder_alloc_buf, no vma [ 2033.878924] binder_alloc: 2935: binder_alloc_buf, no vma [ 2033.878931] binder: 16334:16337 transaction failed 29189/-3, size 0-0 line 3274 [ 2033.892696] binder: 16336:16338 transaction failed 29189/-3, size 0-0 line 3274 16:29:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:54 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) geteuid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x9, 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") inotify_init1(0x1c1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r5 = getpgrp(0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000100)=r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000080)={&(0x7f0000000400)="68da5d700f4a3dc9326f91decfb71333763a34c06abee2ef6564127b11c583f345f330c086254c97ca66b9cbcd11c243090805d188a91d9147b9143b7680e6e010e790bb54bcfc3ec72d113d723c7628cfa4067f40f930835a88f40c9ee80b3eb0838dbf13ea38902a0437dc9175839a07362ae0497f827f2102b64b745ec9439dfcead87d9e1875513a20c859fab7c720b591efa1af47ea63a665d07032bf59ddda52b33cf9bccca55d47c4c74ecfac4d98a8acdafd236121cf2af1512919ea8fe5edf4f9bd9dcaeca75c5f6d4f027245a3fdce888f8cf2cfa44b950cf499cb7030fc4b3636f3ca94e8c9386f", 0xed}) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can={0x1d, 0x0}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x22}, 0x5, 0x4, 0x200, 0x400, 0xffffffffffffffff, 0x4000000, r6}) r7 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x800) r8 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="086310400000000000000000000000000000000011634840000000000000000000000000000000040000000000dd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000bfdf6a395c16e0a9ed99a60daf7c29daa728dcb83cd404627c99c93311ab2d23fda696be1c4a4f25c60943d523105ee58b55fc7c40e3d894b5c7dd09d5d363"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r7, 0x9fca28741c22a61d}, {0xffffffffffffffff, 0x21}, {r8, 0x3b058c5f3566a440}], 0x3, &(0x7f0000000580)={r9, r10+30000000}, &(0x7f00000005c0)={0x40}, 0x8) r11 = geteuid() setreuid(r11, r11) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x80, 0x8, r6, r11}, {0x8, 0x4, 0x3, 0x2, 0x8, 0x0, 0x7fffffff, 0x6}, {0x80000000, 0x7, 0x5, 0x321f8f57}, 0x81, 0x6e6bbb, 0x4, 0x1, 0x2}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3507, 0x0, 0x0, 0x5, 0x3, 0x9, 0xd1}}, 0xe8) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x20400, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x0, 0xfffffffffffffffc}) 16:29:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = getpgrp(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1000, 0x1, 0x5, 0xde5e, 0x0, 0x5, 0x1, 0x4, 0x0, 0x8, 0x8, 0x800, 0x1, 0x7, 0x0, 0x58, 0x3, 0x0, 0x81, 0x1, 0xfffffffffffffff8, 0x1, 0x182a, 0x12, 0x7, 0x7f, 0xb9, 0x100000001, 0x9, 0xa8f2, 0x7, 0x1, 0x2, 0x8, 0x6, 0x2, 0x0, 0x100000000, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10920, 0x90c, 0x5, 0x5, 0x800, 0x1, 0x1}, r1, 0x4, 0xffffffffffffffff, 0x2) fcntl$setsig(r2, 0xa, 0x80) tgkill(0xffffffffffffffff, r1, 0x13) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:29:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:54 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000002000000"], 0x78}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) getsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffecc) [ 2036.834371] binder: 16381:16383 got transaction to invalid handle [ 2036.840923] binder: 16381:16383 transaction failed 29201/-22, size 104-24 line 3128 16:29:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) r2 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000001c40)='#\x00', 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) socket$key(0xf, 0x3, 0x2) keyctl$get_keyring_id(0x0, r2, 0x7) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000004c0)=""/4096, &(0x7f0000000180)=0x1000) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000140)={0x0, 0x100}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000e2385a1f2f40ca4e911f22ba7cd78968a336e588d500cbc275a775f31b157ce41c1276732dfb2c55c51ead3062e7122bd09c13526f9f380a08c710b5ac30580c21a8efb4d9366f5ce5fd2945c7c5ad9cde347309cafb53973a1bb60352635656"], 0x78}}, 0x0) 16:29:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) getrandom(&(0x7f0000000140)=""/253, 0xfd, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) getpeername$packet(r4, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001880)=0x14) r6 = geteuid() setreuid(r6, r6) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000018c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x4e21, 0x18b5, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0x0, r5, r6}, {0x318, 0x2, 0x9, 0x4, 0x0, 0x2, 0x3, 0x2}, {0xfee1, 0x9, 0x2}, 0xffb, 0x6e6bb2, 0x1, 0x2, 0x2, 0x3}, {{@in6=@remote, 0x4d6, 0x3c}, 0xa, @in=@local, 0x3507, 0x3, 0x1, 0x7fffffff, 0xdcf, 0x100000000, 0x6}}, 0xe8) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:57 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:29:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2039.725291] binder: 16394:16399 got transaction to invalid handle [ 2039.737228] binder: 16394:16399 transaction failed 29201/-22, size 104-24 line 3128 16:29:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='net/bnep\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:29:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:29:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x400, 0x4a, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffbfffffb}) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "b281ec1038210edf", "f55a9605e509f53ec9f2c5bb60b305770fd0316956cba61c44e6e1cd96939695", "01fa6945", "7c2407d126d1ddcc"}, 0x38) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2039.815693] binder: 16409:16416 got transaction to invalid handle [ 2039.838653] binder: 16409:16416 transaction failed 29201/-22, size 104-24 line 3128 16:29:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sync_file_range(r1, 0x8, 0xbcb, 0x4) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$smack_current(r2, &(0x7f0000000080)='vmnet1eth1selinux@\x00', 0x13) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:29:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:29:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = dup(r1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x3}, @mss={0x2, 0x80}, @timestamp, @window={0x3, 0x1, 0x8}], 0x4) r3 = syz_open_pts(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x16}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:29:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 2039.916199] binder: 16434:16440 ioctl c0306201 0 returned -14 [ 2039.934027] binder: 16434:16440 got transaction to invalid handle [ 2039.943120] binder: 16434:16440 transaction failed 29201/-22, size 104-24 line 3128 16:30:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) syz_open_pts(r2, 0x28080) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000080)={0x9, 0x6, 0x5}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000180)="05000000000000809df070aa7ffed709eb0061f83e91df5f17a7ae82cf85656b50e1dab22a897032685c4b1d36792dba4cb841a53d2eadc877ef55b4254103626ab9f32f8986656e307ce579cc31f29050637af3f39da9c185a92cb7f9f6d8aae95c0170042133cd4cefb9f46c978d338a5531eaf3dd91b4fdef87faac48612d270eb38cb748ef") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000}) 16:30:00 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:30:00 executing program 1: socket$key(0xf, 0x3, 0x2) 16:30:00 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2042.815468] binder: 16460:16466 ioctl c0306201 0 returned -14 [ 2042.836240] binder: 16460:16466 got transaction to invalid handle [ 2042.845519] binder: 16460:16466 transaction failed 29201/-22, size 104-24 line 3128 16:30:00 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x18000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x100000000, 0x5, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0xa2b, 0x7}) r2 = syz_open_pts(r0, 0x88060) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace$cont(0x1f, r3, 0x7, 0x61774319) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup2(r6, r7) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x61, 0x0, &(0x7f0000000200), 0x9298212b483db8f, 0x0, 0x0}) r9 = dup(r4) ioctl$GIO_FONT(r9, 0x4b60, &(0x7f0000000080)=""/83) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r11, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r11, 0x5411, &(0x7f00000001c0)) ioctl(r10, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = open(&(0x7f0000000000)='./file0\x00', 0x84000, 0x100) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2e4, 0x0, 0x101, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe09}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb28}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc17d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba9b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31ca2de6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x40840}, 0x8800) 16:30:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x8, 0x246a, 0xfffffffffffffff8, 0xf, 0x8000, 0x61, 0x2, 0x80, 0x6}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2042.904010] binder: 16480:16485 ioctl c0306201 0 returned -14 [ 2042.910238] binder: 16480:16485 got transaction to invalid handle [ 2042.916567] binder: 16480:16485 transaction failed 29201/-22, size 104-24 line 3128 [ 2042.964122] binder: 16493:16495 got transaction to invalid handle [ 2042.972393] binder: 16493:16495 transaction failed 29201/-22, size 104-24 line 3128 16:30:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x2000016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x7fff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:03 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:03 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"/332], 0x3ba}}, 0x0) 16:30:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca58664d07d000000000000000000") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2045.850531] binder: 16514:16517 got transaction to invalid handle [ 2045.860670] binder: 16514:16517 transaction failed 29201/-22, size 104-24 line 3128 16:30:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:03 executing program 1: socket$key(0xf, 0x3, 0x2) socketpair(0x2a57f72bef138509, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[]}}, 0x20044000) 16:30:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2045.916713] binder: 16529:16531 got transaction to invalid handle [ 2045.942327] binder: 16529:16531 transaction failed 29201/-22, size 104-24 line 3128 [ 2045.985677] binder: 16540:16542 BC_INCREFS_DONE u0000000000000000 no match [ 2045.992988] binder_alloc: 2935: binder_alloc_buf, no vma [ 2045.998450] binder: 16540:16542 transaction failed 29189/-3, size 0-0 line 3274 16:30:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x47, 0x2296, 0x3, 0xfffffffffffffffa, 0x10, 0x5, 0xf7, 0x1f, 0xfffffffffffffffb, 0x200040000, 0x400, 0x3ff}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="07001f008bd911e1a43e1bd887c2e3fe70559513bf4ff6b64f51c205d24c357128d5754375ce2ac9d44c22a70a3fd4f9d7202e787b9423f2005378849c89df1190b37cd237382e4904dd526fe16bba71439dc3efdc7ad1237d4f323f39b6120b85b1dafa054af5656b8f97"]) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)="fa87863e7b914d2d24e461b6b6297c2c9fbcb4f725120e2a86a05aa73d30bbdd94f6e7b8325152198ef029c6adf1ce", 0x2f) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000780)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:06 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:06 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:06 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = getpgrp(0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x20000, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can={0x1d, 0x0}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x22}, 0x5, 0x4, 0x200, 0x400, 0xffffffffffffffff, 0x4000000, r3}) r4 = geteuid() setreuid(r4, r4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x40f, 0x4e21, 0x10001, 0x2, 0x20, 0x0, 0x89, r3, r4}, {0x9, 0xffffffffffff0001, 0x3, 0x9, 0x0, 0x2, 0x7, 0x3}, {0x1000, 0x2eef, 0x0, 0x4}, 0x4, 0x6e6bbe, 0x2, 0x0, 0x0, 0x5b4a4c72075fdc47}, {{@in=@rand_addr=0xfffffffffffffffa, 0x4d6, 0x2b}, 0xa, @in=@empty, 0x34ff, 0x1, 0x0, 0x3, 0x10001, 0x70c, 0x47}}, 0xe8) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005340)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xe0, r6, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x678}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffdc51}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a8f}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f2e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4004414}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x124, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d45}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x304}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x58eb863fbbef1170}, 0x10) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r7, 0x0) ioctl$BLKREPORTZONE(r7, 0xc0101282, &(0x7f0000000400)={0x1ff, 0x5, 0x0, [{0x6, 0x7, 0xc4ba, 0x1, 0x8, 0x0, 0x8}, {0xfffffffffffffff8, 0x10001, 0x101, 0xa6, 0x800, 0x111, 0x1}, {0x0, 0x4, 0x9, 0xc3, 0x6, 0xfffffffffffffffd, 0x70}, {0x0, 0x6, 0x8000, 0x1, 0x7fff, 0x2, 0x2}, {0x7, 0x400, 0x1, 0x7, 0x32d, 0x5, 0xffff}]}) ptrace$cont(0x7, r1, 0x4, 0x100000001) 16:30:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x17}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000780)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2048.861383] binder: 16549:16552 BC_INCREFS_DONE u0000000000000000 no match [ 2048.874948] binder: 16549:16552 got transaction to invalid handle [ 2048.884536] binder: 16549:16552 transaction failed 29201/-22, size 104-24 line 3128 16:30:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000780)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2000, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x40000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x16}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2048.944938] binder: 16567:16568 BC_INCREFS_DONE u0000000000000000 no match [ 2048.961153] binder: 16567:16568 got transaction to invalid handle [ 2048.974526] binder: 16567:16568 transaction failed 29201/-22, size 104-24 line 3128 16:30:06 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000080)={0xa5, 0x4, 0x100, 0x7fffffff}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/164, 0x3}) [ 2049.030424] binder: 16576:16578 BC_INCREFS_DONE u0000000000000000 no match [ 2049.064159] binder: 16576:16578 got transaction to invalid handle 16:30:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = getpgrp(0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in6=@empty}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 16:30:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2049.077358] binder: 16576:16578 transaction failed 29201/-22, size 104-24 line 3128 16:30:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x7f, 0x10001, 0x7, 0x5d4, 0x0, 0x81, 0x0, 0x14, 0x6, 0x0, 0xffffffffffffffff, 0x4ddb, 0x664, 0x4, 0x101, 0xffffffff, 0x8, 0x81, 0x80, 0xffffffff, 0x0, 0x4, 0x0, 0x101, 0x6, 0x10000, 0x401, 0xe5f5, 0xffffffff, 0x3, 0x1, 0x6, 0x3, 0x27d, 0x1, 0x8, 0x0, 0x3, 0x4, @perf_config_ext={0x9, 0x5}, 0x29cb1, 0x234, 0x317, 0x3, 0x8, 0x2, 0x1000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2049.140283] binder_alloc: 2935: binder_alloc_buf, no vma [ 2049.158177] binder: 16589:16591 transaction failed 29189/-3, size 0-0 line 3274 16:30:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080)) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000300)={0xff}, 0x4) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0x7, 0x400, 0x7fffffff, 0x7}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r5, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=""/181, 0xb5, 0xffffffffffffffff}}, 0x10) 16:30:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @empty}, &(0x7f0000000080)=0xc) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f000000000000000000000001001800000000000500060000000000000000000000000000000000000000000004000002000100000000000000000000ff070005000500000080000a000000000000000000000000ff003ca001000000000000d8039338617754d3"], 0x78}}, 0x0) 16:30:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2051.904179] binder_alloc: 2935: binder_alloc_buf, no vma [ 2051.912221] binder: 16601:16607 transaction failed 29189/-3, size 0-0 line 3274 [ 2051.921543] binder: undelivered TRANSACTION_ERROR: 29189 16:30:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x180, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) set_thread_area(&(0x7f00000000c0)={0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xfff, 0x317b0fd5, 0x7, 0x8a4, 0x2, 0x3}) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') r1 = dup(0xffffffffffffffff) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000040)=""/94, &(0x7f00000000c0)=0x5e) ioctl$TIOCNOTTY(r0, 0x5422) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:30:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x19}, 0x6b, r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00001dcf48)=ANY=[@ANYRES16=r4]}}, 0x0) 16:30:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2051.996792] binder_alloc: 2935: binder_alloc_buf, no vma [ 2052.006671] binder: 16618:16619 transaction failed 29189/-3, size 0-0 line 3274 [ 2052.033596] binder: undelivered TRANSACTION_ERROR: 29189 16:30:12 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x42) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r5, 0x8200) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000001940)={&(0x7f00000006c0), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0x12, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x80000000, 0x4, 0x3, 0x7}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff000000002e4e71cc"], 0x78}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x64, &(0x7f0000000000)=0xc44, 0x4) [ 2054.920362] binder_alloc: 2935: binder_alloc_buf, no vma [ 2054.931768] binder: 16640:16643 transaction failed 29189/-3, size 0-0 line 3274 [ 2054.947824] binder: undelivered TRANSACTION_ERROR: 29189 16:30:12 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:12 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:30:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_pts(r1, 0x10000) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:12 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:12 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0xfffffffffffffffc, 0x4}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 2055.031437] binder_alloc: 2935: binder_alloc_buf, no vma [ 2055.051880] binder: 16662:16671 transaction failed 29189/-3, size 0-0 line 3274 [ 2055.061002] binder: 16662:16671 ioctl c0306201 0 returned -14 [ 2055.068375] binder: undelivered TRANSACTION_ERROR: 29189 16:30:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[]}}, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)) [ 2055.129291] binder_alloc: 2935: binder_alloc_buf, no vma [ 2055.140553] binder: 16689:16692 transaction failed 29189/-3, size 0-0 line 3274 [ 2055.166970] binder: 16689:16692 ioctl c0306201 0 returned -14 [ 2055.173924] binder: undelivered TRANSACTION_ERROR: 29189 16:30:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:15 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)="03db57e993b6cd666fc4b662dea39c479f6ff8a8aeb2e3b02a6d40322937ba3ed140e2345a9a548613e588ed34cbccb90e3b529e732eba799dc840a8aeea5b08c04c47dce523497c4b7c7863a76a7e572a") 16:30:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:30:15 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:15 executing program 1: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a0000000000000000000000000000000000001000000000000200010000000000000000000000000005000500000000000a00000000000000fe800000e672000000000000000000ff00000000000000008f23aba7821ba1caba2da3b775b0a7228267030232260652f4c05fefb23089a8e6aeda60b441c7b76d5c139b9ed4444e641d2d3a0e72cb519be26676890ad6"], 0x78}}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) 16:30:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7613e201, 0x0, 0x0, 0x0, 0x7}) 16:30:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x6, 0x4) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2058.038170] binder_alloc: 2935: binder_alloc_buf, no vma [ 2058.046598] binder: 16717:16719 transaction failed 29189/-3, size 0-0 line 3274 [ 2058.063131] binder: 16717:16719 ioctl c0306201 0 returned -14 [ 2058.069631] binder: undelivered TRANSACTION_ERROR: 29189 16:30:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) geteuid() 16:30:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2058.116873] binder_alloc: 2935: binder_alloc_buf, no vma [ 2058.122812] binder: 16734:16739 transaction failed 29189/-3, size 0-0 line 3274 [ 2058.174298] binder_alloc: 2935: binder_alloc_buf, no vma [ 2058.184271] binder: 16749:16751 transaction failed 29189/-3, size 0-0 line 3274 16:30:18 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @initdev}, &(0x7f0000000140)=0xc) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$KDDELIO(r0, 0x4b35, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:18 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:18 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYRES64=r0], 0x8}}, 0x0) 16:30:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x6, 0x6}, {0x6, 0x80}]}, 0x14, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xb8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x3}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xc3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:18 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2061.076262] binder_alloc: 2935: binder_alloc_buf, no vma [ 2061.088719] binder: 16757:16766 transaction failed 29189/-3, size 0-0 line 3274 16:30:18 executing program 1: socket(0x2, 0x1, 0xfffffffffffff534) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:30:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xb0, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper, @enter_looper], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2061.147502] binder_alloc: 2935: binder_alloc_buf, no vma [ 2061.159453] binder: 16779:16781 transaction failed 29189/-3, size 0-0 line 3274 16:30:18 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x100) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x5, 0x7, 0xb1, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$RTC_WIE_ON(r2, 0x700f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x16}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:18 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2061.195355] binder_alloc: 2935: binder_alloc_buf, no vma [ 2061.201291] binder: 16796:16797 transaction failed 29189/-3, size 0-0 line 3274 16:30:21 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:21 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xac, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @enter_looper], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:21 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x7fff, 0xfffffffffffffffe, 0x8001, 0x10000, 0x5}, 0x14) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "dc2a6cb91851584daa8f0d012c13c045a2e6dc3381208ccdc3e61e97e763944efcb64df6cf4e609eb7820eb91b7b779c195e58fb40c5792451b28d351cbc16283a4411805fa3fe5b62166a9eb5e34b465e46834d9b38a87965830fac9b3ad1cedbd58b6dc24fa2c800caf3e1d3676db901d891e09f250aec14b3b4961e"}, 0x81) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) 16:30:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0xfffffffffffffffd, 0x0, 0x8}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:21 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) time(&(0x7f00000001c0)) 16:30:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xa8, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2064.097727] binder_alloc: 2935: binder_alloc_buf, no vma [ 2064.111013] binder: 16810:16812 transaction failed 29189/-3, size 0-0 line 3274 16:30:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_netfilter(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xa040040}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x6, 0x8, 0x110, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x3}, [@typed={0x8, 0x25, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x16}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x9, &(0x7f0000000140)=0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r7, 0x8200) ioctl$VT_SETMODE(r7, 0x5602, &(0x7f0000000880)={0x10001, 0xffff, 0xfffffffffffffffd, 0x9, 0x3}) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r8, 0x0) r9 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r10, 0x0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/enforce\x00', 0x484601, 0x0) io_submit(r5, 0x5, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f0000000180)="8044971273079e09714e583a1868e4a42ddd9501dfcda853a60421da366c10329f6eccabbce942025000f493a07f4c4b75a3fd7ff39f5b73827499e851a69cbf923cb6f72f1474e06ed74abc96e814616e311a283744c201b2090b1a35a1b1166b284df281d88bd18e6107239fc06404974231d47e511370bdef3bc206c24382f980c0a7eaa31265c78dae182c58e9d5a76c277ddfdbe041df4f6dabcb6f9c459fa0374de9689433ee92cb1afbd145562b3fadac1135dc1ba12c2d6aed797f8ac707c2edec06d6586593b201060c0f", 0xcf, 0x1c5aa459}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)="7fc6d64d06fcb5ef2038b907d9b9a3499fb7adc6e51bfed03c729c93d722c9d16a89a48deb6381fde70379787f872f0a1242", 0x32, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000000340)="8242b8964f93e470e134a57a1fdad646aa8644695ea5fe13264af50c34bfccda70b34b14d0b2bada0469326e6c8cc3eff85f035ed7a3ba262575cf666754160f510570a611e1da928d8fb25aa2c8a825f66ca97ead8add16804f3c0d982cb83a31667e738715aef40f3063f622d1163394e2b30db87a7d5f413ded681f6b2844bf1d8e33fbca388662b43e70b39f7f4e", 0x90, 0x3, 0x0, 0x1, r8}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000440)="b824caf2", 0x4, 0x1, 0x0, 0x2, r10}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)="3452c71512520fff90ae584ca052140c546f", 0x12, 0xbe1, 0x0, 0x3, r11}]) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x80ffffff}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_mreqsrc(r12, 0x0, 0x25, &(0x7f0000000080)={@initdev, @initdev, @dev}, &(0x7f00000000c0)=0xc) 16:30:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x98, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2d}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2064.167108] binder_alloc: 2935: binder_alloc_buf, no vma [ 2064.172973] binder: 16829:16833 transaction failed 29189/-3, size 0-0 line 3274 16:30:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x54, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @register_looper], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:21 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0xfffffffffffffcef}}, 0x0) [ 2064.214226] binder_alloc: 2935: binder_alloc_buf, no vma [ 2064.219787] binder: 16841:16842 transaction failed 29189/-3, size 0-0 line 3274 [ 2064.244587] binder_alloc: 2935: binder_alloc_buf, no vma [ 2064.257981] binder: 16843:16844 transaction failed 29189/-3, size 0-0 line 3274 16:30:24 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:24 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000380)={r0, 0x0, 0x905, 0xc10, 0x100000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r3, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7, 0x5}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x8, 0x2, 0x4}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r5, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x50, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:24 executing program 1: socket$inet(0x2, 0x2, 0x6) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="ab4299a66bd2dfff6788ec8436d069b82a4b2767bb762b1285cba04008dfdd20599485c905579044dd4babcedeba3d1fcf33aa383cf67aaeb8ca19d7bc86be9f7d71cdfbb2f74e6a397498e99e021d046b1eaecf30cb11ed2d969548e5dc496fd8b0b48a5eca1b28306dcdf877a2a346730e75064340b422c2938ff8e415b08fa18bf75afae3bdf221d3258cd9561ffafa2a43860a6709d6218dbe7d6a69ac87ae7aabfc942ebcd7bf4b45c300bb", &(0x7f0000000100)="28e3e8d33793f2efc88603d2d2cc69edbd6a3d8e90e910d0b058454ff21728cb0678a15a2af3e51f14a89e96f28e4aef6e451cb9e8f64d89", 0x4}, 0x20) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f000000c6df9480d13f8ec9010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff46c7000000000000"], 0x78}}, 0x0) 16:30:24 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:24 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1a080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0xf) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r4) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2067.153167] binder_alloc: 2935: binder_alloc_buf, no vma [ 2067.172041] binder: 16862:16867 transaction failed 29189/-3, size 0-0 line 3274 16:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480), 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2067.214079] binder_alloc: 2935: binder_alloc_buf, no vma [ 2067.220577] binder: 16886:16887 transaction failed 29189/-3, size 0-0 line 3274 16:30:24 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x6, 0x8f05, 0x800, 0x6, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000001740)={0x16, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r3 = fcntl$getown(r0, 0x9) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="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", 0xffc, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r7 = getgid() keyctl$chown(0x4, r5, r6, r7) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/net/tun\x00', 0x40000, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r12 = gettid() r13 = geteuid() setreuid(r13, r13) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="d6aaba20dfef4db42a4a3d8f0a1e42d41c5c28d79231acba13ae17c7eaf385e1a55d17e2016c2be18a8c6cb25c07799151ee6d957431d8fc8fc5176c1e6764b64cb586edb1b8f6298c95d616d06155d44413af8f906d2a3ba9111fd369872300a2a5ae863352e05e19bf15b4c67c682bf138b6dcd3e2d154f5f0bb85e41ce60d22137ee0582d99f2dac8f66467b0f9a410569afb08f4383f7942cc45173a7cb09005962282423dfb126f7121dc4f7026", 0xb0}, {&(0x7f0000001280)="25ebdc8122efffb42c6094467e72c6980e4987fe26dc0d26c06c8ab3762dd51055a3a8161d193cc35644cf0891ea529e941545ec19786077937d82cb0c53fdd107ccf242cac8eff973148f847d925d", 0x4f}, {&(0x7f00000000c0)="86908649830aaab0b52671807bfd9bc51aa15426fee54ef1eb0f864ea657a4c9a770017e4df2", 0x26}, {&(0x7f0000001300)="a6f0291acff02d4a026f8db7352c705a3b7b5e638ba2c1c02eba9d5bb696169d2301066021ea612b196d9134c158db9296eb4d89b8c5080c778a46097b1e12453b25cabd3235f601d486396cf057baf5633e751667057a4e72c0d90c4e735fc09dd1cea2fc840effedc8a21b35ffa4dc9abbb58b78f282d54b13dddc60ed19a431b6cad17fd7b77c5329e2d1ff0edefcc071a44e3740a271d7a747f5be313f475709031ac571d742dc4081011cf241ec9f7fa5d0c86a399494900abdf3be7c075366f77f06d2d7b1a7f88ae88d", 0xcd}, {&(0x7f0000001400)="4fe623065d48d1907ff36243277255ec0a27aee6ecbc1bc93b30fdbb78810ee28992dd7ee55b2597541989d0fc4b1a33fb5cf1c605dc604415132fef94cdb35c21ffbbc56324ada9b80326bd017e4e8f23c255972ef62e9fa27b7c51e97ab5684dfaabc08101d9aedf44b8cfc3cb761d66b24775604bf7b4c68a385ed165129827e183e19f33a221e35f12a61f4c5e3486b42ce3acdc37534b0185f0786cdac476ea86558fad3d0429795e78320660f9b1dfcf651b095fad11f524fdafca753da4d45c7957b22a97db6de8f885", 0xcd}], 0x6, &(0x7f0000001600)=ANY=[@ANYBLOB="a3000200000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=r7, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40}, 0x4004000) socket$inet_udp(0x2, 0x2, 0x0) r14 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/avc/hash_stats\x00', 0x0, 0x0) readahead(r14, 0x9, 0x2) r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r15, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) ioctl$TCXONC(r1, 0x540a, 0x40) 16:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2067.271041] binder_alloc: 2935: binder_alloc_buf, no vma [ 2067.280417] binder: 16894:16898 transaction failed 29189/-3, size 0-0 line 3274 16:30:27 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480), 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='\x00', 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) r4 = accept$unix(r3, &(0x7f0000000440)=@abs, &(0x7f00000000c0)=0x6e) fsetxattr$security_evm(r4, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000240)=@md5={0x1, "3f5222c2c1d5db76262f8d1cb698f691"}, 0x11, 0x2) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESOCT], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], @ANYPTR, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESHEX=r1], @ANYPTR=&(0x7f00000021c0)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR, @ANYRESHEX=r0], @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYPTR64, @ANYRESDEC=r5, @ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRES16=r6, @ANYRESDEC=r1], @ANYBLOB="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", @ANYBLOB="3b40470455930a401d6f892a674e86f7a1db5758f5dae30c468476fd108b700cf54ba6f297d844a67461248f7167f50529d9755d4d0efb7be9d429879579440d5430cd21b27275dcafd0e3429d02f09302eb7905888b264c2bfb53f9818c20d541dd3cd2e1beca6950170504c99ad50e1454f2e6ccf8a080d17f2069f32907bc14504a03d8817dc548d812a56cb0e8dcab180185a6", @ANYRESHEX, @ANYPTR64, @ANYPTR64]], 0x3f}}, 0x3a04c037) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r8, 0x8200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000080)) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x1}, 0x13) r9 = getpgrp(0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000100)=r9) r10 = getpgrp(r9) getpriority(0xeec2f6366ffab10a, r10) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 16:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480), 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:27 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2070.137755] binder_alloc: 2935: binder_alloc_buf, no vma [ 2070.141378] binder: BINDER_SET_CONTEXT_MGR already set [ 2070.145728] binder: 16906:16911 transaction failed 29189/-3, size 0-0 line 3274 [ 2070.148824] binder: 16908:16912 ioctl 40046207 0 returned -16 [ 2070.176578] binder: 16908:16912 BC_INCREFS_DONE u0000000000000000 no match 16:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='bcsh0\x00', 0xcca, 0x3, 0xce7}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x8, 0x1}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) write$char_usb(r4, &(0x7f00000001c0)="b55f56794645f320c6a97b1a0f649bfdfc3bc17c826592e12034e5858614fce9ecd0855320c11d61b2066e010fc6f518a999f881f48f92f4a9889b392ca814c850a7d291e151fe18d6dddbec24af3478a78ae32329071fe3215aadb1afe949a7e88e654d615115389ed7ad8d4127d93442f54bb58aced6837b9ac9ada79f31e314e7f32b94c59c8011e68d364b055e9552dad983cb4c38276cbc02533aa695", 0x9f) 16:30:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2070.199986] binder_alloc: 2935: binder_alloc_buf, no vma [ 2070.216978] binder_alloc: 2935: binder_alloc_buf, no vma [ 2070.225825] binder: 16916:16919 transaction failed 29189/-3, size 0-0 line 3274 [ 2070.234202] binder: 16908:16912 transaction failed 29189/-3, size 0-0 line 3274 16:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2070.247017] binder: BINDER_SET_CONTEXT_MGR already set [ 2070.255896] binder: 16908:16927 ioctl 40046207 0 returned -16 [ 2070.262957] binder: undelivered TRANSACTION_ERROR: 29189 [ 2070.263242] binder: 16908:16912 BC_INCREFS_DONE u0000000000000000 no match [ 2070.276672] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") listen(r2, 0x9) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 2070.293621] binder: 16908:16912 transaction failed 29189/-3, size 0-0 line 3274 [ 2070.315190] binder_alloc: 2935: binder_alloc_buf, no vma [ 2070.320962] binder: 16938:16939 transaction failed 29189/-3, size 0-0 line 3274 [ 2070.351542] binder: undelivered TRANSACTION_ERROR: 29189 [ 2070.357601] binder: 16908:16912 BC_INCREFS_DONE u0000000000000000 no match [ 2070.365262] binder: BINDER_SET_CONTEXT_MGR already set [ 2070.371728] binder: 16908:16927 ioctl 40046207 0 returned -16 [ 2070.371828] binder: undelivered TRANSACTION_ERROR: 29189 [ 2070.377730] binder: 16908:16948 BC_INCREFS_DONE u0000000000000000 no match [ 2070.383388] binder_alloc: 2935: binder_alloc_buf, no vma [ 2070.396187] binder_alloc: 2935: binder_alloc_buf, no vma [ 2070.396202] binder: 16908:16912 transaction failed 29189/-3, size 0-0 line 3274 [ 2070.402286] binder: 16908:16948 transaction failed 29189/-3, size 0-0 line 3274 [ 2070.450804] binder: undelivered TRANSACTION_ERROR: 29189 [ 2070.456325] binder: undelivered TRANSACTION_ERROR: 29189 16:30:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/237, 0xed, 0x1, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/232, 0xe8, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:30 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:30 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0]]], 0x8}}, 0x0) 16:30:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa7985e3cad684fb0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:30 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:30 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)}, 0x40}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2073.149931] binder_alloc: 2935: binder_alloc_buf, no vma [ 2073.172540] binder: 16952:16955 transaction failed 29189/-3, size 0-0 line 3274 16:30:30 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)}, 0x40}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x3, 0x81, 0xd2, 0x5, 0x12, 0x9, 0x1f04, 0x7, 0x5, 0x800}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000000000000000000000000000010018000000000005000600000000000a000000000000e6ffffff0000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000c3e4002c0d2d25c947e6869c91f688e50f1a1274a125fef2e7aa8879b38a6275f360dfeee4699de464b1612cb2ec14f8a97e781357932dbb773d6109dbf6a2c151cddafceec70ecc6134d73c3b0c69a8dca86617f2b6d4549fe6"], 0x78}}, 0x0) [ 2073.224984] binder_alloc: 2935: binder_alloc_buf, no vma [ 2073.231420] binder: 16974:16975 transaction failed 29189/-3, size 0-0 line 3274 [ 2073.285367] binder_alloc: 2935: binder_alloc_buf, no vma [ 2073.296054] binder: 16983:16986 transaction failed 29189/-3, size 0-0 line 3274 16:30:33 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1c7aff9bde51f795) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) 16:30:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) 16:30:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x200000000}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xbb, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6e8d4ee44b328b3a44813bba6dc8cb6e9261e0eb2eea12b373d8b517781e636a29dba1db59c5ab10821daad1be669255006442729c0b5e827fadf6172dec3ecb85590e0c65e7d79adf458a92687182a2275a70222f014284ef57e47be73"}) [ 2076.185084] binder_alloc: 2935: binder_alloc_buf, no vma [ 2076.199107] binder: 17001:17004 transaction failed 29189/-3, size 0-0 line 3274 16:30:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:30:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") r3 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) getresuid(&(0x7f0000008e00), &(0x7f0000008e40), &(0x7f0000008e80)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:30:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000000000000000000000000000000000000000000000005b79dbd501000000000000000000000000008c63df4872f2028a8274991627cd05000500000000000a00690000000000fe800000100000000000"], 0x78}}, 0x0) [ 2076.253702] binder_alloc: 2935: binder_alloc_buf, no vma [ 2076.259223] binder: 17017:17024 transaction failed 29189/-3, size 0-0 line 3274 [ 2076.316694] binder_alloc: 2935: binder_alloc_buf, no vma [ 2076.324673] binder: 17034:17035 transaction failed 29189/-3, size 0-0 line 3274 [ 2076.333236] binder: undelivered TRANSACTION_ERROR: 29189 16:30:36 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:30:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000010018000000000005000600000000000a0000000000000000000000000000000000000000000000f5060000000000000200010000000000000000000000000050000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) 16:30:36 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x102080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x544010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040081}, 0x4008014) ftruncate(r0, 0x8200) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x13e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x80ffffff}) ioctl$KIOCSOUND(r3, 0x4b2f, 0x200) 16:30:36 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 16:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2079.206655] binder_alloc: 2935: binder_alloc_buf, no vma [ 2079.214729] binder: 17041:17045 transaction failed 29189/-3, size 0-0 line 3274 16:30:36 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r3, r4) r6 = getpid() ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000080)=r6) r7 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ftruncate(r7, 0x40) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}) [ 2079.259983] binder: undelivered TRANSACTION_ERROR: 29189 16:30:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000580)}) 16:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf71, 0x7, 0x3}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) [ 2079.324750] binder_alloc: 2935: binder_alloc_buf, no vma [ 2079.336565] binder: 17064:17070 transaction failed 29189/-3, size 0-0 line 3274 [ 2079.347491] binder: undelivered TRANSACTION_ERROR: 29189 16:30:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp], 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0x238, 0x128, 0x0, 0x128, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x4, &(0x7f0000000400), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0xffffff00, 0x7fffffff, 'bridge_slave_1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x40bb26fcffce3084, 0x43e4141de9328b45}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x0, 0x1}}, @common=@set={0x40, 'set\x00', 0x0, {{0x7, [0x0, 0x9, 0x6, 0x3, 0x1, 0x5], 0x4f2393cc}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@broadcast, @broadcast, 0xff, 0x0, 'bond_slave_0\x00', 'bridge0\x00', {0x1fe}, {0xff}, 0x8, 0x2, 0x2}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x10, 0x8, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@remote, @multicast2, 0xff000000, 0xffffff00, 'caif0\x00', 'sit0\x00', {0xff}, {}, 0x2e, 0x78188bb931f65327, 0x2}, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x100000001}}, @common=@inet=@set2={0x28, 'set\x00', 0x2, {{0x101, 0xff, 0x7fff}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, 0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./bus\x00') sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, [], [{0x6, 0x3, 0x101, 0x4, 0xff, 0x7f}, {0x80, 0x4, 0x4, 0x3, 0xfffffffffffffffa, 0x3}], [[], []]}) 16:30:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000580)}) 16:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8400, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x6, "e3e5266ad208"}, &(0x7f0000000140)=0x2a) [ 2079.374952] binder_alloc: 2935: binder_alloc_buf, no vma [ 2079.384553] binder: 17080:17082 transaction failed 29189/-3, size 0-0 line 3274 [ 2079.394053] binder: undelivered TRANSACTION_ERROR: 29189 [ 2079.438685] binder_alloc: 2935: binder_alloc_buf, no vma [ 2079.444474] binder: 17090:17093 transaction failed 29189/-3, size 0-0 line 3274 [ 2079.456787] binder: undelivered TRANSACTION_ERROR: 29189 16:30:39 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "9983c1338d967193", "c3de2158972701c4ea7fe6ca0bf6cd19", "786edfa9", "cd6fc311ba11098f"}, 0x28) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0x80ffffff}) 16:30:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000580)}) 16:30:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:39 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xb665}, @sack_perm, @window={0x3, 0x20, 0x9}, @mss={0x2, 0xffffffff}], 0x4) 16:30:39 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000240)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000001c0)={'teql0\x00', {0x2, 0x4e23, @empty}}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000400)=@buf={0xb4, &(0x7f0000000540)="47a89a8a45468e44f8091e887814472b4b2ad91394419b17bec3f0bf3a6f80f634bd868b87b3cdb7cfd4f4d1fe1e584eab0c7b933eeecbf043dcc1602db6e257e0932c0cb0b6ab1058582eebe384d90dcfdaae5bad6250b53eb731bea2c5bad40747347c9a16425a75796d4faac344304f0a78f68156391fc2f588c46b6f85cc5826006efe6f49a04845cfbec5b8a8b50052e01b76c1b5e21cc931f6f2b41a618d0a93f9e893fb0515e5b54522b0f4901d496534"}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0x8, 0xff, 0xe7, 0x0, 0xff, 0x9180, 0x1, 0xcc3, 0x800, 0x9, 0xe7, 0xfff, 0x100, 0x0, 0x10001, 0xfffffffffffffff7, 0x2, 0x4, 0x165a, 0x20, 0x0, 0x20, 0x9, 0x9, 0x9, 0x1ff, 0xc81e, 0x8, 0x101, 0x1, 0x6, 0x6, 0x0, 0x1, 0x5, 0x0, 0x6b, 0x1, @perf_bp={&(0x7f0000000080), 0x1e}, 0x4000, 0xb1b, 0x401, 0x9, 0xcbaa32d, 0x1, 0xdcd}, r5, 0x3, 0xffffffffffffffff, 0x8) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/\x01\x00ckcrea\xa04s\xf4\xc213!\xd3\x05@tq\x00X\xabte\x00\xb2\xf8\x80l\x94 \'\xd3\xb4j\x1a\x154\x8bCy\x14<\x95\xe7\x11\xb9S\x03\xd5\x0e\x12+\xfe.\xc0/\x1c\xaa2\x80\xc3C\xf1\x04EB\xaf\x11\x94\xdb\xa7[\xa3\xbd\xedt!F\xe1\xa7_\x93\x87m?:\xecu\x9b\xb9PM\xd5\x13qv\xe4J[\xf7b\\\xb2u\xd2\x94\x01\x9e\xbf9\xe6\xd7\xc4U6\"\xa43', 0x2, 0x0) ioctl(r7, 0x1000008916, &(0x7f0000000200)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r8, 0xf21fc60e7443635f, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4042004) ioctl$RTC_AIE_OFF(r4, 0x7002) 16:30:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5e, 0x0, &(0x7f0000000580)="37da21ce80d27718908f43859256462c449a3d02ef3e5014e4eb27a1c44049bed77d36ede4a62f73f8937879cd011ff814085c87d2e11a9966b94122eb902b9d38bc46e8011367899e23158eea93a69473cbb73ad81f96ce0f777cddc0b6"}) 16:30:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2082.264474] binder_alloc: 2935: binder_alloc_buf, no vma [ 2082.275405] binder: 17100:17104 transaction failed 29189/-3, size 0-0 line 3274 [ 2082.290553] binder: undelivered TRANSACTION_ERROR: 29189 16:30:39 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:39 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2082.362975] binder_alloc: 2935: binder_alloc_buf, no vma [ 2082.382011] binder: 17117:17125 transaction failed 29189/-3, size 0-0 line 3274 16:30:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000080)={0x3, 0x8}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff, 0x9, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 16:30:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000580)}) [ 2082.421550] binder_alloc: 2935: binder_alloc_buf, no vma [ 2082.427536] binder: 17139:17143 transaction failed 29189/-3, size 0-0 line 3274 [ 2082.460780] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:39 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x100, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x6, 0xfd, 0x200}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r2, 0x4) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2082.475348] binder: 17151:17153 transaction failed 29189/-3, size 0-0 line 3274 [ 2082.483738] binder: undelivered TRANSACTION_ERROR: 29189 16:30:42 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0xd}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80000001, &(0x7f0000000080)="ccebf1266bb2ec887b941cbe32cd6b893a200e6b6ba6c61b67") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000580)}) 16:30:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000240)={'bond0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x120}}, 0x11) ftruncate(r1, 0x8200) write$selinux_create(r1, &(0x7f0000000000)=@access={'system_u:object_r:vhost_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x7ff}, 0x50) 16:30:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:42 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000580)}) [ 2085.345822] binder_alloc: 2935: binder_alloc_buf, no vma [ 2085.362582] binder: 17163:17165 transaction failed 29189/-3, size 0-0 line 3274 [ 2085.383280] binder: undelivered TRANSACTION_ERROR: 29189 16:30:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfee9, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @ipv4={[], [], @loopback}}, 0x18) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) dup3(r0, r1, 0x0) 16:30:42 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff4d}, [], "d88c70ac3213b21bb3237d04b2ebfb2eddeb090a3ed423d4c0989c26b9405b6fbaa4ae96ec975eee6ff1d79dc5afaff5cddd8849eccbfa9864904fce37d096c8b99f8199a2378a7175ac0f485ddc23f2e926c14acfb0d4873f0f5bbf85372f0950ca567fee7fcf3f67792c0b633d319e65507e9e5c483c9a1b15a00ddb927f32f5e4770a5d88da0e1cf1162b5fe1b05359c13e4cb12c1dfa25", [[], [], [], [], [], [], []]}, 0x9d7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 2085.429854] binder_alloc: 2935: binder_alloc_buf, no vma [ 2085.438660] binder: 17182:17185 transaction failed 29189/-3, size 0-0 line 3274 [ 2085.451657] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 2085.453883] binder: undelivered TRANSACTION_ERROR: 29189 16:30:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000ff0000000000000000bc"], 0x69}}, 0x4040024) 16:30:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f000000001d000000000000010018000000000001000100000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000000000000000500050000cc92c8f8a58712f0000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0xcd7c) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) 16:30:43 executing program 1: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair(0x97600c0e1999f0a8, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x1, 0x0, 0x915e5d418611867e, 0x5, 0x7, 0x1f}, 0x20) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0x5, 0xbb]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001263484000"/172], 0x0, 0x0, 0x0}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = dup3(r1, r0, 0x80000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @local}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x5115}) [ 2085.750533] binder: BINDER_SET_CONTEXT_MGR already set [ 2085.756039] binder: 17205:17206 ioctl 40046207 0 returned -16 [ 2085.763582] binder: 17205:17206 BC_INCREFS_DONE u0000000000000000 no match [ 2085.771688] binder_alloc: 2935: binder_alloc_buf, no vma [ 2085.778817] binder: 17205:17206 transaction failed 29189/-3, size 0-0 line 3274 [ 2085.830399] binder: 17205:17206 ioctl 890c 20000000 returned -22 [ 2085.838755] binder: undelivered TRANSACTION_ERROR: 29189 [ 2085.852628] binder: 17205:17214 BC_INCREFS_DONE u0000000000000000 no match [ 2085.859742] binder_alloc: 2935: binder_alloc_buf, no vma [ 2085.865757] binder: 17205:17214 transaction failed 29189/-3, size 0-0 line 3274 [ 2085.900553] binder: undelivered TRANSACTION_ERROR: 29189 16:30:45 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:45 executing program 1: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1001, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600007f00000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000000000000000050005000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) sendmsg$key(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x11e0}}, 0x20008081) 16:30:45 executing program 4: r0 = socket(0x10, 0x803, 0xc) write(r0, &(0x7f0000002600)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000300020423ca0000cf", 0x1f) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 16:30:45 executing program 3: unshare(0x26020400) r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:30:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') [ 2088.401590] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2088.432486] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 16:30:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x83, 0x0, 0x0, 0x0, 0x0) 16:30:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ustat(0x1, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="08631040000000000000000000000000000000001163484000000091c4efd37500000000001800000000000000000000000000000000006cc0dd2603d815a55e0200000000000000000000000000000000000000000000000000000000000000000000000000000000126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff00"/172], 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRESOCT=r4, @ANYRESHEX=r3], 0x3b}}, 0x240080d5) 16:30:45 executing program 3: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair(0x97600c0e1999f0a8, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x1, 0x0, 0x915e5d418611867e, 0x5, 0x7, 0x1f}, 0x20) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0x5, 0xbb]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001263484000"/172], 0x0, 0x0, 0x0}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = dup3(r1, r0, 0x80000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @local}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x5115}) [ 2088.511093] binder: BINDER_SET_CONTEXT_MGR already set [ 2088.516555] binder: 17252:17253 ioctl 40046207 0 returned -16 [ 2088.523201] binder: 17252:17253 BC_INCREFS_DONE u0000000000000000 no match [ 2088.530397] binder_alloc: 2935: binder_alloc_buf, no vma [ 2088.535887] binder: 17252:17253 transaction failed 29189/-3, size 0-0 line 3274 [ 2088.544577] binder: BINDER_SET_CONTEXT_MGR already set [ 2088.549912] binder: 17252:17253 ioctl 40046207 0 returned -16 [ 2088.556674] binder: 17252:17253 BC_INCREFS_DONE u0000000000000000 no match [ 2088.563827] binder: 17252:17253 got transaction to invalid handle [ 2088.570401] binder: 17252:17253 transaction failed 29201/-22, size 6819881228232482240-2 line 3128 [ 2088.580585] binder: BINDER_SET_CONTEXT_MGR already set [ 2088.585900] binder: 17252:17253 ioctl 40046207 0 returned -16 [ 2088.592301] binder: 17252:17253 BC_INCREFS_DONE u0000000000000000 no match [ 2088.599363] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x17}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 16:30:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2088.604909] binder: 17252:17253 transaction failed 29189/-3, size 0-0 line 3274 [ 2088.649172] binder_alloc: 2935: binder_alloc_buf, no vma [ 2088.650772] binder: undelivered TRANSACTION_ERROR: 29189 [ 2088.654979] binder: 17261:17262 transaction failed 29189/-3, size 0-0 line 3274 [ 2088.661108] binder: undelivered TRANSACTION_ERROR: 29201 [ 2088.669815] binder: BINDER_SET_CONTEXT_MGR already set [ 2088.679826] binder: 17252:17263 BC_INCREFS_DONE u0000000000000000 no match [ 2088.684771] binder: undelivered TRANSACTION_ERROR: 29189 [ 2088.687295] binder_alloc: 2935: binder_alloc_buf, no vma [ 2088.697127] binder: 17252:17253 ioctl 40046207 0 returned -16 [ 2088.698808] binder: 17252:17263 transaction failed 29189/-3, size 0-0 line 3274 [ 2088.712142] binder: 17252:17263 BC_INCREFS_DONE u0000000000000000 no match [ 2088.716241] binder: BINDER_SET_CONTEXT_MGR already set [ 2088.720588] binder: 17252:17266 BC_INCREFS_DONE u0000000000000000 no match [ 2088.724912] binder: 17252:17253 ioctl 40046207 0 returned -16 [ 2088.732201] binder_alloc: 2935: binder_alloc_buf, no vma [ 2088.743145] binder: 17252:17263 transaction failed 29189/-3, size 0-0 line 3274 [ 2088.743206] binder_alloc: 2935: binder_alloc_buf, no vma [ 2088.756130] binder: 17252:17266 transaction failed 29189/-3, size 0-0 line 3274 [ 2088.790902] binder: undelivered TRANSACTION_ERROR: 29189 [ 2088.796392] binder: undelivered TRANSACTION_ERROR: 29189 [ 2088.801926] binder: undelivered TRANSACTION_ERROR: 29189 16:30:48 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$KDENABIO(r2, 0x4b36) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:30:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000f300"/76], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:30:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYPTR]], @ANYRES64], 0x18}}, 0x0) 16:30:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2091.419180] binder: BINDER_SET_CONTEXT_MGR already set [ 2091.442963] binder: 17268:17271 ioctl 40046207 0 returned -16 [ 2091.442991] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.459262] binder: 17268:17271 BC_INCREFS_DONE u0000000000000000 no match 16:30:48 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2091.465190] binder: 17269:17273 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.471079] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.479388] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.486140] binder: 17268:17271 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.489056] binder: 17269:17273 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.499918] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.508286] binder: BINDER_SET_CONTEXT_MGR already set 16:30:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) exit_group(0x832) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x81) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffee1, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000002945422df02a0dd06b549500"/87], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:30:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0xc0a, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000340)={0x5437477990b0d5bc, 0x70, 0x4, 0x0, 0x7f5e84b4, 0x7ff, 0x0, 0x6, 0x40, 0x4, 0x7fff, 0x5, 0x4, 0x7, 0x2, 0x3ff, 0x100000000, 0x7f, 0x4, 0x0, 0x4, 0x2, 0x1, 0x4, 0xd39, 0x7, 0x20, 0x80000000, 0x3ff, 0x7, 0x7fff, 0x9a0f, 0x0, 0x19, 0x200, 0x5, 0x6, 0x8, 0x0, 0x7, 0x1, @perf_config_ext={0x1f, 0x7}, 0x1522085eb9f215b7, 0x530, 0x5, 0x1, 0x1f, 0x40, 0x8000}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) ioctl$void(r3, 0xc0045878) r4 = syz_genetlink_get_family_id$ipvs(0x0) prctl$PR_GET_FP_MODE(0x2e) r5 = fcntl$dupfd(r3, 0x406, r3) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200be00", @ANYRES16=r4, @ANYBLOB="000325bd7000fddbdf250500000008000600080000003000030008000500ac1e0001080004000500000014000200726f736530000000000000000000000008000800ff00000008000500fbffffff"], 0x54}, 0x1, 0x0, 0x0, 0xd0e826f48e34cf3d}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x500008}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x26}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40884}, 0x0) 16:30:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) syz_open_pts(r0, 0x414000) [ 2091.509182] binder: 17269:17285 transaction failed 29189/-3, size 62208-0 line 3274 [ 2091.521322] binder: 17268:17286 ioctl 40046207 0 returned -16 [ 2091.523517] binder: undelivered TRANSACTION_ERROR: 29189 [ 2091.533169] binder: 17268:17271 BC_INCREFS_DONE u0000000000000000 no match [ 2091.540591] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.547285] binder: 17268:17271 transaction failed 29189/-3, size 0-0 line 3274 16:30:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x480000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000080)=""/52) [ 2091.594726] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.600792] binder: undelivered TRANSACTION_ERROR: 29189 [ 2091.601362] binder: 17296:17297 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.606540] binder: BINDER_SET_CONTEXT_MGR already set [ 2091.620496] binder: undelivered TRANSACTION_ERROR: 29189 [ 2091.626087] binder: 17268:17286 ioctl 40046207 0 returned -16 [ 2091.630713] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.635804] binder: 17268:17271 BC_INCREFS_DONE u0000000000000000 no match 16:30:49 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x355, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2091.637470] binder: 17296:17297 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.640093] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.647500] binder: BINDER_SET_CONTEXT_MGR already set [ 2091.653300] binder: 17296:17302 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.659504] binder: 17268:17304 BC_INCREFS_DONE u0000000000000000 no match [ 2091.679654] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.683431] binder: undelivered TRANSACTION_ERROR: 29189 [ 2091.685589] binder: 17268:17271 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.697444] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.698546] binder: 17268:17286 ioctl 40046207 0 returned -16 [ 2091.704284] binder: 17308:17309 transaction failed 29189/-3, size 853-0 line 3274 [ 2091.718220] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.723825] binder: 17268:17304 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.723915] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.736844] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendto$packet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0x11, 0x18, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:30:49 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="e81d753dab8247fbdc2624be46051418eba087b2bb603f6c9f690b01e35079d1d581bb9cee9efaccebf1f95e801e55ba732eb8538ab3651d") r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) write$P9_RREADDIR(r3, &(0x7f0000000080)={0x87, 0x29, 0x2, {0x100000001, [{{0x28, 0x3, 0x6}, 0x463b, 0xffffffff, 0x7, './file0'}, {{0x80, 0x2, 0x4}, 0x10000, 0x100000001, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x30}, 0x6, 0x4, 0x7, './file0'}]}}, 0x87) perf_event_open(&(0x7f0000940000)={0x2, 0x17c, 0xee6a, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fstat(r4, &(0x7f0000000180)) [ 2091.740941] binder: undelivered TRANSACTION_ERROR: 29189 [ 2091.747843] binder: undelivered TRANSACTION_ERROR: 29189 [ 2091.749917] binder: 17308:17311 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.761546] binder: 17308:17309 transaction failed 29189/-3, size 853-0 line 3274 16:30:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can={0x1d, 0x0}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x22}, 0x5, 0x4, 0x200, 0x400, 0xffffffffffffffff, 0x4000000, r3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x1, 0x3, 0x100, 0xffffffffffffffff, 0x4, [], r4, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) syz_read_part_table(0x1, 0x5, &(0x7f0000000400)=[{&(0x7f0000000680)="b22854796f6bd89d06115138f1f8c3f7c068052ed4a028fdc314f5bf8121c670a54d4cd78c760b7b6b339ba290a8f540bbe68253f632cae6d256711926f3c446fde580e8138921e9ab60f2878b4b976d399e864ac7a13f6409220c1f7f0ee63550037a625ec2a6b111c753bec32d677f3b262757ecd25cb827042e8ee4571dba1e0dc1257e95a26259d4569c8c48dfe71274978606cfad94d38b60b7d608dbf874dd840554", 0xa5, 0x5}, {&(0x7f0000000800)="ca06929f09bfe74782b9de36de48ce264276305446f8db92386d508e8cc55165935919bcce25b709bdc2e6781bbb3db788574007df5dfa57e59df8666d6a1ec95b3ea8e1ec418122c07fe87fb10df47b0d37c7d5a9161498903fb66e3a164a8b63ab646f3a405aac9dc8e589266315c61c7cb7ca8ce3e80c8ab2be3397ec411e03ffcdc51796b3d49deb15f3a1a5ad56f0a7ea55061139f459de3974b6b409634be9fb817dc4620eaa9414ad236292ce2a246360e6dbf318840f3649ccd28b7a350f1450bf4e9bb6d269c032c92f3c30daaa1ce2767ef951ce715d2d1e5a5239d66f3a8b7f59", 0xe6, 0xffffffff}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f00000000c0)="ce6b81a9272226d68d372e4639a22d8820680995d668dbb03a08db49ccde1627cde157c081de70052810b581ee9e2cea3ae55a605d7ef1f5c6960b09db24ade62fa5b090170b226072bbf45207ca279763", 0x51, 0x6}, {&(0x7f00000002c0)="cd3135f4ed9ab60177d00aeff410a1230499570382bfd096617feee15ac369", 0x1f, 0xfe59}]) [ 2091.798534] binder: undelivered TRANSACTION_ERROR: 29189 [ 2091.807433] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.813541] binder: 17319:17320 transaction failed 29189/-3, size 0-0 line 3274 16:30:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = gettid() r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) ftruncate(r3, 0x200006) sendfile(r2, r3, 0x0, 0x8000fffffffe) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0xd, 0x0, 0x9}, &(0x7f0000000340)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r3, 0x0, 0x2, &(0x7f0000000040)='[\x00', r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=r4, 0x4) r6 = signalfd(r5, &(0x7f0000000180)={0x80}, 0x8) ioctl$FICLONE(r6, 0x40049409, r2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300000f000000000000000000000001001800f7ffffff05000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000ec2cd7f0d9d4fffe000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2091.894630] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.901060] binder: 17319:17320 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.911957] binder_alloc: 2935: binder_alloc_buf, no vma [ 2091.917523] binder: 17319:17329 transaction failed 29189/-3, size 0-0 line 3274 [ 2091.977638] binder: undelivered TRANSACTION_ERROR: 29189 16:30:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20000, 0x0) 16:30:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:51 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000400000000000200010000000000010000000000000001000500000000000a00000000000000fe8000001000000000000000000000ff0000200000000000"], 0x78}}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x760b89bf) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can={0x1d, 0x0}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x22}, 0x5, 0x4, 0x200, 0x400, 0xffffffffffffffff, 0x4000000, r3}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1, 0x4e24, 0x60, 0x4e24, 0x0, 0xa74cb1a8aed2ce36, 0xa0, 0x0, 0x3a, r3}, {0x2af7931b, 0x3d711fe2, 0x80000000, 0xffffffffe41e971c, 0x4, 0x9, 0x8, 0x2}, {0x800, 0x4, 0x4, 0x1f}, 0x8001, 0x6e6bb5, 0x7, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@remote, 0x3501, 0x0, 0x3, 0x3f, 0x1, 0x80000000, 0xdf}}, 0xe8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) prctl$PR_SVE_GET_VL(0x33, 0x756d) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000180)=""/202) 16:30:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) fcntl$getflags(r0, 0x408) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11634840000000060000004000000000000000000000000000000000000000004000"/76], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:30:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:51 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = geteuid() setreuid(r1, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) r3 = geteuid() setreuid(r3, r3) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000140)="e5df87a47135b4432b9c8a289fbc76561d7a656d0808b399fb357e3cb452a39f41434d9323931e53370ff7822673d55f3e2a398d6f9dbdd759519d9f114937c491e2e6082a18ea9c5e968c6c5df55d5ff8fc1aa155bad45fd613574a194301bc5b9cf87f8f222e1c80bbdd4c0fcb1d2e1cb294ca3a643dcf8a3f1c3feeac45c95fe7ef5f528014b1130fa1c6d0abc90f3f103aac79ad2092fe8931c91048d4854f8d5e57438700379e3333d256bed45e782687a6562d57c6f12f8cd07ef2f7c56e9b432a0afd963a726d361ddcbf5240e2765cd40457ef739d4ac7fe50b507c01e732bbce7ab6fc6cfc0bfaad5", 0xed, 0x9d}, {&(0x7f0000000240)="f4065ed42629febf9573499a11ca440db6637faf1a207af07c45809e245ec1a510", 0x21, 0x11ae214}, {&(0x7f0000000280)="b191828fa2917581a0a9ff27a9b1d9ca112d104ca33b9e7e0171c6fa0e4e488b0c4e1c364c6def7e2e2d2813b4995cb4b4d1a110971eab10a27dbeb10969e47bcfe764a28c5f3764f00aec06add81cd9ea6f5a00bd9d1c632213bf00df2323b8717cf5ebf3a5971fb97a8b978407c877e1a45480ae0b795ae2beec69b6d4edeea5e5ff", 0x83, 0x3f}, {&(0x7f0000000340)="0bbe673c697f2da87a2ed69173e64a99d4773b0926ca1a23cc84d50e23b927ba5057849c7d8634b7e157fddb210a5d624edfcb81d254dec5afe8d54596739a61d80d641f8e26aba54c43e7c237ffc27ef79f432664561cc4772e758e7785051aef45935689cb0cd91d2b31891c030609b6945b605c90955e", 0x78, 0x7}, {&(0x7f00000003c0)="0d8892205f234040612ed99a579523ffe0d67f8e031ed7e12a1f43e2a4a00c150f5ef00724fc03b5a715d43a41958de8e4019a78e35925065553c3ba3639423a350727e34ae9d7f0173c8895b6a0a55d8fa5ef1b696c0e037853f4ac13e54886945f1d4d5d46e119b3c24cf735bfcac4c25b15eaae7f0cbd3f1d0ca206c63fb44ac9aed1078ffb9fd4702c78a9d3a7292b34675b5fbbf8a25cc4fbeab4de82b168c8f029cfd4612f58f256c4f14d12666d84b03e73fbcf074869f5679ea1f2b527728df0052e4b01fe58ae71060ea7bb6fe6289ac277d1aeabdceb761b948dbe97dd6fc6cbcdba83738b685d025ef678fddf5ee0d78194c8", 0xf8, 0x400}], 0x88008, &(0x7f0000000680)=ANY=[@ANYBLOB='subj_role=/dev/ptmx\x00,fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=)-vboxnet1selinuxkeyringmime_type,dont_appraise,uid>', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r3, @ANYBLOB="2c6f626abeaa723d47506973652c706372303030303030303030303030392c00000000000000060000ba"]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x430, 0x0, 0x110, 0x0, 0x0, 0x110, 0x360, 0x360, 0x360, 0x360, 0x360, 0x3, &(0x7f0000000780), {[{{@ipv6={@dev={0xfe, 0x80, [], 0xf}, @loopback, [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], [0x0, 0x80ffff00, 0x1fffffe7f, 0xff], 'bond0\x00', 'ip6gretap0\x00', {0xb630d10da40baf6f}, {}, 0x0, 0x1, 0x1, 0x20}, 0x0, 0xc8, 0x110}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, 0x8}}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @common=@rt={0x138, 'rt\x00', 0x0, {0x1d8b, 0x9, 0x1ff, 0x1, 0x40, 0x2, [@remote, @mcast1, @dev={0xfe, 0x80, [], 0xe}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, @empty, @rand_addr="4d70cc52f394137dc3be018cc5423b83", @mcast2, @ipv4={[], [], @broadcast}, @mcast1, @empty, @empty, @rand_addr="7aa7b8f957fe2d3b740ece28dc42dbd6", @ipv4={[], [], @multicast2}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty], 0x5}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x10000, 0x1, 0x7}, {0x5, 0xfff, 0xff}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) [ 2094.546789] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.552778] binder: 17349:17353 transaction failed 29189/-3, size 0-613 line 3274 [ 2094.566611] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.581267] binder: 17349:17353 transaction failed 29189/-3, size 0-613 line 3274 16:30:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000340)=0x100000000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000080)={0x8, 0x6e9, 0x4, 0x7ff, 0x1, [{0x3, 0xfffffffffffffff8, 0x2, 0x0, 0x0, 0x2801}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/236, 0xec, 0x2, 0x8}, @flat=@binder={0x73622a85, 0x100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/92, 0x5c, 0x0, 0x17}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2094.593210] binder: undelivered TRANSACTION_ERROR: 29189 [ 2094.616339] binder: 17365:17367 ioctl 40087602 20000340 returned -22 [ 2094.623590] binder: 17365:17367 got transaction to invalid handle [ 2094.629873] binder: 17365:17367 transaction failed 29201/-22, size 104-24 line 3128 [ 2094.639055] binder: 17365:17367 ioctl 40087602 20000340 returned -22 16:30:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{r0, 0x104}], 0x1, 0xfffffffffffffffb) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") umount2(&(0x7f0000000100)='./file0\x00', 0x9) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="116348400000000000002000000000010000000000000000542421db2fedfb3aecc836000000000500000000000000000000004052c0e5ff0000000000000000480000ff0300"/84], 0x0, 0x0, 0x0}) sendmsg$sock(r0, &(0x7f0000000ac0)={&(0x7f0000000300)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000380)="67fcd9", 0x3}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f00000003c0)="75359921c62e969b3f8d28572b653827808778fe2a96406d523084e72c9dabbd4c4b797b22f27a0f8757235fcc350d11bf3ab0d68f52f58b6bcaf4fc1387ba529a0dd1c701cbd66f0526aeed7bae50b1e29e0f38ddc92efcc64f271c684aa0ca560918a29621e0246ef31147849c9d2a744810459510e9a6d948626aa28d537de82329604147881934a49e4c0be99577a2658c333faf4d8367a71df5850f29038bcdddbc560e004462734b7fd4fc4787010aa3307bc2cc4082df09939dd5e4601e08beb0d5d76b22cbd9d8ab15cd8056abd624ae56e7", 0xd6}, {&(0x7f00000004c0)="09ba7c5930c352f660493c", 0xb}, {&(0x7f0000002040)="c2185ada91ae65be4d342fbcf555a6f09e0e72046b41f4fe5a914e362db7bc8cbd4491377051a0fc81b9cf54dfe9d99b2bc9e4fdb72948e710e7f39f2f1b888734bdeeebaea81da78663c2a36f8fbfa357cff8b0b5ed5b6ad2e1dca3ac7fe48f6be7879fcc15ba4665053fe6d0195ba32af1a7b32084f1a84bed134cc8335dde247f0644719c1d7c52514f13685df68569a238449109886e54625bae77cec445acf9d7b7623f2e6d96c7932ded514ee5de7f76ece2c7e38fa0e3f4a622e8dfbe8b79a021b36130735804796369295b5cec917018bfac5f6f75407633642aedd1e945a8bfa0148e8108453d954ce265c4294ee7f9ad9dd584bb68677f29a3d05544dc3cb502a13ea2b41a8b89d7b1f5e79266f352baf0d526dccd1add1798ae5ff0da67df2c8b6b8e51f0e084f6cc4c984b3d96bad36f3da0251c7825d6812cfec532b2b2188a3152a60c7117a0d84466d63cb043036cba0d706aae5e68be8cd7ef68e884ccd9b487d0e0eb4ee746dfd2a0fe8e4a962c4691bb9a9e60acffaff6e3b719fedf85bc1928d36512765e74ca305504ee700e47dbc99ecacb355bd7060dc1c59711c717992d8e13313ecac44fb177eed3cbeaf98007a3995b2eb828bdea052e6467911794723ef32c84eb17dc84daa1bc89fe02fac9621d1cfa8b0a80cbdfa2b89c5c4a89e3bd50bbc8741494ab32a713612d670b692c6e9ed6936b7ef9cded330596334d2721f49abfd9f054bcecfa323b11cb412d81f747dfe5b2394a06b27327b7375d27e7714b59d964efe2cfe3fb7d0170cbac59af9059ce386e63251541d0a1f0934bfb41277bbee96a09ceec2e0b494d84480756aefe9d2b077e311642f2692b07429f27a3b40eae2ae6616c54c6c0d80e191e171905a3d39c173236ff9b3728c74a8bef7e49869adbbfc7b5d127276ccd011c72942dffe5a9881f40b3978eb5cd3e8b413a5af5ff2fd505717b856c32e97b0a31bfb122592f373916bae985315e85468a6a74895c52ae92b94ee959396381868abb60e1c93c5b8b1f1258a67a554b18758579f1107322032434c224ca9eec3e6cc8898dbac18d82e90a52909afed2fc595bef24794afe70b9cffbe826d3301bc717839e977cce5d0dad946b852345a7e560713b419ecbbb1e711f8626ac9d9d1bd67647ab4e348b8f830f0b827911eaeefb73bf9261bd4b1ec2dfa626acfbb27b6bca4c142d464584efd04aeb019ed4902d5ff385be6e7183d132c78f07d55d7d3e3c636e9e044e4199e0314e29fef9a30ee5523c1ed9aeec096fd8d74ee4c2b0c6ff7584600d7279cd5b597913da7233136d7265bbe539634420519c2638edeaa9f8e7ccee97be893d5539f402c96658190690f5fa2ec583ade72f17ecf924a73669237f3f09c89098d4a6726237e6980019d4acfa9160798f21a08143f316e3abe151f71d35e89b35fcd9bef82dff6faa924edd6c387c56b4f44b11a2a16c58881417e2644f2dd42160137d981123484b029a7a1b576f1996ab96664e8662c3e0ec7bbc0d7e6e74bace6a10096aed58e34a8adb5680db9ef1b17717eba57f88c58fde3e8c2eaa7f235812f34dcdf04d3b44bba0d01a4078bf019b8b1983951b7012122dd0c420e4ab886a24b7ef47a9d617a052506ee749be9b50fdfb82ae89fddc1dc1a043eef0bdab5f6c234a25e92c85e9e08d2efaa18516a9ddc21a302031b0997ae3edfc7b55ad4b58dec65f919fb8a611b25004124ffe2d480d21e07f5ebcd92c0c2c64c41ee410f66177e9a2f1bd04fe3f06be9ab8c04073737eaa7bc600fe7d351ad113101ed76dc0cf35503ea0e081cd22a66320a22ec239025fbf20cceb7d14a54f373f3a25aa97e92bd6cc12706a90f6097bbd7a9a77ff1e9cdea82dccd6d6a67682723d26ecb267fbe83dd1fcefde11a2a236df9909fc48d7b6e270044b69d96ae5f0814b75eae8ffdb77e909283cfce87a7a0c7ee624689507d0dadb376f2d27ee0c2b86bfd1c068f68cac54b1f98ce2920431af17c2540a1d1f1ec3ee86dbfe6b59ca1dc90ee570a9fcbc6f7e7eeb62b1cf63d10c68d5c691b478991726d3b2e971cf02aa7b96ab5d80253657e85571cdae1c3d532d3b449dcd0226451601929df2814d564706c4ee65b0f8f806bb196e33f7bc5edb2428afa26742640cb1808cf51139544de6b1bde83965ba626e7d163461bafda5aeb9df49266ccf188bace4b95a96318ca05b78c6b1c2e6acd928fc1e6e5112a3bb906240ef92b0735986a14f63edfcaee6b79cf77dd9c667372006a312bf6ae0c94ba6c98fc91a24c6acd89f109d9237fbb78148304e7084e52f1fda3c92ee17564088f08fcb6d786ad109db8e8a17f747b0e00a6a54f78fde47be9aa392d445348448e20868622f67019d606f41b981b0adee67aaf9196f627aef1cd1e1096f8e6e3539dbfafbad296a850ae2561ed9592301d56f196a31674b72eb0c5a1b2e11b21b709253071b09391c561841f54275e51ab56e5577b4fe4a5139437e48d8f590c1cb8271983bf5abd61a9364dfa9010d54358b47cf93075205a39eeffc6f7d06e36e81b349a75fead2c47fba99c4053f5897ef381f1f1c9efce3e6a2a3526d20b934a0ddcf12119e47e02e65b38a8d5e812044eed1b732f33f6290d7617b58617d9df6fa0fe1394b30257a80803a15198a47aa10963dcb2acd7acdd3d79596bbd84e34ae6216d31d6e59ffe629d7432c0d9a61f95c6481e58f84760589359326590dd6402b9e0560bafcc18f443c401cc11adff74773d20a387cfa783d0158668f5e6cf663f3da486a716847cbf26e6ae61f420337f895a4e59289c87b876e60f3dcb1a788985956589e71cb2cdc96083ec8c5444c94fd9b3e4d052f04494c920439785ddc52b26aa41b570d8d2e499f8c7d3a00f0849da67a39eb9fccb57092c2cdcfa26ea346f1c3d4a6496b921adb8709a4d99c9e192c98ef02d2e7d508a30d5bbe344e20b2ba917d303deaaa165b85692d98e48a2b7fd23f9d8d40d7b23d00e862a9fa8337bfe9519ce524472c1649b602b15d7d5e4f7f91df78262ef3f463b0b4792922eab0e32711fe5f77f00e8189101a5a3c3fcf3bddab118ae568a66cfc2c116db6eb2335f37172b36fec301ed6e79da863be0c04cdbc2c6f0d87e7e651e3fa1b0d20aba9481a8caf39b9daaec0addd7b4922f922a704565f2233f65a75ebb07ca1c99f7f731ca0c0c2384f6b5e30a93767e018f1fb3046106060dfeb46302873b4959bfcad8fbeb1b4f73afaaf3292cc3ecca28675fd607c1c9c7fd9677835ae19ee23b05d900a7925d8726732e739d4d5efb8dcd02fc1777d44364c195dacf4a5d83583b031f7145dba23597bb035e84d6b03f3d5fc7816df3ad82608dac6d4d935029a66a37c3641e507728c30323c02d63c6287409854a14e1084cb6a4c59bc673013fe4b793c2c6e4c8c52e8d39946c1e693cacab551cc98a9432167df2d6bda87b069435e9b1743e9c6b1ebfec89faa2a85c6cad3ed0cd06acd15d1f77ee1aeee317e4d3c668527112e91617938e738ed26771bf12146f49228e36f0ff44e669153228d2e2da24e4091bc6f4814fe875824f578a5d654e9915d419e5c473dc89a14b28b7482517d22f9cb3e779b46becd17f626cdc0091a879967a59685a6873713eebdc853eb86829f1b6baf2d44bdd4b639260b92e886cb4e19d970d22d2c47574d9b5b9d0e8583fe125da940f240168388df354161efbf5cd1d88c889bb70f1f4ae28aa65f7fc7566108cb4a7280b03b85057031a7d4a7d5412f9ed582f39a1009d0ac2b6f7dd51a28a406ea72e9002015d0334e45cf7ca74a8737f44b005264c407b45f67281d1370b94b6a58ebacc64df784364e5543d2295ae681ff5f937b22abee1a1a221a20d0c62f75dc302d8011f7746b59798ac1e20a8b9b22971c1437757b691254761b39fdc94b331ea16fff3418139549bb3dbdcdddffff22bc4b95682c15c384086845df47c00649cc67d1defb820a386473dcc55985bbf167163183d60679e4c948464521dfa89faade17441ceb87e2e1f88acbe850f7e33d47d2dae6ceca37f1297fc210d7b2451d438794acbcfeed70ca2f3ad15dd58d3dc4124790ea389cea6e8f64a5cb553d3d851cab5fa643df582fce97b7e43996310ecc907f950a193cd9bc7b0373c53bcf6a40ca482970a6c9ef77d499abc3a76cb0510de590096828f8587f7084604ef427603d1d949a404f25ee368d259f5b86136aca2ec61b56c7d0025b96e8583bc21abcba0090682ba6e68a1c1febdd0d442ccc8a34a0daa605dda9b6a3d15d092be6deecc64802bc979783182a3526bacf0bb25ed030567f106d29bb967da929a88316695639e62d521d393c5d286ef57b4bb50e4480a91b67f5d556fe40bea917de3223a51cfb0b0cacb756396f4539f3cc6c4572be39c8739d68d3e0e6d8500733c078b03bb75c9433c8db0a4da04c5acfcefc16fd3a20e73b08a7d6181ca3a533ebdf089a05c035511425e94c538c502c42e5ff4b2dc57e749b7ec5fba20d4c6b34d722671bd66755b32c4d31a00d921d069c6856aef4a5db4d21158becda2bf590864e4680c8c5fad1e5080b3c6f6d3f0aeae47d136296b02eb98000a550960b18dafbd59ac32b09ffa03119dbf24ccbeb68e6700d3e45cf8b910791d5dd2d5afd00d97970574e5064e1aaeed1af6defee934c2e701fcf0851ce838321d3811d0236941f859a5239c70f3d96dc3da5ca2f0483715c014e23e368b13a599c758c422a7a9ef934dd49ff60f221d8dabd4f54ad8db771722745aa81a16c8ee6a9f20184590808f506316b45d2df09959b9d9bed8e74c0c0c4d912109b10976cb42baec97e21359f93c301622c920a83b9d7b7c2e6817ece087c97350492ecfd6b68715ed0862e0fbe094084cfbcdee0541f451ba5ed9e0dffe618c404ff77bd501ab1b25866441fbed5161f7fea19299e3d3d207086e26a36555e77b15d497af589eb6a91275d6b926547e69eb996d65e629c977005eed69ce8840314f754aa5d8c9633915617d72dbda4243ccb39428d7e67e291e2e2984fa6d0d5650a3dc6d7ce2c0c27e76fc045be3edff422dea7e6ebe730fcb0754c6a55955ef795d29e5861842f94ec9c03e7d94002548e489ec8421776ca5444ff118700a3314f2b03c09c3c1bf58f740909ab5ed5b6c7275df25b50d1b4af8818622fed01c27c09b118b206f22674a212ddfe1670390a0512b86a3af349273c9c94681a00a3ea3b2262ebfa5cdee28d8b7bbfd2d0a54accdfcad8aee41d0a4ea2ac26dc206aa70ce6131597f6565d493340c8c22312a44cd18d1f16c8b093862c5bc77cec379b8dbe5d8a1d45bb754618bc4a7a48c304e999a6386feab5beeddbe02de30ce140c7e241923abeff8cdc552c4f15d134b504e7c76329fe8a404abcb27adeb9b029a564381d05b52911aaa893218cd8e1a27aaa05e2b910893a4a05717477bfdf997375b3fec6e3059773a1556af6c777d3881e6943ca6ba0a22ae2d3736a47942a6b76f9c543f0f03bab924f7668aa9203fe99f3ae2f884966af44115b7ae159d89aa87af492e4f0394adb52293e2a989eb9af7b47b68a638275f036c166c7ab92a67b9ffa94b491435b19e694c80c217bc4f871b69987145054b5d12640743d333175d1cb5d07ec26ff54d3186cae00743ca884ae02266a161d0e0d53d95e33a91100fd3be995e9e5321af05d2aa87e411f4695144c04c739444e9553807fdaaf01550217973f70e3cdace420b1b2c9c020", 0x1000}, {&(0x7f0000000680)="aedfab9d99db3c441419d1ac72550179168265cf600991c9995ea4ca5244a2753e763c0c7ce1fdf2983d352a1c7034f04c4b38e7a6dc6bb95a1679756fd1d84f9636e9f46d0f89da6e0bbecc7ee5ab00775cc1b77958a07798a712cd6cf9f561a7d4d3d2d4fb391f4bceb5cfc9d6671fba5770b927f502503a6e04387f809462248f946586b5", 0x86}, {&(0x7f0000000740)="36c06a3d111000774b7700865dca76c4bb56f3316ebeb6715f08d6426da0e638fa5b4c7f8595add18f1788595e602ffcf73c649123d1229d11b7753e6283c01a2e2a0a25545a8ba1299a0c29fb0c23c3126839bcc96a372e33bd2582c6820a5dcd93b963813290702be655c5c00e672425c9a68fcc2db0fbb449bf867ad2c0401c59d5a63431997c", 0x88}, {&(0x7f0000000800)="d1d9a4ff6726be1d7dff751841c615ecfbbbd10db5d0f93189afcec0bbf9ec8324392c773a5b411fc4c2a8a3db020a25c2860a4ec63b574058b164130e96c2c54a995f9eaca3c0c3b34649d4fe029c0c732cd27e3148d0b832a416fa16d1e67d7b671cc5f72c703079cfb921304492babf98697a0f190777ae337f5a452a260806dc1f27aeff0a4888a755db6b17eda2e359d034be59e5c16a2a3301a7629ab46992e30991cafd5ae57234c5361bf5c6cc6ab9da1155cfd60d0c1764078e4b0150918cc2ebb2cde4b9a09c111605ab0ffd5fbd73ea6ea50fb55bc4ffecc076183f695b4b167f4957b2d537cb18857b3b0a96e64edc", 0xf5}, {&(0x7f0000000900)="1c61988ab8e8da491359923e6f4190957e2be334bfe71a5b03de2c7d5d9bd0d01e7b3b5ead2aac4706eb19fbb6341218781fc41bc4833331d1b98dacf7150b4374c6da40e24be5d8d1a7a6bc018ffc785d5a3712f3ba345ba186de73b87d4f3318b5bf605664d1fc1505f56cdcd51323fcd51a557153dd635f7859b4032d568ca1aec0056c692b38962a51c490898f7749878216902e1e941790b78e336dcb882e34a7cd372dce66fa83d069dbd02752bb5f8bdbd67a356fb0a3b22ed74799c7304d92ef1ca6d41cbbcfbaf448168e4f57a16e3cf39bf4d2b7817814f9ab1c0af5c9a1135c8d05316dc7d5822f4162d67d7412365ff497b986e0", 0xfa}, {&(0x7f0000000500)="71ccc8dd4882095a2f0ed49a6bc6e24518c5eb1ded83359c6f5d19ab971aad6d994bb6ead8b7845d5af344571001f090c6d58c9a89b36a926a502f0e88f577c949ee7699ab", 0x45}], 0xa, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3f}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}], 0x60}, 0x44110) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000001d69045f0000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000a738b316834c801c5d133765635800000000000000"], 0x1, 0x0, &(0x7f0000000580)='7'}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) getdents(r2, &(0x7f0000000200)=""/238, 0xee) 16:30:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2094.639113] binder: 17365:17368 got transaction to invalid handle [ 2094.646838] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.654990] binder: 17365:17368 transaction failed 29201/-22, size 104-24 line 3128 [ 2094.657473] binder: 17365:17369 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.673244] binder: undelivered TRANSACTION_ERROR: 29201 16:30:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r8 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000001380)=ANY=[@ANYPTR64=&(0x7f0000001100)=ANY=[@ANYRESHEX=r1, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="bbf955ea8b7d9c09ffb0e703e761e47587313385ce172774abbd8de5f8811a97598ca077dd19df18acc361b634fbe68cb3ff454717542fd27d16777b3e4d7cac2f478c9a0d66d689b1fd4facbea25e9c716a3553b365401697d5802a4f1d83716975a0f50fe353734080057ec78a6794a7cda025e43f1ccef5", @ANYRESOCT=r2, @ANYPTR64, @ANYBLOB="206ebf2ab02d0021ea8ec46012deae73dfd4d1335119eef7fc695d8a35ee1d23ea92d75c280fe2a83ec0377d833fe19c0a657c11901ffd6b75fbd4e1e87bb8a6217eeab0599215d2e91e3dd3ef5ea2a17805e704f9dae1a29b58b8e2c6f7185e9a8a831d35b5ac9fb862d7b51df1c5a95f31fda7be6820a58eb8a5395b7d96fcf3e7cbd946857c5ca45fa2f7e401508fd6836f69c1e24fd55d93dfa3940c4683e94b5422334efc106f5b502f397de17bbfe47c2234958de453dc158d39fe30ff99651cd7ca8c8c15711b7b92ed5282f48766a570cf756acc2d1b290946bca334155a40986ac000c6f95bc3020d41923f6e06d7257e6243a0cfc2d315047da3905b363a253d80b64689c2b63038794d94a0b4351f2450098c05707df69846acd06308dad8c04f9afeff45d8e17a54fd83f1e8b479e5857e92b99a68378db94ceac534fb47b162220b77306d0bb2bf2e2a14f2ea8265f82ef12976fb0f05a15223818c9e7c5f7d8a51b5764663faf66045185eaae1a30464ea2a4cfe43efca2b9b651f6b426282a97e510314acfff20d7b222a58a4036821693dda012088d0c48d836a5b068a4b477e464e7210fca97907832692932a67b59b7010fca7a67f8103d91c2bfcad9a1103357c33edbc6a0e9aba1b7c88fe5a1b9d2658c4720a717be878e02f67968a51c8cee24bc2f8e07133fdeaf9c382111102bbca1815d9e8563b4261d757351d00bc7937362fe3dab11095daead7cc87383493e4b5cb6611eace44251f974cc9fe7fbd45ac6e7713fcdaf0085056629503025f6cd5a4428c6c29aaa765c86cb54e70634b2e7c32865fd48c35d5c906439313382381111b64314e99d41c9bb0661a1880eed70eedb41431f853bff0964e7486ba12017c51181a4bd7efbbd3f185aca2ab61c98183d0673600e131fc615fee1f7926e4fc27b8992ff90ddbb237183a0b877aaef07f2b713c936a6f54e16ceee3d6fe303908140714920743c849d7076dfe48c61a996b29e035d6c4ea64ce3f9fbbdab58e6a5367028185f4c30d7bb7c0fcc94fa8735b00516be749f049e560ae5cad86e0cf3f635a7e520c2c127e21805e0bfa5193ba641620bf830cedc30253998ec4702e14d94b76b1b2b564589ca94f0e77a31de9057234e995ef0cb7952b9be74ef22b1b47123530a0bb17625bfc5e236ee2e5d5ccda3082cde32baf561e33376032f9d516bb0ac75b1249bc891dd6ee53b98a69f9d203cff341ecbaf21f89fde46f549a84783ad22c8040314d74cc92f47cd04f9c0b348c69a0597017663d1498563acfbb2d6bfc29e25e836b6550e73297bb56e2ae21e38f40aa650a64818389b492d14ef3c932e6cfd16cbda35a1d622b30695a1f733de9e6ccadc231b9fc8bb5e4c4078e00a019266c0e4c91a2cf87b48178ce8a2dda2af72b2fe4f49bfee9d87837e983bcc7eed43c9163a6fdcfbe82894946e78011e63794c71a92915ab3a0d114be3d324cbb31a6fec637d0cc7c81db3dae9466f33ab1107ff6c3011380811498d17e5264502b795e80630ee6a947d29c4f45fc2ff323cc296516c7763848cb3c110f3b07da02012b6cd0556966440caae6ab95f59e279982f01c018bbab9cb75383df82266400aea39b065356c5c83517574818b298e154333ade0a23737083d7947b39a55d656a7e07bb16b90cadd99a3476240c62f26f297a488d2f84dfbeda47c823e7f40a7c57e8b5259917768a703474788237d1e46f278b65c99b3444ab4310f2e10da6b78506d93837d0f864bfb076f319c7a865a2dc6b787ccaf6c1aa8c797088c6110663a6c6f4aee6803ea747cee2c1bcf402b753aa52d08c696905dd8eec3d92f0e9b3519da57754c0cfaf4f314f7361fffe69e8211855be7d4423f2f195ab6472cc740f38c51bbf3dd15ea3d669b549911d90cdd1194c7788736f6ce97095c05a2eeaac322c1c8cb032f5232cebf13c7c5037f055f1ada9558e6f55d5c48aa0380362b3f2b792ed7a2d1e76c268d1273f79f16d497b4279777ca63aba5224641f0704092d04f841d0cd417a9c9807d8086acc513b2129d8aa0f355ae0ebe5210ecaf0f6d93dc8c83b7f4c0a74b767f6bfa99e4078836c8e612ed1f3d19730863ae6cbabf0baad86a03e056e9be79cf694a83df8e812bd9b8de417866049914fbfef1c07eadea1e88054fc9c9ab274937c61acabceff9fe813a51de3daed5fbed3cfececf5707583830f0b0d015d7a9a5ddd1cdef15660c59101388f5932d1da32d4b774152983add5fa2cc6c094451e27711bcdbf17529342bc699a604546f912b748009accf1750c1cd1d77e07e40f0cdbd803b1ed56299e0c16c857f89f0bac58c3b4fd2db9bb5d2067a5c5097f9ba8376fa2d53abfb436f744f3ad077b98bd1770325bb40fcfa33c71060da9845126a56870708099750591ee353b0a3827fabf27c1b7d1956a935879feaa3ade6ec92ddcc11f94d9557f9ef32b8cab1b6895634494a3cf5924b378762a0c943011ea6e2199b6142e1e0a87c270983144f25112aff91f912f6b7528289dba6cac83aed95964950a6381a75a9cb4b072b68f0fc45a51d15817167283d9925c6d1521a332f77842bf1bb9c83e522c0ff26b2151e2e3e6072937593a50c1bf82730a8a4fe5b122fc81e48a7f8076a647596a56149b17d2b25dfde2c1ea04387d32024b0bca0ae2537b596ade11fa60c3bb9ae4f8c03d65b9293216f93d5b4817db5a8f0a0640f4cd42ec270f8113694b607de2582c36a867e0e9fd85959b2b5d52511ca65de5514b982b983302a95a869379ee8011419aac9d1d59a7fac51b113c46a48832bf7db3557aeae902ae4fc324eb06623be1df88a27243828e15c5946dc25ae296c08e1fe648c0a169b3307c20f85f18fe674eaeae65feeb5c026f1890194d5d2d63eb2a3979c96aaa730989af9dbb5eafd032925dd2aef0f365017c18796628ae14c2e53dd678355487bb298cf350186eeee822f045cbf7dd9cee13ace8ffc99febcc08c4c4c54d51e7220913b2ca696bed9bf1ae7a64df6c1d1168bbecd6c7c136d6c252461197efcdef25ccf0d60ae8b70062d90eec69e92efbce4e55f8b2059f2ebc19fec32831cca48ae9b58d63c18a561e50e0b2213c57e3fd808e955363e9f5bfca742cb9ff200b70a45b73c3fe6e801e4d1d27a504ea27626a9276ca5824f38802c6bb55cec32d03a037e30d4be7acab7d10d80b50a8634932b0934dd1deb70a3866b94ad781b2dd00068f6262d91c322fa5ec0d227fb0da00822ef4817ee7df48236b90d9813d6940c8140c84ff2bbcbfa40d11e4a92d44680e66d92b70efc76bb3423df41ee1bc87811ed96d42b8923e6299f0bb7e944f69aeddce3a08950c511e4043ca5e351f589f4a127988fb5d282039ed75ff919eb5a761a3c2c082a6652021cf6c20cd941f3afcab1223082ee968c89571722a5c3afe9418f25109cf7e92d71abc152eee296fb7eba5fba657f3732923e9f14f179563f57314e486e802db5032a7d29f4d57d6a3307b36ac53bdbd4616ce27ad3d72ef573dded0c1fb67a7eb499f75bdd2fd4f9b46f7bdde2cba29bff8a106daf85e3f41e95e30b4ff87a410592eb9e3d3b72518bf747a46a7f435ec4ed602df053e2cbced57b414b46db7d8fea67d064453ef0230461c1b74fca1db6665e4a279bff54046cc02b28137aa9d1fc0246c422f7e60a2bafaf99249bf45d043b9b34f7ee263a599fb529edb0f0403a3ebeab547b8c7cc2588b733625ff99c462966c538a5fc677664b334c6f19ae4608f79313c60f611740552e079041115247d9ce60d75639abfe518460561ae1d1d2caba74f9b06f2f7ea83fa054a8aa4b7aa28cbd7293947c761f46b2cb8b08b0b1bfa62da5fdd5150b0e6255267bacc4fc93b5b2a3eae746742090e99cf5535e4ad4d7a2e58fa3ff4df339afa5411d4689b43fc38f60190e62679f81b8d41f1b55591c4adeba30373a45f15e049c55ca112b764525c887ca96a3a112c10efdb7ee1737360a1f0ab4bd7d251c1955cede8ddef60e6cab95a6549941e3ba8079a2982e852b193029c3e68ae2f921fb5edb8336daf02b2bc4281720531f8f2fa2d51f696c355fe54d68eb63d7244c70c268354c5eb4766bd493b1d57ff56dde0c32d8392b79d4cb28156a22162d8d4037f9d8dc3e14f933a219263cccea3cb321534062a24671c5ec0ed687756a8af52699ba17c15561d59310b8ce6d508458e44f2ecc9816b113ba2d0c2cf2c9b6696267aacaaa00a4c03a011e3674b45743716fd1d5d4a8616d9c0977f70f2776254c6a80f098868c271ec90fe9eb22dc16eddf997797d6be0e1a78c8c8e6d6b44a13be3047d2738935eb7f7fa9c51f1407c7d2f40500f4af58cf3b355cde7ce6237ae032c1ef662b7efcf7c0dc33a09bcdefc63a6a0dcb07211a11833665e37fba0a8a1048b3691f38c50dcf35835d3b268d4a7ac0724c41b7220ccc819f967e541d020310bc4e002dbac8a936a9b3a1dc5b2a389a919da59a6f35556824491223456a7dffd42aced937e841923591d65e3d393f9dfe35fa045f52c9c06167de99b75dee755a906dac1e8cc30075255bcb2f6457666b3de1de98ec9b2c0592501e1d47e69b1f2376788b21783f7961e264b06b5f3ddd701005d77a564d3d04f66995b949a035acff9b199a5bfc58654257f71f353a649137fb569d714e8a3fcb8762678226350969538b91980f7ab162bcfac47dd67478705f4bf78de1feec9ac0ccc366a9b8a4df969f445cc5467a713a81c5b40a64d5f5cf7d4aebfa8cd8e1b914787a792d9d2c212f7d7822b71db89ed660e32c9392234f6f0053c19387f990f19f75f1059814c981b9af6e9361a57c0c0b193b46c76e0ae27745cf52c20970bbe8092fa8fe483a40c4cf964cdfc98cc6de98022aed5bf89c1e73238c568c353ac070198e2a61bf2c76721ce0f196806fd7c65aaab976ba1409ef9b24c2961e3365b1b61ae2a8b57149c11a2172715c51f5801115f3ee9f8ef6438f6c07a21a5d89479d52d7a4b31ffeb622377ab717bcd61bebe6a771eca9f022d067e25a68f0b136f690c666cb0b0f6bde9f0f98b0d791331a3de61d248097be8ad8301bc524a48f28d71938aa60692d019656300c309e983b521a127ba0173c6bedbca0bea501b54d90f0fc14998c33d61d69efcf98aef01150ecab4799f8455ef96c68cc5d06a7b59f1dc70fcfeea919e1a78fc163e6a476e5b5f1e404b7168deb7a84205d3fcd09a172456a01a2547970ee8ff836f55316fab01f634cc3fa347acc99d416d6274c6c492620066c54f681c77d1a80b480e366cfe184cbf9f811b35e45b38272e882a9abe73083be40984ec69ef2496bff4254c07c18ebc6b2e6643496b6c7cff5543ce3cc2687cf8878204365df549d2646d34cdb0305e8be188915136f74ab4c757c545490786df097f6c3ad8acd4818a23371a4feb7a73b7071ef2db5f7bd2d523db45ea945f9d637ecbb95cb3083e26c99e81f0f24b7b76b068cc0c6c5793ecee751b52b15fb1494d02f1498ddda3c1adec7ec53b10adbbe16e8f052361ad4251bb93f37d93108c00f5b286391dadd1c2d107c12065cd0a8067b685b84c98f5c1ac54c9129617d5c085db405e5114931de9742c3b5ec9ce15252a7a471b16f81b427d14fe0c4e6b252336b6f35f903bade8f999520592de77e7b586fb9f5a5867c7b98633e7a678b7258db52be9cae2f4a18b5c9a8c88e935a573759db529aa7419cfbbcdcba5dffc52ec05d9460d11f42", @ANYPTR64, @ANYRESHEX=0x0, @ANYRES32=r3], @ANYRES16=r4], @ANYRESOCT, @ANYRES16, @ANYPTR64=&(0x7f0000001200)=ANY=[@ANYRESDEC=r5, @ANYRES16, @ANYRESOCT=r2, @ANYPTR=&(0x7f0000001140)=ANY=[@ANYRES16=r6, @ANYRES64, @ANYRES32=r3, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="1a59733f0810b09bd9326b5d183acafc3ce3e7836625cdd251418ef59d0db6804da734a938451a4da5a9a5ca82cd98964c25d201b1ce9da41dc603bb51d72ffcb415043ac13fcf5a25519a", @ANYRESDEC, @ANYRES16=r1], @ANYRESDEC=r7, @ANYRES64, @ANYBLOB="2b3ae8ed9bfdde618e9be21ab89641fd3d9c5294990f409e7e33eebadf506c2862258a3ba319c79bb445341e115f5a47a53bcba3d247e86637d40e840c7961aef49063c7e509c2d66a1b5d530ec9053e95c8c82d986ab47cc67eafd18f010db523422d53a03acf4a1dedb453a77171467e0e884c469d61420f6171464b9366df5361eb4b3f9a61a84a50fdf38a9588e55d8e1b14cdac589b748d6fbfd06e41b4f46eea21124219b35df867efa047b82548ac48d6d7513869b452d990ffd0570af7c41a4e8ecc6238ef453a04a9913c5b2058afb3fa754966bf6f059bf8c346623967201aa6032b9d728463ec174c108b809b6b112d98e9", @ANYRES64=r8]], 0x20b}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') [ 2094.701931] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.707474] binder: 17373:17376 transaction failed 29189/-3, size 83886080-4611686018427387904 line 3274 [ 2094.723170] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.733554] binder: 17373:17376 transaction failed 29189/-3, size 83886080-4611686018427387904 line 3274 [ 2094.738585] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000580)='7'}) syncfs(r0) [ 2094.748811] binder: 17373:17377 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.752616] binder: BINDER_SET_CONTEXT_MGR already set [ 2094.761980] binder: 17380:17381 ioctl 40046207 0 returned -16 [ 2094.762135] binder: undelivered TRANSACTION_ERROR: 29189 [ 2094.768853] binder: 17380:17381 BC_INCREFS_DONE u0000000000000000 no match [ 2094.781459] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.798055] binder: 17380:17381 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.798066] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.807311] binder: BINDER_SET_CONTEXT_MGR already set [ 2094.816587] binder: 17380:17381 ioctl 40046207 0 returned -16 [ 2094.823189] binder: 17380:17381 BC_INCREFS_DONE u0000000000000000 no match [ 2094.825383] binder: 17382:17383 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.830662] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.840432] binder: undelivered TRANSACTION_ERROR: 29189 [ 2094.843644] binder: 17380:17381 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.849657] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.858134] binder: BINDER_SET_CONTEXT_MGR already set [ 2094.863447] binder: 17382:17383 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.867510] binder: 17380:17381 ioctl 40046207 0 returned -16 [ 2094.875559] binder: undelivered TRANSACTION_ERROR: 29189 [ 2094.882041] binder: 17380:17381 BC_INCREFS_DONE u0000000000000000 no match [ 2094.893498] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.900008] binder: 17380:17381 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.908603] binder: BINDER_SET_CONTEXT_MGR already set [ 2094.913936] binder: 17380:17381 ioctl 40046207 0 returned -16 [ 2094.920262] binder: 17380:17381 BC_INCREFS_DONE u0000000000000000 no match [ 2094.927299] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.932850] binder: 17380:17381 transaction failed 29189/-3, size 0-0 line 3274 [ 2094.941310] binder: BINDER_SET_CONTEXT_MGR already set [ 2094.946590] binder: 17380:17381 ioctl 40046207 0 returned -16 [ 2094.952957] binder: 17380:17381 BC_INCREFS_DONE u0000000000000000 no match [ 2094.959998] binder_alloc: 2935: binder_alloc_buf, no vma [ 2094.965513] binder: 17380:17381 transaction failed 29189/-3, size 0-0 line 3274 [ 2095.010588] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.016077] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.022086] binder: 17380:17388 BC_INCREFS_DONE u0000000000000000 no match [ 2095.022908] binder: BINDER_SET_CONTEXT_MGR already set [ 2095.034575] binder: 17380:17389 BC_INCREFS_DONE u0000000000000000 no match [ 2095.040130] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.041803] binder_alloc: 2935: binder_alloc_buf, no vma [ 2095.047050] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.047074] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.052741] binder: 17380:17389 transaction failed 29189/-3, size 0-0 line 3274 [ 2095.058355] binder_alloc: 2935: binder_alloc_buf, no vma [ 2095.064397] binder: BINDER_SET_CONTEXT_MGR already set [ 2095.071954] binder: 17380:17381 ioctl 40046207 0 returned -16 [ 2095.076678] binder: 17380:17390 ioctl 40046207 0 returned -16 [ 2095.082172] binder: 17380:17388 transaction failed 29189/-3, size 0-0 line 3274 [ 2095.088167] binder: BINDER_SET_CONTEXT_MGR already set [ 2095.093760] binder: 17380:17381 BC_INCREFS_DONE u0000000000000000 no match [ 2095.101331] binder: 17380:17390 BC_INCREFS_DONE u0000000000000000 no match [ 2095.106942] binder: 17380:17389 ioctl 40046207 0 returned -16 [ 2095.113573] binder_alloc: 2935: binder_alloc_buf, no vma [ 2095.113600] binder: 17380:17390 transaction failed 29189/-3, size 0-0 line 3274 [ 2095.121090] binder_alloc: 2935: binder_alloc_buf, no vma [ 2095.127520] binder: BINDER_SET_CONTEXT_MGR already set [ 2095.132326] binder: 17380:17381 transaction failed 29189/-3, size 0-0 line 3274 [ 2095.139478] binder: 17380:17390 ioctl 40046207 0 returned -16 [ 2095.139598] binder: 17380:17388 unknown command 1086006531 [ 2095.169221] binder: 17380:17388 ioctl c0306201 20000000 returned -22 [ 2095.180852] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.186449] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.197240] binder: undelivered TRANSACTION_ERROR: 29189 [ 2095.202821] binder: undelivered TRANSACTION_ERROR: 29189 16:30:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x10040, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') sendmsg$nl_netfilter(r1, &(0x7f00000014c0)={0xfffffffffffffffd, 0x0, &(0x7f0000001480)={&(0x7f0000000340)={0x1108, 0xa, 0x2, 0x208, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x6}, [@generic="0eae852f85b27b65b01cdee285387a3173c8ac9959d38175de606f39ac5b27fcb57129893c8ad3612ec1bcdb037fa7eeaa982162be16689e55fd6777f0afc4a93ee81bf7992bad8d7be409a0df14abfaaba97b990f55f50f158e", @nested={0x98, 0x8, [@generic="6d029cac80c60b6238c6fa295735ef067f23c5e3b82d8f63affa799458180685f0115a9cfeaefec940fb30edbf864021eb489d7fa4732c8112979752de6bed94357f55a1f2ff82d23a13851af14ceef9dbb45c68187e5a40dd09ae83c9d29ca7be2cbeaa16154123b2226685fa91df284c1a67bfa7c708a8f5199894b2a7f431cc08a9dd19c8874871467dd358a1dae6367258"]}, @generic="7b5920b2d20927a230d50efdbd53947cffe63580da08003c7789f670d6cb37ed6125baaad168a6567cd1ff50decea8e11a0d58cf0e2e05c2c96ab519440753d922ebac2214496b0a8f13ed1495aaa7476d6d64f45f0b047495f527302f4a9b8eed8e7bf255ab787dd3d4a44884b2a78abbf5c1e1c1708dd783845b21d1a5d3014b30b25852774cc60bb60c847e2fc9056374b33594ec6847d8e27cf946df8a3bcece86882cc8c77fc8c8351c1f4105e08a095102a156179e8efdd593813abd2e7240d977ca9267b3aa8e1f46801849ccf1c682217f4b93bef24a129a7c9a63a3d142907bcd23123b438a100a9216a15f9b95a0fb26f0f70affaa103a36eb6fc4225b40158256c38e642d05472dd7b4d3026a6b627402b6c37e01055c45ecf8036751db8e8c791b06faf1c3db839ff9e472fd2edd6783a2f32637e305b5ddc1acfd2c31848a582ca71c59096138b6e06a572c15e058b0421865911d91b24c81ccafd60ebe030d9134fa48708de14b297d132608ad651e5711d6a6561a26e421e036171cbd97329a17140e57bc509361ae04cad7a002eb99ae84211faad97b9740f512395c737d085fe003900a752be82a1ae3798133d643618f1dbe4532ae146bf18a80b4fcef3dab31fbff71400200c991ab06d3a121c756ba2ab1e4293946d92fa1c1fbb5d7649944e25b6d367b48626c113dc0688ca9535d2ed3ad8a3789cee0ad2d374d045ce59f342966dc29ebf1965c6ec63073a3b2873fe161b046550f14e0741ae53dd4536a3d2dc4065c0239271a744214860afb2e460c2a9a2a66018c6717c672192a9724f3408ce2cea549f56e72af57e3f9078e53cb6158849c5bc477dfe7ea7f5373ee748edae446c880b2e556e9c6034a09bef0b8465818398aa3cdd0d9160b75d4e3d6f734e9cec53ced8fe62bec9cf56481c9289cc4a36d839ab1edebe96ef528c27136b45480c304ae5a07986878f29e540834c05510b9d6b896d5cf2cac531735336542f7d938cf61b26c42258ac6c12f8d1dd11613034bf94304594aede8d30dc6af2f14f23ea94de2d656e81d1f3c7cc0dca14cc0b61730f39a6a88300c711c934bf3ef8f1814d732b0cf8e65a3eae274c8aba09a575d326fd4395897274e40a686627af91247d59601f46579fcc69d7dd7aa5e6affd37cb795416526c24e863e509f413c8a02962d623db76a242941352d76785292c7a53584f4051b715e35939bf8390d589fc62fd954e9a042d274f3d0d4c7dd4930d18d74e262e10944fb82cb3ce551fcab87d1ab385cb9ff9c0cc6dbac11aa7bc2681e137083194412bd8a2b6052a40dc4b0b092459c2c875bb9e003e800d64c73dbbd180aa6f9adece6c595150c7e8eccfcc0433aee84be2abd8b4e8c2719b96fe67d700375bfa2dacf87496d6578c20816d0e30744e39c6cf42d7188abab3334bc873f4ad3f07d00400dcb51cc34ebd1faa974ce40cc929b8fdad97da103fb099e58e6acbecb10d4e6e2e508aea163e8093942755b20eee179f18baf9bc0d242e89792b7ccc91241a9f9ea0e25a7cc6ce5ba78fece0f7a1f7d59ecdad6cb0a6aafc464b042134fc35d6b9b09a06344292414fbb468a9cdf99e17f54c3f8e1d6c7f3a49bf92bdf3ad0fa1b7d730ca16714a46cf89696ddd378a07ad65674c5389139f981d528650248f4c53be7ab7f47031dace6a547d21d36588ec84e5ee00d13b8f977cc5f09f75cf47bae82ec956ff5831a6de0df0026bdc9f0bee2d4508319acd9a5a466358a100b4c0375bec55a7fecca95d9f6a2323a4f7230e11d2fc5db904bccc753a0c5fde2be2c6096fb0e18ec41fa7c3c68fd20874cd2062860ba467cf79a17a94e3c7cff51dd057dad35dbc0a9b0b36848c406103b4fc1cb1ed5c2c0e928d6343f3fca828219fa2da6a2025beed7ad5eb068f01869a37cfdcbefc5f8025002fdb8196b3c94ddc6aeedfe29d5f93f315e6fd323825173ca4f8c17699f94d544b8ff80e9f2479704551d5f203802eaf388e84902be64c16412f9e9328e08835af2bbb6376dba6eea2f14ee9b676dd4f8877b09259bcc3cb100d7f99a5b5ced486c5dc5666018126923d8ec60115e4811c08c21369a01b82c578f9288dcd1408c01734fdeda8dbf13f2af190024506f71345ff6468dc61d2e2d6afbdc6123d2d76e47de1aed05776b21e96ac0d4b4958f8fc96c53fe113e39c56e28b9ea6cec6a170b276979e8ad99ef0530864aa0a672539bea1531d8244e91149bada2d0d11cbd85f5cc8ab711974dfb9032d0f15d77100afe82919b1cd4ad50e27a86409c06b52eb479ccdd7676cbaaeb9a6d44e65cdc17610708c46efdf66f87e3a840c51bf26bae3151d2dc5dd07e1cbb0db6fa8753a7172002bd415311894be8a9637fa794bcf2d8916f572bd0e9c834da0de56442a4a39bc62b67db9ac5cfead1b261f62d73b0dfdf5c6632f5536a4ada16a367d53be7a6d5c4dc1b4afaa0d014bd5763f0fb6d1b520774c4cdcea446e5d567d759d4ebf059a0e423e92b304309a63587d63698eb0bc9adb89d746e197947d91aa98b7e26a9b543d64b3f0d23ca5c70f489872650dfac942acf3553abd4585dcb6a3dc8f15a38cb71fa721edd5ff0550cb7ddabe561455dd313eb84887848aad7ceffc0454ebb982eb703c7308e9dc8a127d5f8e130ce0bb3cfbb79debc70ccc87fb24f4bc69ed3aee775e15882075c9fab18946068d5c9ec9b3c3b488d69043d64c671ce7c9194a77cb630dd94269d2eb6936199b21ca76ef9c39b97c77100de680dad1b3244dc44f7b0bfb0473a10d32c5c0fd020a3e216c988ff95d410e3c065f0a733215326a5bf1cccf9dfbf6b6c676615e9fe7cc93128aa2ad8d30fa0d05c3a0e1b80136b97cea6f1224f69206a93100c59aab88b0348c7c6a7a0deaebcf2df5c34b7487abe80871ec966568035786ee1ee4ecc1e67af279f1e82026e3170babdb06297c8ebba61be208d14d45f3eba1c938f195cce110382433dcf61895cbe2439ab7e637b3e0fc7e5ac5b10192f9d0abd5ac616ca1821d4abe5142d587a8439f6f27ef7d111e865544ba8ead3d3971bc9246438c2a417fc3c092889a02b852dc6388d246af126e9ee296e75b1c36a82fc858e28e2931cf901cee1adad39b5260334cef154cfdc3e11e85387c5fd2c7779e8b8cb97efd34b1d053d86fcfa8d6318949f91e876416c97e6a92ce63c0431f9160da10713cbc7cab0ca36bf037e8618973fcfdaba7482c43c52b7459d4f12af7ad74f4c8186ebdb3034dd730f36bbd275029425d908a2a85a12d4cc30b3bf3b811d7b7001fac1f8d019ce65616015c7a31ad769624007b3cbd9765f3cedd61fc7d75c96ba5eb8a405f4fc3e342aaa6644634d35f951568bf9734747cfe5993ff35926f0ef9c29312d7565c9949db3b4729e9c61f91555aef86618b6df90e509939699c706759449ac996445119c9875f1efd62344c2f55c2c5e25318dd77a8f0b9650385685af5226c44634b183bfd1b82dbcdff65a4d77af8792d573329656c13082c10039aafa92a52bf7784c683e18cc57a30dd12bdd2451cd32058eedcbfe6e7c2d24b199f9f0ead691acbdd2ae8abab52dbd54995bf14df8fd52751848354e9eb99e460c5a354d211f434a6a54f4572c36fd314723055107f9cf0f16dc8667195daec8ae86c94de33accd7e6e08ea7c32a8ccef491a83b7625cb874a04347c4c00138d28eab37cb9c2994af95633337f1b3dbb80f80d265f8f4e4074551edf7695fdcff9076a98204a271c2a50787e07b787fe558f97bdaaee28767c027081064b999833d7a156a799619d5147916c824428b4a6216e80f8930f2e30179f4ebdf736c706231b8dd781efa201260d7f019e481e6b5bad46ed65c1cc410a97dee7c501caf6328bccd01d59ad2998c5b90194b9759de6937d88ff8e94058ca2418f0bcb0a0d3505ae01f8b73355265912c97d540eafb36876ac99fc2fba583ca39d484aa666684d9efb22b278784d0736935e95dc67e4bdbd132e3bcab4531dcfef0c0a485e4c509c4e02873227bb7c185f9faf1b60853ff6242f4efed0fcfe3faee6f65489a56beefa89a451afe133f4470674a641654d6ab24711abfa743d727ff0922986b12cea996ec60a12f957b2f54f9ea068432a3f6460fdd657ab7de3ee09b249e735a956131c4e4e4e2f1d47fa688b914c0fb117b5e47737ad192efe033ca2d158ac166abf2ccdb984747aec74a7488d530f9662d5977788d1f47f346ff12a614f98c1130072038570b3a93430e0ea5769fe98a473bfbe3eb6cd2f6f70181a5dcf3a8007c29a8c170a077c7874c3ceb05639833aef8fd031b260bcb94b2ff30360d687aeab5e2dbc016285e98383a2981e05efd0647e5548df398d9a07a38840c6fa99d9a49b6aa408dd2f6562fced362572ae2dce5381750e1629f8457451390561700687c0dd11ad5ba7a36d5c4b9fa08af354dc5cfebc99e52fd2bde55c710086b26e8a05917bf0fecb59a97d21e94c9c1234d4687decd699607100a4084d3731910d7a2148e4b6d653311e7ad8a6eb9f711f7bee938842729b69481df5b48c0f7c6aea4f2f609de04c9e1940e823d965d275fa0d6d320ea353f17272673194bd97c6acfcb391d95a6286fbe7ff8ff0e7466bf138f87f87e144bf7fca891e3f1b55403dd54d0f765839a1b3a8dcc08f2dcb78aac1b8bc3ea9463a7fab9ad4d371c76abcdf31d167cfdfce47933e6e5f1e1d65146d2a6eb699417dae855ea8caa9c2cffdce1b8ed1a4e29f3eb12916376a6812d9332f7030ab2eae712df6fa6b2b10a0268586d6ab5728e365a982f0fc6dd81ca083f09779da0f44eba802a1f7fe19fe778ec56709a12bc33143c1b465be33d59cc5c045df0ebeaa65b3c57025ad3860376baa95a852b1b010afbf78d26727b52cb92019e1b516022814cf625c477e7ba9203043798676e27fbcb43729c97a3eb1fbeb29e4db52bc9ebb6a7ee506507be4b007802b665649311122df84befcfc37aac31b4d473e5090ae31e6c59a3d59883f7736aea5293f180b6bd51de0330b24a51cfa1895463cde568a356ca5888aa5687b3d30a985cad1b838fdd479d49d02345813d5d6f44fcf61f48df720211dd717e29b126fdd725e88ecc897634e467fabfcd25c010462a7491ee850b7723aad555a3977bd2393723fde5d23fe56003ff6b749376800741358ace3c7841c737ace3ff20a0fb392d88e3010a7d7de8e6cdcd794a0973b2376c98498beff97e860f769c922fe7421a752e9eaf2d3db06b3b8d0a8abc24af73461e8c4da427daf8609dacd758958736e63a47fed5f9c4ac897dcda28995934c7dc3db4bdec3804444377ec18a0250c29c094b71b073b24d452acee298bd766fd495e5a0125bc772d708f89f190885ccb69551d7636b9b9382bc7b9b93a1e715d1dcfe7e49a5b1d5a5405aada65335f7db68a639b4f2b728802aa89e0849af84d48f9cdbb6c408189c5c6316e386de027cef1e5654d9c2246df977a8c571f4d4ce7a71bd3eca37c1bccbb732a85a2b81b74099e162c201cfc661188d2cde7934f1d04b1cefb6912df71c81f091736580741b70bf1d4e920e0952cf69b4b7d622827370aba7aa7cc5c885bb939832669d49fefbbf32702712b9067aa7441ace54f9e4d55161373f18c3a9f8c0fd4b5a090c752e522a26f1e338691549784de442b61059c6e074e13d98e0ee67b546c9a7889909372f1b1c4ca049946fac75a9abfef30ca64436762908ef84530db4be816acb230c12"]}, 0x1108}, 0x1, 0x0, 0x0, 0x22002}, 0x40) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="aef6c527c0cd1838aef18df25970bd5a6586d1824334715637338dd038a57c5c59c981abd3ac73e73250519fe0798e71a525176510a9a26d5bc0726db12efe2c0b514a06f573449a62c68b7afe8e0582bc1fa9e4ed9cddaab0cdd3573a95f28ea291fce98fb0e04a0e948a9cefc8b3cf09268084244f1f8c7d226ed6c706045b6ae54d35e54f869a73d3efc0dcf6093484ed3c20cfbc473197d9c042871431d7a4863b16dcd0f00abec4c0220f405e02e41b3b", 0xb3, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000001500)=0x6) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8000000000, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x52000, 0x0) 16:30:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000780)=[@dead_binder_done], 0xffffffffffffff70, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) r2 = epoll_create1(0x80000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) prctl$PR_GET_TIMERSLACK(0x1e) fadvise64(r2, 0x0, 0x377, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 16:30:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYBLOB="f41566e59b794c4dc770a5963e84280ef1702f9a184cdff43c5b5f5ba1329a43", @ANYRES64=0x0], 0x3c}}, 0x0) [ 2097.482929] binder: 17399:17404 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 2097.490490] binder: 17399:17404 ioctl c0306201 20000000 returned -14 [ 2097.497617] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.503532] binder: 17399:17404 transaction failed 29189/-3, size 0-0 line 3274 [ 2097.512955] binder: 17399:17404 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 2097.520762] binder: 17399:17404 ioctl c0306201 20000000 returned -14 [ 2097.521276] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:54 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x202081, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x35) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x52, &(0x7f0000000080)="15eed3f735518ac4e871aeaa385a055f3a7d045786e9cd89096af0a31483ec5f35d58be75f899f2b098390986ad40bf612a1a04bd176c7ba", 0x38) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="086310400000000000000000000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000317676390004000000a13abf7d99135ba800126348400000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000504dabb7b4415604cc00000000000000000000684b2ebde1be64604649667a56313253f481f04c069671fdd9d76e766c0965a9fd"], 0x0, 0x0, 0x0}) signalfd(r3, &(0x7f00000000c0)={0x7}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:30:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2097.532834] binder: 17399:17408 transaction failed 29189/-3, size 0-0 line 3274 16:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x971, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2097.617825] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.624243] binder: 17416:17418 transaction failed 29189/-3, size 0-0 line 3274 [ 2097.636955] binder: BINDER_SET_CONTEXT_MGR already set [ 2097.642455] binder: 17416:17418 ioctl 40046207 0 returned -16 [ 2097.649107] binder: 17416:17418 BC_INCREFS_DONE u0000000000000000 no match [ 2097.656702] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 2097.662400] binder: 17416:17418 transaction failed 29189/-3, size 0-0 line 3274 [ 2097.675189] binder: undelivered TRANSACTION_ERROR: 29189 [ 2097.682415] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.688073] binder: 17416:17429 transaction failed 29189/-3, size 0-0 line 3274 [ 2097.696424] binder: 17416:17429 BC_INCREFS_DONE u0000000000000000 no match [ 2097.703703] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.709364] binder: 17416:17429 transaction failed 29189/-3, size 0-0 line 3274 16:30:55 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x16}) 16:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x6f4, 0x200, 0x5, 0x7, 0x9, [{0x8, 0x0, 0xe7, 0x0, 0x0, 0x1a00}, {0x7, 0x81, 0xedcc, 0x0, 0x0, 0x4}, {0x3, 0x1, 0x70f, 0x0, 0x0, 0x800}, {0xfdf, 0x6fa, 0x1, 0x0, 0x0, 0x100}, {0x8, 0x20, 0x517, 0x0, 0x0, 0x1000}, {0x1, 0x8, 0x2, 0x0, 0x0, 0x2000}, {0x1, 0x2910, 0x8}, {0xe4e, 0x0, 0x6, 0x0, 0x0, 0x2404}, {0xfffffffffffffffd, 0x1ff, 0x3f, 0x0, 0x0, 0x4800}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'team_slave_1\x00', r3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="113348400000e093ad82000000000000000000000000000000000000000000000000000000000000000000000088c33bf2e000fa946500000000000000000000000000000000479bbfa50c59"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2097.718215] binder: undelivered TRANSACTION_ERROR: 29189 [ 2097.754202] binder: 17439:17440 unknown command 1078473489 [ 2097.759978] binder: 17439:17440 ioctl c0306201 20000000 returned -22 16:30:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYPTR], 0x238}}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400801, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) r2 = dup2(r1, r0) ioctl$RTC_VL_CLR(r2, 0x7014) [ 2097.767631] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.773791] binder: 17439:17440 transaction failed 29189/-3, size 0-0 line 3274 [ 2097.792203] binder: BINDER_SET_CONTEXT_MGR already set [ 2097.797568] binder: 17447:17448 ioctl 40046207 0 returned -16 [ 2097.797855] binder: 17439:17440 unknown command 1078473489 [ 2097.804169] binder: 17447:17448 BC_INCREFS_DONE u0000000000000000 no match 16:30:55 executing program 3: getrlimit(0x48776027a524b669, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2097.809656] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.821858] binder: 17439:17440 ioctl c0306201 20000000 returned -22 [ 2097.828424] binder: 17439:17444 transaction failed 29189/-3, size 0-0 line 3274 [ 2097.833524] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.841642] binder: 17447:17448 transaction failed 29189/-3, size 0-0 line 3274 [ 2097.880551] binder: 17447:17448 ioctl 7014 0 returned -22 [ 2097.886597] binder: undelivered TRANSACTION_ERROR: 29189 [ 2097.930722] binder: BINDER_SET_CONTEXT_MGR already set [ 2097.930969] binder: 17447:17452 BC_INCREFS_DONE u0000000000000000 no match [ 2097.936198] binder: 17447:17448 ioctl 40046207 0 returned -16 [ 2097.943458] binder_alloc: 2935: binder_alloc_buf, no vma [ 2097.954592] binder: 17447:17452 transaction failed 29189/-3, size 0-0 line 3274 [ 2098.020567] binder: undelivered TRANSACTION_ERROR: 29189 16:30:57 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="08631040000000000000000000000000000000001163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001263484000000000000000000000000000000000002100"/172], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x8, 0x0, 0x2}}, 0x14) r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fdatasync(r7) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x40000, 0x0) r9 = geteuid() setreuid(r9, r9) ioctl$TUNSETOWNER(r8, 0x400454cc, r9) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x0, 0x2, 0x39}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000100)={0x0, 0xfffffffa, 0x30}}, 0x840}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2100.486973] binder: BINDER_SET_CONTEXT_MGR already set [ 2100.492390] binder: 17456:17457 ioctl 40046207 0 returned -16 [ 2100.500371] binder: 17456:17457 BC_INCREFS_DONE u0000000000000000 no match [ 2100.507519] binder_alloc: 2935: binder_alloc_buf, no vma [ 2100.513388] binder: 17456:17457 transaction failed 29189/-3, size 0-0 line 3274 [ 2100.522256] binder: BINDER_SET_CONTEXT_MGR already set [ 2100.527650] binder: 17456:17457 ioctl 40046207 0 returned -16 [ 2100.534238] binder: 17456:17457 BC_INCREFS_DONE u0000000000000000 no match [ 2100.541481] binder_alloc: 2935: binder_alloc_buf, no vma [ 2100.547042] binder: 17456:17457 transaction failed 29189/-3, size 0-0 line 3274 [ 2100.556034] binder: BINDER_SET_CONTEXT_MGR already set [ 2100.561429] binder: 17456:17457 ioctl 40046207 0 returned -16 [ 2100.567728] binder: 17456:17457 BC_INCREFS_DONE u0000000000000000 no match [ 2100.575248] binder_alloc: 2935: binder_alloc_buf, no vma 16:30:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:30:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = dup(0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100001800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x100}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}]}, 0x78}, 0x1, 0x0, 0x0, 0x8028}, 0x20000000) 16:30:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000f80000000000000000000000010018000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000000000000000053d979549695a04a36802472dd79e121d0005000180000000000000001b0000fe8000001000000000000000000000ff0000000000000000ddd78431e3225fa36c0dbeddb81c4b61b192e0055606ff9fe72c243a095b1c69d055f07a0d32"], 0x78}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/191, 0xbf) [ 2100.580858] binder: 17456:17457 transaction failed 29189/-3, size 0-0 line 3274 [ 2100.594548] binder: undelivered TRANSACTION_ERROR: 29189 [ 2100.606879] binder: undelivered TRANSACTION_ERROR: 29189 [ 2100.621617] binder: 17456:17465 BC_INCREFS_DONE u0000000000000000 no match [ 2100.624456] binder: BINDER_SET_CONTEXT_MGR already set [ 2100.634924] binder: 17456:17472 BC_INCREFS_DONE u0000000000000000 no match [ 2100.645812] binder: 17456:17457 ioctl 40046207 0 returned -16 [ 2100.645854] binder_alloc: 2935: binder_alloc_buf, no vma [ 2100.657531] binder: 17456:17465 transaction failed 29189/-3, size 0-0 line 3274 [ 2100.665175] binder_alloc: 2935: binder_alloc_buf, no vma [ 2100.671013] binder: 17456:17472 transaction failed 29189/-3, size 0-0 line 3274 [ 2100.671361] binder: BINDER_SET_CONTEXT_MGR already set 16:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="11634840000000200800000000000000000000000000000000000000000000e8bc00000046ff2a676a00"/76], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2100.684139] binder: 17456:17477 ioctl 40046207 0 returned -16 [ 2100.690223] binder: 17456:17457 BC_INCREFS_DONE u0000000000000000 no match [ 2100.696247] binder: 17456:17465 got reply transaction with no transaction stack [ 2100.699017] binder: 17456:17457 unknown command 0 [ 2100.705302] binder: undelivered TRANSACTION_ERROR: 29189 [ 2100.709964] binder: 17456:17457 ioctl c0306201 20000000 returned -22 [ 2100.722199] binder: 17456:17465 transaction failed 29201/-71, size 72-24 line 3036 [ 2100.730378] binder: undelivered TRANSACTION_ERROR: 29201 16:30:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x6) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x100000001, 0x1, 0x7, 0x4, 0x21df, 0x5, 0x2, 0x9, 0x6}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2100.750525] binder: 17482:17483 got transaction to invalid handle [ 2100.756822] binder: 17482:17483 transaction failed 29201/-22, size 456997404486-0 line 3128 [ 2100.767313] binder: 17482:17483 got transaction to invalid handle [ 2100.768458] binder_alloc: 2935: binder_alloc_buf, no vma [ 2100.773657] binder: 17482:17483 transaction failed 29201/-22, size 456997404486-0 line 3128 [ 2100.788125] binder: 17482:17484 transaction failed 29189/-3, size 0-0 line 3274 16:30:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x100000001) 16:30:58 executing program 1: syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @local, [{[{0x9100, 0x3, 0x2, 0x1}], {0x8100, 0x0, 0x8, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "7dd0b7", 0x68, 0x1d, 0x1, @loopback, @empty, {[@srh={0x88, 0x4, 0x4, 0x2, 0x1ff, 0x0, 0x0, [@rand_addr="b2c0c66167eb4024b4e383823927e672", @ipv4={[], [], @remote}]}, @fragment={0x5e, 0x0, 0x7fffffff, 0x400, 0x0, 0x5, 0x64}, @hopopts={0x1d, 0x3, [], [@calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x5, [0x9, 0x6]}}, @generic={0x80000000}]}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x10, 0xffffffffffff4b87, 0x101, 0x9}}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x62d, 0xf41, 0xd70, 0xbdb]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.upper\x00', &(0x7f0000000180)='ppp0nodev\x00', 0xa, 0x1) 16:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0x3ff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x138, 0x0, &(0x7f00000001c0)=ANY=[], 0xffffffd9, 0x0, &(0x7f0000000300)="75e512c3332821aeed4603e6aceb6e71d7a488df72d2291fbf8b6f0dd2c178239f665d8200005e6a03a84fdb18aa545c4e652092a4e6ff00000000000000cc0a2729bbb58056aa7b3d15f2"}) [ 2100.796225] binder: undelivered TRANSACTION_ERROR: 29201 [ 2100.835448] binder_alloc: 2935: binder_alloc_buf, no vma [ 2100.841888] binder: 17495:17496 transaction failed 29189/-3, size 0-0 line 3274 [ 2100.850771] binder: 17495:17498 unknown command 0 [ 2100.850800] binder_alloc: 2935: binder_alloc_buf, no vma [ 2100.855807] binder: 17495:17498 ioctl c0306201 20000640 returned -22 [ 2100.861635] binder: 17495:17496 transaction failed 29189/-3, size 0-0 line 3274 16:30:58 executing program 3: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x14881) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000780)=[@increfs_done, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$notify(r2, 0x402, 0x1) [ 2100.881382] binder: undelivered TRANSACTION_ERROR: 29189 16:31:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="00007fc2d4cced72db08f6510000000000000000001042d9dd3d19f828fff0daf3bbd25ac1732ecdcd0ddbc6ee9d303b0fb57049af2f156c") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 2103.509334] binder_alloc: 2935: binder_alloc_buf, no vma [ 2103.515064] binder: 17506:17509 transaction failed 29189/-3, size 0-0 line 3274 [ 2103.524593] binder_alloc: 2935: binder_alloc_buf, no vma [ 2103.530373] binder: 17506:17511 transaction failed 29189/-3, size 0-0 line 3274 [ 2103.538433] binder: undelivered TRANSACTION_ERROR: 29189 16:31:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a0000000000000000000000000000000000000000000000395d0ad0bb4fa81171233c06af419c8d00000000000000000200010000000000000000000000000005000500000000000a00000000000000fe80000010000000"], 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x8000) 16:31:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000003f0c0000000000000000000000000000000000000000000000000000003d830000000000000000000000000000000000000000000000000000008af2e53ba6c76c19d28af185d3bd971af716500b44c415d517dbd07f3bd21405e763a4820bd3d87d33b549f7590343bcfc83f8bcd8e64ecc2b89b1887b8fe0f853cf6c4b1b0a42634930a91e00574c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r1 = syz_open_pts(r0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) readv(r2, &(0x7f0000000780)=[{&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/185, 0xb9}], 0xa) 16:31:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup3(r1, r2, 0x80000) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) [ 2103.664457] binder_alloc: 2935: binder_alloc_buf, no vma [ 2103.671711] binder: 17517:17521 transaction failed 29189/-3, size 0-563664125952 line 3274 [ 2103.701572] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) eventfd(0xeb) 16:31:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0xa1) renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$getflags(r1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000b00)={0xf300e8f38a873b1b, @loopback, 0x4e20, 0x3, 'none\x00', 0x22, 0x7ff, 0x38}, 0x2c) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000f9ffffffffffffff00"/76], 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") recvmsg(r3, &(0x7f0000000ac0)={&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000a00)=[{&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f00000005c0)=""/55, 0x37}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/129, 0x81}], 0xa, &(0x7f0000000600)=""/24, 0x18}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2103.708033] binder: 17517:17521 transaction failed 29189/-3, size 0-563664125952 line 3274 [ 2103.710361] binder_alloc: 2935: binder_alloc_buf, no vma [ 2103.722243] binder: 17517:17536 transaction failed 29189/-3, size 0-0 line 3274 [ 2103.731305] binder: undelivered TRANSACTION_ERROR: 29189 16:31:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) [ 2103.769711] binder_alloc: 2935: binder_alloc_buf, no vma [ 2103.776316] binder: 17543:17545 transaction failed 29189/-3, size -7-0 line 3274 16:31:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0xa0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000001660112dc788e4ec66d400000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe80000010000000000000000000"], 0x78}}, 0x0) [ 2103.831343] binder_alloc: 2935: binder_alloc_buf, no vma [ 2103.836985] binder: 17543:17551 transaction failed 29189/-3, size -11-0 line 3274 [ 2104.564151] binder: undelivered TRANSACTION_ERROR: 29189 [ 2104.570451] binder_alloc: 2935: binder_alloc_buf, no vma [ 2104.575958] binder: 17543:17551 transaction failed 29189/-3, size -7-0 line 3274 [ 2104.630846] binder: undelivered TRANSACTION_ERROR: 29189 16:31:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r3, 0x0, &(0x7f00000000c0)=0x4813) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:04 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x3cf}}, 0xc2cae21f3be190f6) 16:31:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', &(0x7f0000000140)='\\security{cpuset\'bdev@(-+\x00', 0x1a, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2106.686510] binder_alloc: 2935: binder_alloc_buf, no vma [ 2106.699492] binder: 17567:17574 transaction failed 29189/-3, size 0-0 line 3274 [ 2106.717462] binder_alloc: 2935: binder_alloc_buf, no vma [ 2106.723143] binder: 17567:17574 transaction failed 29189/-3, size 0-0 line 3274 [ 2106.728876] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x118b, 0x3}) 16:31:04 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x17e}}, 0x2040000) [ 2106.736185] binder: 17567:17580 transaction failed 29189/-3, size 0-0 line 3274 [ 2106.744420] binder: undelivered TRANSACTION_ERROR: 29189 [ 2106.765517] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) 16:31:04 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000000c0)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000b51900000000000008f75d770a00"/76], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000580)}) 16:31:04 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x800) [ 2106.780500] binder: 17583:17584 transaction failed 29189/-3, size 0-0 line 3274 [ 2106.789302] binder_alloc: 2935: binder_alloc_buf, no vma [ 2106.794914] binder_alloc: 2935: binder_alloc_buf, no vma [ 2106.794931] binder: 17583:17589 transaction failed 29189/-3, size 0-0 line 3274 [ 2106.801104] binder: 17583:17584 transaction failed 29189/-3, size 0-0 line 3274 [ 2106.816232] binder: undelivered TRANSACTION_ERROR: 29189 16:31:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@acquire={0x40046305, 0x1}], 0xfffffffffffffe0b, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2106.851269] binder_alloc: 2935: binder_alloc_buf, no vma [ 2106.856916] binder: 17591:17593 transaction failed 29189/-3, size -646266546527666176-685917 line 3274 [ 2106.867378] binder: undelivered TRANSACTION_ERROR: 29189 [ 2106.871275] binder_alloc: 2935: binder_alloc_buf, no vma [ 2106.878307] binder: 17591:17599 transaction failed 29189/-3, size -646266546527666176-685917 line 3274 [ 2106.889633] binder: undelivered TRANSACTION_ERROR: 29189 [ 2106.911449] binder: 17604:17606 Acquire 1 refcount change on invalid ref 1 ret -22 [ 2106.919290] binder: 17604:17606 unknown command 0 [ 2106.924715] binder: 17604:17606 ioctl c0306201 20000000 returned -22 [ 2106.932134] binder_alloc: 2935: binder_alloc_buf, no vma [ 2106.937609] binder: 17604:17606 transaction failed 29189/-3, size 0-0 line 3274 [ 2106.947813] binder: 17604:17606 Acquire 1 refcount change on invalid ref 1 ret -22 [ 2106.958726] binder: 17604:17606 unknown command 0 [ 2106.964002] binder: 17604:17606 ioctl c0306201 20000000 returned -22 16:31:07 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 16:31:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="086310400000000000000000000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b4a507def6aec9025b839f7d77c42500fed504b48b9a4c0cc2a66d2dfd242169448a85e0edfae76e19485a8299a"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffba, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:07 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2109.717312] binder: BINDER_SET_CONTEXT_MGR already set [ 2109.743216] binder: 17612:17618 ioctl 40046207 0 returned -16 [ 2109.746885] binder: BINDER_SET_CONTEXT_MGR already set [ 2109.752634] binder: 17612:17618 BC_INCREFS_DONE u0000000000000000 no match [ 2109.757522] binder: 17610:17616 ioctl 40046207 0 returned -16 [ 2109.762673] binder_alloc: 2935: binder_alloc_buf, no vma [ 2109.769673] binder: 17610:17616 BC_INCREFS_DONE u0000000000000000 no match [ 2109.775442] binder: 17612:17618 transaction failed 29189/-3, size 0-0 line 3274 [ 2109.781894] binder_alloc: 2935: binder_alloc_buf, no vma [ 2109.790655] binder: 17612:17618 ioctl 81009431 200000c0 returned -22 [ 2109.794457] binder: 17610:17616 transaction failed 29189/-3, size 0-0 line 3274 [ 2109.802013] binder: BINDER_SET_CONTEXT_MGR already set [ 2109.813427] binder: 17612:17618 ioctl 40046207 0 returned -16 [ 2109.819929] binder: 17612:17618 BC_INCREFS_DONE u0000000000000000 no match [ 2109.827027] binder_alloc: 2935: binder_alloc_buf, no vma [ 2109.833110] binder: 17612:17618 transaction failed 29189/-3, size 0-0 line 3274 [ 2109.841424] binder: 17612:17618 got transaction to invalid handle [ 2109.847661] binder: 17612:17618 transaction failed 29201/-22, size 0-0 line 3128 [ 2109.850514] binder: undelivered TRANSACTION_ERROR: 29189 [ 2109.856455] binder: BINDER_SET_CONTEXT_MGR already set [ 2109.865992] binder: 17612:17618 ioctl 40046207 0 returned -16 [ 2109.866294] binder: BINDER_SET_CONTEXT_MGR already set [ 2109.872562] binder: 17612:17629 BC_INCREFS_DONE u0000000000000000 no match [ 2109.881118] binder: undelivered TRANSACTION_ERROR: 29189 [ 2109.884867] binder: 17610:17632 BC_INCREFS_DONE u0000000000000000 no match [ 2109.890694] binder: 17610:17630 ioctl 40046207 0 returned -16 [ 2109.897388] binder_alloc: 2935: binder_alloc_buf, no vma [ 2109.903787] binder: undelivered TRANSACTION_ERROR: 29189 16:31:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x4}) 16:31:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000028912, &(0x7f0000000040)="11dca50d810bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000100)=0xffff) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000140)="046e4f1f1c5735278c7635fb1ce58329f4565b9b0205e3bdc027d586b77df2e586a51ba75923879aacf9252b0ae9e9cf02bd0155d0c1b99c515260ec5ba6dba08c775412b65ad8447f1ae5814ad48184a789ad"}, 0x10) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x376c, 0x1000, 0x1}, {0x7, 0x401, 0x7f, 0x9}]}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2109.909482] binder: 17612:17618 ioctl 81009431 200000c0 returned -22 [ 2109.921561] binder_alloc: 2935: binder_alloc_buf, no vma [ 2109.927107] binder: 17610:17632 transaction failed 29189/-3, size 0-0 line 3274 [ 2109.934846] binder: 17612:17629 transaction failed 29189/-3, size 0-0 line 3274 [ 2109.942490] binder: undelivered TRANSACTION_ERROR: 29189 [ 2109.961571] binder: undelivered TRANSACTION_ERROR: 29189 16:31:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/127) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2109.978356] binder_alloc: 2935: binder_alloc_buf, no vma [ 2109.984137] binder: 17640:17641 transaction failed 29189/-3, size 0-0 line 3274 [ 2109.992680] binder: BINDER_SET_CONTEXT_MGR already set [ 2109.997963] binder: 17640:17641 ioctl 40046207 0 returned -16 [ 2110.004840] binder: 17640:17641 BC_INCREFS_DONE u0000000000000000 no match [ 2110.011945] binder_alloc: 2935: binder_alloc_buf, no vma [ 2110.017401] binder: 17640:17641 transaction failed 29189/-3, size 0-0 line 3274 16:31:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x2f, 0x1d, 0x3, 0xe, 0x5, 0x255, 0x5, 0x8a, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) getsockopt(r3, 0x2, 0xfff, &(0x7f0000000140)=""/61, &(0x7f0000000180)=0x3d) 16:31:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xa4, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x5, 0x0, 0x1b}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @increfs_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x8, 0x2, 0x1}, @flat=@handle={0x73682a85, 0x101, 0x1}, @flat=@weak_binder={0x77622a85, 0x1}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2110.026572] binder: undelivered TRANSACTION_ERROR: 29189 [ 2110.030855] binder_alloc: 2935: binder_alloc_buf, no vma [ 2110.032996] binder: BINDER_SET_CONTEXT_MGR already set [ 2110.037593] binder: 17640:17641 transaction failed 29189/-3, size 0-0 line 3274 [ 2110.043241] binder: 17640:17647 ioctl 40046207 0 returned -16 [ 2110.057983] binder: undelivered TRANSACTION_ERROR: 29189 16:31:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x12}}, 0x0) [ 2110.084284] binder: 17652:17653 got reply transaction with no transaction stack [ 2110.092067] binder: 17652:17653 transaction failed 29201/-71, size 80-24 line 3036 [ 2110.101312] binder: 17652:17653 got reply transaction with no transaction stack [ 2110.108771] binder: 17652:17653 transaction failed 29201/-71, size 80-24 line 3036 [ 2110.117203] binder_alloc: 2935: binder_alloc_buf, no vma [ 2110.122192] binder: BINDER_SET_CONTEXT_MGR already set [ 2110.122740] binder: 17652:17654 transaction failed 29189/-3, size 0-0 line 3274 [ 2110.128364] binder: 17656:17657 ioctl 40046207 0 returned -16 [ 2110.136130] binder: undelivered TRANSACTION_ERROR: 29201 [ 2110.143473] binder: 17656:17657 BC_INCREFS_DONE u0000000000000000 no match [ 2110.159630] binder_alloc: 2935: binder_alloc_buf, no vma [ 2110.169411] binder: 17656:17657 transaction failed 29189/-3, size 0-0 line 3274 [ 2110.230327] binder: undelivered TRANSACTION_ERROR: 29189 16:31:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000b9000000000000000000000000000000000000000000000000000000000000000000000000000000112e3fb4b9a95d62715b4989ed19ff2eb620bbc89b5768c036e5d0bc287d222d6eb26fdd69b4480ad9f7fd832ff5238ab2c6975b1dc7b5da9f6ef19ead9e23a6f0a1c747fb0d388f21a58055a1baa6e78f91e7deda24e599c98bd6faa603700e05008fc03bbcceab1aea594882fc90d461bba7925e2a84946ca8a6a219d848ef4927f2040b9458fd3c9dacb53f89fece7744380f30676afcaf9e8a1059abadac08207df78bfb0e8678e350aae28037d637c7a70a050c9dd3d04827d713418c655d0813b6559fc59ec26df97d00005d457877f479b8fb3ce02d33d26dea305c85e6f4a4acaa18e500000000000000"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0x0, 0x1, 0x100000000, 0x8, ')#\f', 0xa9, [0x8, 0x3ff, 0x7, 0x6, 0x2, 0x5, 0x7f, 0x5]}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)={{0x10b, 0x8, 0xd38, 0x1de, 0x31a, 0x8, 0x340, 0x7ff}, "c56de10495afdbe965d0beb06f2086615c1e7ce05f845c77c007e3f39acd5cdcc35a0617b7659e356c951dc3c81aa0c2ce97e4bc1cdff5d82c08c8f964829c2b880df1ec3e634aeee749b4ecc0e7bd603a39ba41b960b1c3a44006ff1ab17b594ccde014e09a138b0f3de3ba7a945ff4b213f7cd22895a4f347d94044e5bf6ec49b6dded74282dca5b8c98fc6291551c0408c2f0d6257b0d6467fed5c682bfd59c1d9d6d35bbf76a1e6c924893bef8f2b9411e5b69b71d89ad5ebf9c4aceef70", [[], [], [], [], [], [], [], []]}, 0x8e0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f00007ae0000000070000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000"/119], 0x77}}, 0x4800) 16:31:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:10 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:10 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea36", 0x53}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2112.761925] binder_alloc: 2935: binder_alloc_buf, no vma [ 2112.773013] binder: 17661:17667 transaction failed 29189/-3, size 0-0 line 3274 16:31:10 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea36", 0x53}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000140)='bdev+%-[vmnet1keyring\"cgroup(selinux{\x00', 0x26, 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1423, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x6, &(0x7f0000000640)=[{&(0x7f0000000200)="4b8d34b2d1cfe1db5b97857133857f4e39de4b5c3893cb84e91898edadb3cde5aa8bf6c8d0ebb2ffc4745be43418193abd61297994cabc110b8ccf7e3afb3b85e53108b3e102a0ae4efd5d7258bb051e85f95ec554bb3cb453ee88d0231b479088f8d806344e49481d61f1552c0705bb585c6a9097e071a345f48a2284b381c10ae637cb834caaa87245effa9b208672c5ecf0d2e2c82dc1aca4a0776ddaad5457e7db280db4843befdd92dcd26264e3abb72484b499907afdd604a169ed67c8681492c70cd97743cf93397dc6f198dc2c", 0xd1, 0x28b}, {&(0x7f0000000300)="f88eda26c993b6e04f21a1840ca8886df64dea1b22611e17087143469f40af4462318dc16ad16f3a60b3762c8803c2b3e41d65340d6ece5a79965af2cd4e654eb3c5f34bec303e74fa37", 0x4a, 0x9}, {&(0x7f0000000380)="740f0fec628aeb7b2448abb9e2b70f284010db7341d4188e17ca37512ecf55ea1efccad26aa14de8a9ba2ea8774761e00e8443130f7137c21043a386693faf708e8455814acab238b7f8f2894f1d7ba3d08654d29b6c3d04a322f0af86ff6f1f82786595b9d709c025d280273c76944af1876a3c50b2601800ac23ba59a90732cc89dfb51648bd00a31a19eb3ac4a4159ca8ff828018ecdf7c1fb7fc0c4569c2995ca7a8e6c47d4ae59686d5036cdd076c378b2da883a34e", 0xb8, 0x83}, {&(0x7f0000000440)="e3e5f635e8bc0370e74e84d034ff6c89b2c82ec31c7cdc6c3d356be7f6352667f10f5b536791bfa1f6bebf7bc0e0f02458faecbe51fa986b3743c7ef2a92e99bef298e5085b33d98a8d23107f90d8db1b5755cb2832d60850ef5d90b51dd6bdb39fa2f77d5517184a13047b7a2c095f031cd16609e531eb88a96893ffcb994668ed37df25bce6f56dbc78c9e022c5d235b69ff0c4192822369f7b6feaa02afbbe9c01134c4e5d2cf6034fc3b567da91abdfe4bc6c28bebc3c581cf259ae8ed06f7a5ef36ae78b5d33c6177a8e2792b", 0xcf, 0x4}, {&(0x7f0000000540)="f24eed62374c2b19d01da26357deeba983c0eec3fcf19768ee761a1eb18f1e8f00968f3ef91bf2677827f2a95019995586166479e2b147a30af87d373cdd1011c9b8f4223d626311d2cfee9574e5e7", 0x4f, 0x4}, {&(0x7f00000005c0)="eb979f13ceba786fe52e9e9818398e53b43da7e2bd3426e81cf6518c1f4a028c392320c3c1b9bc4430d4d5df1db57ab975f05b78ccd7d77bc98b9ea4cbae358950b4", 0x42, 0xfffffffffffffff9}], 0x2208800, &(0x7f0000000700)={[{@rodir='rodir'}, {@uni_xlateno='uni_xlate=0'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}], [{@measure='measure'}]}) [ 2112.802471] binder_alloc: 2935: binder_alloc_buf, no vma [ 2112.808160] binder: 17661:17667 transaction failed 29189/-3, size 0-0 line 3274 16:31:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @local}}, 0x0, 0xc000000, 0x0, "82f953ea65fd2bab15a06687c3e15ed90a1701df17726496a1a7ed2c13c5a3767209138f464d785ae233b95d628008b85b7c3c491b75d5372ae2888a35b16da97478d904e29d9d6074e6953418ffbf82"}, 0xd8) 16:31:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2112.844083] binder: undelivered TRANSACTION_ERROR: 29189 [ 2112.881876] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000001c40)='#\x00', 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000001c40)='#\x00', 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$reject(0x13, r2, 0x53, 0x4, r3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0xc0, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/192}, &(0x7f0000000200)=0x78) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000040000010018000000000005000600000000000a000000000000000400000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2112.887592] binder: 17700:17702 transaction failed 29189/-3, size 0-0 line 3274 [ 2112.897911] binder_alloc: 2935: binder_alloc_buf, no vma [ 2112.904427] binder: 17700:17702 transaction failed 29189/-3, size 0-0 line 3274 [ 2112.904430] binder_alloc: 2935: binder_alloc_buf, no vma [ 2112.904455] binder: 17700:17705 transaction failed 29189/-3, size 0-0 line 3274 [ 2112.926301] binder: undelivered TRANSACTION_ERROR: 29189 [ 2112.968518] binder_alloc: 2935: binder_alloc_buf, no vma [ 2112.977039] binder: 17708:17710 transaction failed 29189/-3, size 0-0 line 3274 [ 2112.986591] binder_alloc: 2935: binder_alloc_buf, no vma [ 2112.992339] binder: 17708:17714 transaction failed 29189/-3, size 0-0 line 3274 [ 2113.000530] binder: undelivered TRANSACTION_ERROR: 29189 16:31:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff00"/120], 0x78}}, 0x0) 16:31:13 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) r2 = syz_open_pts(r1, 0x80000) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) 16:31:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = geteuid() setreuid(r7, r7) r8 = geteuid() setreuid(r8, r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r10 = getpgrp(0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000100)=r10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r12 = getpgrp(0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r11, 0x8902, &(0x7f0000000100)=r12) r13 = eventfd(0x9) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r15 = getpgrp(0x0) ioctl$int_in(r14, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r14, 0x8902, &(0x7f0000000100)=r15) r16 = geteuid() setreuid(r16, r16) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) r18 = getpid() r19 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r19, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fstat(r19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000005c0)='\\\'\x00'}, 0x30) r23 = geteuid() getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) r25 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r25, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$getownex(r25, 0x10, &(0x7f0000000740)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000c40)=0xe8) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) r29 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="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", 0xffc, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r28, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r31 = getgid() keyctl$chown(0x4, r29, r30, r31) r32 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r32, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r32, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r33 = dup2(0xffffffffffffffff, r0) r34 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r34, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r34, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r35 = accept$unix(0xffffffffffffffff, &(0x7f0000000f40)=@abs, &(0x7f0000000fc0)=0x6e) r36 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000005f40)={&(0x7f0000005f00)='./file0\x00', 0x0, 0x8}, 0x10) r37 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r37, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_FIOGETOWN(r37, 0x8903, &(0x7f0000005f80)=0x0) r39 = getuid() r40 = socket$inet(0x2, 0x4000000000000001, 0x0) r41 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="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", 0xffc, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r40, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r43 = getgid() keyctl$chown(0x4, r41, r42, r43) r44 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r44, 0x0) ioctl$TIOCGSID(r44, 0x5429, &(0x7f0000005fc0)=0x0) r46 = geteuid() setreuid(r46, r46) r47 = socket$inet(0x2, 0x4000000000000001, 0x0) r48 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="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", 0xffc, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r47, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r50 = getgid() keyctl$chown(0x4, r48, r49, r50) r51 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r51, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r52 = getpgrp(0x0) ioctl$int_in(r51, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r51, 0x8902, &(0x7f0000000100)=r52) r53 = geteuid() sendmsg$netlink(r1, &(0x7f0000006100)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000200)={0x100, 0x2e, 0x1, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x64, @u32=0x6}, @generic="ede7866c39a45afa318de1a521256770162b45cc7f4b6b720824d9fdf87af0041c7d5d63d64b40c90f6a0b0c23cdf51d85561e77b26ef5122776326a9f58dbea332fb37a5e58ca4c3fa1d3c10297f9d7cc16a468350a1e91e27e40b76ea49a25bc2b99fae29eedf799ba20af27588bed65b58673fd2ac12f9b8a6b3ef325b0379402b09630d3f3fe947bec9e26806df62582f2b4c8f5", @typed={0x8, 0x4e, @uid=r2}, @typed={0x48, 0x8c, @binary="1b61e7a78d60ec5a60ab4bf54af2ea94521361d3c1e5e88270e98b48d50ff5337e3c885afe1325d27421f98dcf1233cae3231e0196a2001db402c3dc5765033424"}]}, 0x100}, {&(0x7f0000001040)={0x21cc, 0x27, 0x8, 0x70bd2d, 0x25dfdbff, "", [@generic="5015edaad296c147c282e46fa8ad69ccd3361a82a7e62c7ea02a2552710a90a9b7180cf3519f7aed0db14f22329a60f3b367a50f102a65e30c747bf07769901d006d454c200c079c0c2501e741775aa28aec40554815c07f49fcd989dc5a3d9bb308e909e46508c66e6323d5b03ebcc6dd5123a15df3fa299732f22866ebc50aac45a273755d1f8517c0b5e8e762", @nested={0x100c, 0x80, [@typed={0x8, 0x27, @fd=r3}, @generic="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"]}, @generic="101e59a2cd07d7749952eab819bd4386836ef3909bf9e9fdad95961f15dbe1bb9d4c0fd7371874208b6983102b9c9027f5422467b1d353cafb2635e48ec92f61acf898471f29b1648c62fd6f8b465736e59933fb11ee1f2786effecc2225f61018f5b81799359b7d45e524a5280729a7d5073dc4e2f70785badd8a09db27a3d379a234ce75c6afeffd87991e04ce45c47deb1522f168f4cfe39e7a5dc2e5a726412549e2fcb0154f621a971533653176f4ca0bd34eaee1ee400dd59c8fd7093aac99f00c5cfbb03c95fff11c35848092d1c3a0fdcd3bf64e78c1d09b02364eeac3fd927301ec55169fe9e9", @nested={0x1034, 0x89, [@generic="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", @typed={0x14, 0x71, @str='/dev/binder#\x00'}, @typed={0x8, 0x68, @fd=r4}, @typed={0x14, 0x5e, @str='/dev/binder#\x00'}]}]}, 0x21cc}, {&(0x7f0000003240)={0x16f0, 0x1a, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1218, 0x26, [@typed={0x78, 0x69, @binary="08bdd47955decedfc275e1d87406831548da354618bc42b1cae801f299cea8f74a9de3cae705dc397961c8097b025db65be6acbb48e86af7aea8efbf834bccd4139481852f90b069945db5b75f5968cd597e4fa2425c90cf98f29736a88b2c141345e342609d3e14e7b609c4ca18f868ed"}, @generic="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", @generic="212c4cc735a0845e3759d7b62cebc3ace69427273c7ddf96967e919c1aa0142ee074b4e3e357d62c1b710ff510c27a029e5bf000c7452d66ff13957ec7082e1f3ded9c58afe1e2784692eeefb97ba47b30f04e0a082bd545f67838c2b28a56fc0ee9a80b3518ca128ba1f04c6adcb5a158310cec4cb46660852bef729c15206b35f77073cf00900ed0e3fa1eb076c2e3", @generic="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", @typed={0x8, 0x94, @str='\x00'}, @typed={0x8, 0x13, @fd=r5}]}, @typed={0x8, 0x67, @fd=r6}, @generic="5e013fcfc22ef1fa219cacf8c078626cc1e6b6c810ed728b6551c0e5cd30eb343280b37b4c83b6e0deca8c6011240e6c9ce725bd83f782f937e8406822758769f2080bd634dc57e46395d852bb88", @nested={0x2b4, 0x20, [@typed={0x8, 0x0, @uid=r7}, @generic="0a400c56aaac6004e398830c1b", @typed={0x8, 0x7e, @u32=0x8}, @typed={0xc, 0x25, @u64=0x5}, @typed={0x98, 0x44, @binary="1a4a47c5a409b8dca981a14b0f818dbf2065e16e28a008b181163f93551063703c3e62775f34051d961dc3fea0964eaacc120fbf77510b1e4e4654486197aa6c01265d64921c001cd331b5c4d1230f9ae88b78052b91ba888ffe473a5f64fd3260e61e9385b8187f4d92024fa1d67dbc1a88efe477852ac897b5a480b54c5f69ec93f155aa093e109e63dd2a6223838b4eba"}, @generic="edfd8d410fa341a9f7749e5d1cf0d4c10d5bbfbaa0dfaa0c239bd87ca72140e14d7972040d3bd33102105d7c76581090a22059ccb300f694c73e083f4ec0d3c1478e3aa5638aed9b6e31053c4cb5f7b30758ceaafc57139064b59d489fd1152ee9e1f37f9b36ec9009e12599c40b442d56eb6c9c5511a7806774c4f172ef29177e1d7dae360b6ccf55f862a9e9b981b852016be30c9f1a39171d4475a31d1fb6f0fc6c54fa03aca993781757184b2748cc54540ed1574b14ed86a4ac35608acff2ff0871ad6268f23ed9a775dc1777329206", @generic="c12f875861cadaf3fccd0b27f3cedea42c784a4afbe8b37601a9e12e9a530e94d301c97e172cb05abb8f52b4f91d4ccfdad8476cc3d2803bb8f9cb4610dc265cc8933c5d584726a298709248963265e64e880852cf2e91d75c89a9329db73473aaa5b3a4be207d063776fe640b8242097ce0d893a7724393180e54d31cc71ba1c12d579384e29db887c47021624fb7", @typed={0x8, 0x3b, @u32=0x3ff}, @generic="5ad9d9cd1caabef6bfb7c814f6081060996b53e9554eaf026332000473c6cc1b79c284dc5f396f009466e2bc359aefef2872afce3f8d9aed1f18358245614aa164c19dd26f105f8182988b915b965938db4141f580a0eff4fb049488cea88913f971e97ffefa0d564a3f173b4487834422163febc89e093d6a5b01114489eca2a2cc0f"]}, @nested={0x1bc, 0xa, [@generic="9973ea19520ebf4dac52d1cd4f0194abfc5606ac5df841e48b86cf9fda6d9727f8398fb92e44361e28abc8e4c56835f05e860feab7", @generic="0ed4fb356dd8f45ff1120eaab36f5be17f3d75a9e51f33de035b1ff52c26c9ebfb52605ed6bee36b24cc32e2fe8e8d49d1cbe01def964ab9b458bb2a4914f4517978706009f9568cdbe92a982016074f5ae86ec3bb11572d3392f1959d6fd5257a8e3f182956091430b5e19c8624f8476e3a8be0964603b9d7656c872c6c024d011676c4fd808ef5ca7ef809d56bc5b0ef77fdf7eb6ae05ba9b5b97213de1d1383b1057ddf957fc8c6e2e2a8e3c7d7029219a72894225e5c2e5c303e41275c214cfd7d9983f04f4b6087b04de147ea7f4450405b", @generic="f2231f18964eb2988e3fab5b427bb16a86ead5fe7b88756f737792f2d42e9b9d1f805a046aac2a1241451c79a688f1e07f3b5a6fc261b82a9d02a82809ca41dabede093ebf056fffad95795ac179bff87a4ac72da030e52095320c2e86bb9e521fc87d13588496fe1f9268fd46033e1f520c84864c01a69e9e841630a4d4b49e0a309909a79e578d06b4656bb0cc38f12fc1da043528b67e2af897555abaeb8361a7b5977f540de96869d08a42"]}]}, 0x16f0}, {&(0x7f0000004940)={0x15b4, 0x16, 0x400, 0x70bd28, 0x25dfdbfc, "", [@nested={0x50, 0x72, [@typed={0x8, 0x5, @uid=r8}, @typed={0x8, 0x12, @fd=r0}, @generic="f1c0be38371ef325987c53291a19f3d7a3ea880560ff5bdad136447c787fd1e3a3e6f4a719e8d9656d185722df686d94a03fd1c49a09acb7b2d8"]}, @nested={0xdc, 0xa, [@generic="868e75f1a81e8fd72f527c583cfcf22bf5303a066eb91af4759d7b3fdfc7b3074b8f189dd2b6d32c7263b15a9ee22119c0adc89340bc24bce3297e959f0f2eeed9bc9cb92d60015eb865cdbe9b96b7b63a686ebbbb011efdce4f7a1fbe9170b5afbd0dbbd02739f286ca42581d8191ebe516fa364c011cc455ed93c80113128462fabdf354d1402a2b4045db15cf10da1dc63c289d307818cfa7536fae7b617b978bf2e4e8be3683421d645c0f614e944be0ed558e4d12945cad3ea769f403bad6a30e9de0d02e150817f0a5380f7488", @generic="dc1fcbc625f0e6"]}, @generic, @nested={0x18, 0x7b, [@typed={0x8, 0x4c, @u32=0x7}, @typed={0x8, 0x13, @u32=0x100000000}, @typed={0x4, 0x24}]}, @nested={0x1b4, 0x1a, [@generic="ddc6db7eeee8ecf2c038a8a5a449ef640b14c514e77d1fd3d7c00cbb343ed7bf11495214e14496fa674968286292e0f2fa1ddb91d541bc704bf7a64de90ce03beb8c1faa27bc099f89bf1af2be4ec280ad519d0182acf58f981829984a78341d2ee35c7a230314210f7e4adcd509d38adf7b7a6ac893ea79c0697bbb7282ad319885268ae7d589d2b034bf6eb19c43882bc42c0740e26ac034a048", @generic="738cf317832ae364df81ec0658c7d7b1bf3faa3c9c128141472871dae66a1bf11a40cd700a6ae1c120c7524905a0d536c1fd77a7220801241f8bd724b05334c8c9e147a5ab67860343d059581b52e7e1395314ac773259bba45d13ee87870569ec01d37f", @typed={0x4, 0x7f}, @generic="9a39a0acb433646572911b4c8c98f1084de47a322d3e9fff3b4454adfb050371c8bd0005ed74a234de86ba999cd5e38965caa46907c6eada002326f9ca4248dc2e168250e42d2bc3ba7e34b76dfd2e8934b59c2d19207fab63c58b8d4aa416163e48a30a42b643d145cb62735b6aa9e3b9cd54370681c14b7b1e22e188311e44e94ebf8ef8a2918bf1ad020ee8d15ad4f9e073ea15fbb391fa27271357f981f51edefc9a241ab1e09eb05b46"]}, @nested={0xa8, 0x33, [@generic="0627b0f707e951a78ed1a70a5f503f6a19acf344e53c5ff33fadfae50dddc25a67cdb890d82b2fdcf18b54db9291e3edb5c9908e4a2d56ce821a40f79c758c29f79f78aba2fb755b35226102963cea80309b518ddb50901936f69f7d9f06196fed4e000b6b85038f18ba810aaa44d8a00e02837d240857a354b2cbfe70ce8275cc654d66896f392674c8b2110836b73c97a3c715dd26a209957138", @typed={0x8, 0x70, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x8, 0x80, @pid=r10}, @nested={0x11f0, 0x24, [@typed={0x8, 0x48, @pid=r12}, @typed={0x18, 0x19, @str='posix_acl_access&:.\x00'}, @generic="207865db799e2804a6f4db4b72dc93af232dd978103785360f6bf960f095a130b04d124d7eb1443dd2b25cd956cdec67bef3c9a0be87a0bd2d7f5d5f55ae64ee882c3360dd7e54560179dca9696d8eb879850ee1f61febe8eae28f2e1e73c8e2e4e07c545959cb44cdca9be26c3e7a5dccfb31db6addd029a91cfa90d35a8904f242bc34044df8cd5d85ffbda7c54d2d197d4b44896ec40a0a38598ebb73069e68fd3ebe360760181b6856b3aeaf1c69eaad96af", @generic="4ca1ea6e168eab1aee362aadc92f107ed7df39d53811afbe6e2d6fb605b7a6de0ca715fff0e74a07cd5fed6912d3118f3056d365eb38f86b85048a893de5a06acc34ef87ec5cf38571a1dfa25f170432eb03a9fcbd2dd50cb72be919e1c467fae2b3e82deb0de25ef4515439831cf64874b4e40756ca9788e1fc2c24c5374d", @typed={0x4, 0xa}, @generic="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", @generic="961e69b34bcd1b1314925717d57d03023a15b1a01856fb3c1cfd4ae59647abcd5f718836842098e9c21d727394769ddeb5f9c3884ff7ff2eb483c059b69cbc0b9dee7c92af731ecd1ec88609b52fae40c83f9ea6b7c986511991fe470a037e8073c3b31ff688854c65c2e79262195d8b2d8ae73a5246a92df774719594b4850812b7dbb7", @typed={0x10, 0x3c, @binary="7dab9b7f28430c7be08779"}]}, @typed={0x8, 0x91, @u32=0x3f}, @typed={0x4, 0x49}]}, 0x15b4}, {&(0x7f0000000800)={0x324, 0x10, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x2a0, 0x31, [@typed={0x8, 0x70, @ipv4=@local}, @generic="c1508090634c31bef7e41b5d9776af91f2ad42a5a274bdce3db9db8c86ca97792093f155939c7181b2e8414f1f3fbfe13cc7616c8cc503f31a73aed4648a9de0e5217965db1cd7e1778e3b4d01c9196cdab9ce9c154a38934333444e8ea3dd42cd56a07b254161e9c84e5512ea4d97d5ec69100a6f63e5a449be25438f839f191c9b36bacce1f176811ab3a9de68170a529a2344443db384d214b72afdda797eb758beb4fd4f8dee11315a87c684e94abd1d92e40242cea51d4da40cea64f4dc70d24d21707c3a99e4ec34d82af6ef27ef3d384566152b523e148010656c4856e687f0d545ce", @generic="c5bbe55bff7858ba07a09410301cf34c5d3b8b67f5f133b2074e02f91d71ef5558290fbfdf97f25e3a4caf9f8970e84141b78ccf0782a27355e47a33c657e13ac3c72a81c0222ef04b891c50062c71523c12df05f87802b8295f199347395e492ab82c0a4d03b127de82c65c21e5f78053786b6f2fc13eaf936b18b243abaa0dd84f0bd8d5825ef1dd4b251143ab1534966a69277da5aeaa696d1244851485bd9fb9615f8cce84b0644704193d6927faa2b29d6cfbda8a9ec93702f93d013bd3c914e5de819ad2345415ca52ebcb1f9d844f28a58f0af3ffeccbd2ad41e1745ce7d4f6257c633be77450cd953430598f6c71803eeddd8289099ac473f1fc", @typed={0x8, 0x21, @uid}, @generic="84a6a5406e2e2ac64dc5854c2f90585f00c73dc2045656b3b76447ef8416a5c1a404706153f137060fdab43fc127019ec484fe31ce043d6bc93410c448e57e270797a6e942600fc098751560bb7d627d11258d14794252d69a69c17593873b5234e4e0db85b634c501a86fe5138edfdddb9cb00fe21fc1b3ebf1390e8d6f12e963e964d6d5704fa2f1e232dfc283c55dfd76e68aa8e65fe1760cd5fad74879", @typed={0x8, 0x3a, @fd=r13}]}, @typed={0x8, 0x10, @pid=r15}, @typed={0x8, 0x16, @uid=r16}, @generic="46c154ba55a54137ad5a456a7adcdd885b8c3943d387710230b1e1ec4a641272e5", @nested={0x40, 0x63, [@typed={0x14, 0x76, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @typed={0x14, 0x30, @ipv6=@empty}, @typed={0x8, 0x32, @pid=r17}, @typed={0xc, 0x54, @u64}, @generic]}]}, 0x324}], 0x5, &(0x7f0000006000)=[@cred={{0x1c, 0x1, 0x2, {r18, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r31}}}, @rights={{0x30, 0x1, 0x1, [r32, r33, 0xffffffffffffffff, r34, r35, r0, 0xffffffffffffffff, r36]}}, @cred={{0x1c, 0x1, 0x2, {r38, r39, r43}}}, @cred={{0x1c, 0x1, 0x2, {r45, r46, r50}}}, @cred={{0x1c, 0x1, 0x2, {r52, r53, 0xee00}}}], 0xf0, 0x4}, 0x1085) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r54 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r54, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r54, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:13 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea36", 0x53}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2115.805570] binder: BINDER_SET_CONTEXT_MGR already set [ 2115.811326] binder: 17720:17725 ioctl 40046207 0 returned -16 [ 2115.819236] binder: 17720:17725 BC_INCREFS_DONE u0000000000000000 no match [ 2115.827116] binder_alloc: 2935: binder_alloc_buf, no vma [ 2115.842126] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 [ 2115.859100] binder: BINDER_SET_CONTEXT_MGR already set 16:31:13 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0xa) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1) [ 2115.881707] binder: 17720:17725 ioctl 40046207 0 returned -16 [ 2115.892636] binder: 17720:17725 BC_INCREFS_DONE u0000000000000000 no match [ 2115.908401] binder_alloc: 2935: binder_alloc_buf, no vma [ 2115.914314] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 [ 2115.923420] binder: BINDER_SET_CONTEXT_MGR already set 16:31:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0xbf68bc770b74c6d1, 0x0) fallocate(r2, 0x0, 0x0, 0x1ea) [ 2115.928767] binder: 17720:17725 ioctl 40046207 0 returned -16 [ 2115.935265] binder: 17720:17725 BC_INCREFS_DONE u0000000000000000 no match [ 2115.942614] binder_alloc: 2935: binder_alloc_buf, no vma [ 2115.948131] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 [ 2115.959120] binder: BINDER_SET_CONTEXT_MGR already set [ 2115.964495] binder: 17720:17725 ioctl 40046207 0 returned -16 [ 2115.970946] binder: 17720:17725 BC_INCREFS_DONE u0000000000000000 no match 16:31:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0xa4) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x3f) r1 = open(&(0x7f0000000040)='./file1\x00', 0x400100, 0x23) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x14, 0x895, 0x9, 0x46, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x4, 0xffffffff, 0x53ad19c7, 0x8, 0xffffffffffffffff}, @sadb_key={0x1a, 0x9, 0x630, 0x0, "df64bc9f00bebbd0a8acac42e001fd55965a3064ae85dce8ca345256c1d5656f57f23a2a777b9db0de5d025e93d84e0147cbbc2edd8c338d303663833a05071ea9c3ff7e8ca7dfb2bd443be30cca8f87457b9a69f0d206060b03342fcf7249841fc88990ed53eeb9fc8c8e2a01bdf249bb0ea7fce2402dd796f3e8c07abfa59f61af08e8242645caf3bda4ca7eba704a85ad7f31da6b299cfa6bfcac57cd2793d8f0607b19e7995b918e7bc08aa5fb48866285e96a59fcaceddc87e6efc26f9f4e846ebabdbf"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@remote, 0x2, 0x4, 0x10}, @sadb_key={0x1c, 0x9, 0x6b0, 0x0, "fd4e72ec8419983ca3ba5cad2050fa2851940504fb0df72be73ded0c84e98b9b229170465bc24dd241f1a27ce869b6b4d8bfb44b130663b8764f7a7389bc11d4b8c86f25d9ecf1109fde7195c7513fcac1ab3d24ca5d441203b62f20e55b0280bf62fe50dece330b0b2ed88a28d1819c63892bf834036fad268c29e7d594a5d2c351e7cc502c5fbd888cbbae83aec49c75326d410e101ac0029c0887f247c39bafb1e05e4c9ac40a745195ff72589537c1b4cb8fec546054d46150de009582d72492fd3f64235d7f5bf24c0e0095dc0214f316d58932"}, @sadb_address={0x3, 0x7, 0x64, 0x20, 0x0, @in={0x2, 0x4e22, @multicast1}}, @sadb_sa={0x2, 0x1, 0x4d6, 0xfffffffffffffffd, 0x1, 0x9c, 0x4, 0xeef7cbd109251d9d}]}, 0x230}}, 0x40000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000003c0)=@gcm_128={{0x304}, "d60b49d925d99767", "94afc3826b7c9d1f2e3f1e75f9686311", "32850308", "765feb267a0c19b2"}, 0x28) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x14}}, 0x0) 16:31:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = dup(r1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000080)) [ 2115.978133] binder_alloc: 2935: binder_alloc_buf, no vma [ 2115.983689] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 [ 2115.992369] binder: BINDER_SET_CONTEXT_MGR already set [ 2115.997714] binder: 17720:17725 ioctl 40046207 0 returned -16 [ 2116.004326] binder: 17720:17725 BC_INCREFS_DONE u0000000000000000 no match [ 2116.011467] binder_alloc: 2935: binder_alloc_buf, no vma [ 2116.016996] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 16:31:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x28) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2116.028907] binder_alloc: 2935: binder_alloc_buf, no vma [ 2116.034488] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 [ 2116.043637] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.049378] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.050773] binder: BINDER_SET_CONTEXT_MGR already set [ 2116.056321] binder: 17720:17756 BC_INCREFS_DONE u0000000000000000 no match [ 2116.060197] binder: 17720:17725 ioctl 40046207 0 returned -16 [ 2116.073220] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.074639] binder_alloc: 2935: binder_alloc_buf, no vma [ 2116.078707] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.078731] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.095222] binder: 17720:17756 transaction failed 29189/-3, size 0-0 line 3274 [ 2116.103109] binder: BINDER_SET_CONTEXT_MGR already set [ 2116.108526] binder: 17720:17759 ioctl 40046207 0 returned -16 [ 2116.114878] binder: 17720:17725 BC_INCREFS_DONE u0000000000000000 no match [ 2116.117540] binder: BINDER_SET_CONTEXT_MGR already set 16:31:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000190005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000000000000bd05000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='!em0cpuset!\x00', 0xfffffffffffffffb) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='^@^\x00', r1) [ 2116.127590] binder: 17720:17759 ioctl 40046207 0 returned -16 [ 2116.130214] binder_alloc: 2935: binder_alloc_buf, no vma [ 2116.138978] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 [ 2116.142162] binder: 17720:17760 BC_INCREFS_DONE u0000000000000000 no match [ 2116.157713] binder_alloc: 2935: binder_alloc_buf, no vma [ 2116.163368] binder: 17720:17760 transaction failed 29189/-3, size 0-0 line 3274 [ 2116.166917] binder: BINDER_SET_CONTEXT_MGR already set [ 2116.176491] binder: 17720:17756 ioctl 40046207 0 returned -16 [ 2116.182868] binder: 17720:17725 BC_INCREFS_DONE u0000000000000000 no match [ 2116.189967] binder: BINDER_SET_CONTEXT_MGR already set [ 2116.195330] binder: 17720:17759 ioctl 40046207 0 returned -16 [ 2116.201316] binder_alloc: 2935: binder_alloc_buf, no vma [ 2116.206793] binder: 17720:17725 transaction failed 29189/-3, size 0-0 line 3274 [ 2116.210890] binder: 17720:17756 BC_INCREFS_DONE u0000000000000000 no match [ 2116.217945] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.221902] binder: 17720:17756 unknown command 0 [ 2116.227222] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.237726] binder: undelivered TRANSACTION_ERROR: 29189 [ 2116.243503] binder: 17720:17756 ioctl c0306201 20000000 returned -22 [ 2116.249089] binder: undelivered TRANSACTION_ERROR: 29189 16:31:16 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4) 16:31:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0209fd0b0b40000000bd7000fddbdf2502001000000004d4000004d50000000002000100000004d609ffbe010100002005001a00e000000100000000000000000000000053160bef3916212e8da02e639a8e14b910001602"], 0x58}}, 0x80) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) socketpair(0x3, 0x40002, 0x1, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000340)=0x1e) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r5 = getpgrp(0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000100)=r5) r6 = syz_open_procfs(r5, &(0x7f0000000380)='comm\x00') getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000003c0)={'mangle\x00'}, &(0x7f0000000440)=0x54) dup3(r3, r0, 0x0) 16:31:16 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="11634840000000000000000000005437aee55ce7ae1ba950f89ef551d3000000000000000000000000000000000000000000000000000000000000000000000000000000000e4e0000000000"], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x8, 0xfffffffffffffff8]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:16 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2118.828658] binder_alloc: 2935: binder_alloc_buf, no vma [ 2118.834330] binder: 17775:17777 transaction failed 29189/-3, size 0-0 line 3274 [ 2118.843938] binder_alloc: 2935: binder_alloc_buf, no vma [ 2118.849444] binder: 17775:17777 transaction failed 29189/-3, size 0-0 line 3274 [ 2118.849447] binder_alloc: 2935: binder_alloc_buf, no vma [ 2118.849473] binder: 17775:17782 transaction failed 29189/-3, size 0-0 line 3274 16:31:16 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000140)=0x6f00) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = dup2(r2, r1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000280)={0x5, 0x7, 0xa000}, 0x4) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r6, 0x0) write$char_usb(r6, &(0x7f0000000200)="ef9e8bdd374a6dfcbd6c8afa12a2c669a41dfa1b789f59a7fdfa526250ecbd0c2ae3c0bdb4a8de84047debf83eb2c0811787b27985db4ee5565e22fa57de83ee130544a78cb6a79dc5b8b246314fde582c", 0x51) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r8, 0x0) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f00000001c0)) ftruncate(r7, 0x8200) getpeername$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000180)={@mcast2, r9}, 0x14) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000340)="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") ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fchmod(r10, 0x88) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080b80000000000000000000000000000000200"/76], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2118.876101] binder: undelivered TRANSACTION_ERROR: 29189 16:31:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/null\x00', 0x8482, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r1) write$selinux_validatetrans(r5, &(0x7f0000001180)=ANY=[@ANYBLOB='system_u:object_r:power_device_t:s0 system_u:object_r:console_device_t:s0 00000002000000003043 /usr/sbin/cups-browsed\x00'], 0x76) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendto$inet(r4, &(0x7f0000000140)="f3a7ff354958d4135fbe4cd392507c8857c3738622efb22709d5031fa12aa05385ed6b9c45dfa47b995a0036b08c07a25d999a24d18ce5a32fd0c927c6947957b07e64a374802fe012afa259c53580a06406d2ab953daa6ea3a69a1d6f10a0e95f2ca5cd82c1e1eaf1fdfa28efa44bd1b989dfd2089c375696383064cbb1b2c151c6785513ed9ad31aa5ed65538bcdd20807af9c7bb9bfc39c8bf5f8c47010dcc6cbea3627ddd3db390d40940477267a0f4cf1903a8ae9a10368056c3744514b88ca4f97128a1e615266935a62ca3c9887f41ad3b76afc5be1988ebdb1deaabcdc0644689b8dec6b0665fc3ba0545ba61e49a937767c31a581fc6d75108c9522160ed6f806a9305ebab6da6b152f699ea41064daad61346410d9b952eea3589242141e17ea70d092ec545f80ef79e621d871904fe6ade103805a7cc7e0b653b41ceac64046fc64f497349417e9d979fcf18a0864ea909efda1c611c5368c2e6e0ca5063995875f4f50a93dd62bddda85d5aabe3e3bb419960ed886fee22c6dd4eb1f79753080864cd2bcea049c842d91fd3e9c510827e46f1bdfe207ee055f388739d90979cb6943e8fc0e36db4ffe99e50283e0f2a454de6105a882c628e003b77b752b749433cd279f48c851c3d7227d071dbd5269437e8096cf6c7f08f51124e61d141480bef695fc6168ccd97fe3b0c1bee44c431246aeb55d07636526eaa00341abe3a5cd7dea8e017aaf23da1b189c81d721f40c40f274cd131e3468f228b5bd128c58bd1d903f92a8b81a825d5ecdcf0dd707dec544efff27c7f5997a5b919c75a625224b7d62a3d279304fa95feea07bfe57293e54195e40edcd896da4f0bf51bdbfa3fdbced99a415b2158631802c282947af682553c9de00cc3060734147041edf2fb3f10f0f368beaceca6d85434b011624b51d9ce3b19915dcde1062e111d13808f61ebd39a73c6ea5c43f5ae56e4724390cea82197e467c385dc68bcf06a2d48e45dc5c2d982712fa9a8d964e7dc8acebc90557041379048528e8f55c30abed3c5e236dfc22f74ddbfe19d38398ced3445b828af525d8dcb645af9bf7e5c11f1f4c54ef4a617f89df363792947c35cc46d1e5effb39bf016f62e56733936240565fa686ce30de5acdefe64388747c89b39fb51efc438662d65e63a3366b9ac372e52a402ba07b229bb7c304c912f2d8caa347ead7b45f0e5366b835e7a6242fb5e3f52f847370576c2e7e08cb6db3f224b4d7754087486d45579b50971699fada9bbd84d4b857e7ed09d203902eb200e3b00d6ed6f0ecdf9febb534c68a47660abceab2b3cd8b1212cd6819c6cca17035aabc308270346bdcb26945947af6a67489b52759455b21020e0885ca0bbabc6b9d1e625a0fc495e6e5b9070c7ffd4ef9be86f05ba098a7968366854765588f5c583d0674ea2857856337f2ddfd6437162c5891c0d075d7769c47337cea8915fe8051fd72118a5f8c96b2acbd091068996d712eb84cfc9623ec6a032586fda5bed6f575f24e39d36cf1d603579cf53b80489b1787c81d0545871f218782afad0a219b87488f05a20d3cbb05afacb7bf55b431496587d7392a6b023a0d099a306fa858c342a3a8d94995e33b1a58c5710fb4f36a1ef8a2cacaa3256a5d6e1d78bf1e8bbcac9baef062499a6e793754d44b6112b1414f203c89feda55afc5e170a55fd549f3a19a157fb6be286a848b456ef19856d4982249f20e32966ebec1a50e9add7f055a118c8175505089e8ebe96f5cac2d98e6f99360536bfd520e952204165a69a1f4b67486a6e54896199d61857a1577adb158ce1bc4bd1c6124229d4400af710f074dae343c2817391ebe185bdadc7e95992485fa1a2d012985b5fc329ec57541325181bf0ce2c734d0733a04e243f198ea9b15d285c5599c2670399602d3903d5fa5d34bf522170649a2cef95e10e6e9c718e5d944ce4f82e578fe913ba42d822488469c10d336cd6f49f090162e26f320fe75c82fd86caf97e17910c4d3f0ada45a78282e475bd6f832905de95eb75d28be49a8264d64806b101e77924bea66a05e74a24134c1fbd3f597549a8e5abd64f80643fdbf89951e76aff94667d8dd1d0568a18d5ec9ad07b89c41cc1eb1375d41ff955378e17e3be8ce9a7dcb821e85c5987f158831879974a0deeec90e362d06c942efbfac143889d20c42ab98e7e21c3580850a529758ca9626f92808b76b294fbd3cc1f222f3da29b67a3d378e592f0a6ab4213a8027d4aebab88f2015d9dae7052591292c8c5fcf9241e8b8dcc04121780a78a257005d8765ee949461b3371b7093289f01905ea04f4b5b82f77326a57b8bf08c59934e126c02695c797ebbac330613f8bccb1508c7858c20752df46a669e322f09a5d261c2acdc5ab8cbaaa000484fcedd85a53db1f871a74662cacb86632bfd10382b65d3a8dbb0713eda88dfa47b41ca9604643fac5dd0fd653d419b2738dae25b8f8564edb085d180e7d00bc6f8bc38cb8077bacd88cb4ce54ea44830c2f219d20f332fac2e0dd23fc14e97596a37f7690a1affb337bcafd142868001172a30a07df7c4a49880300a2b0f43b21c781059fdd93003792d63c9f7aac40e8c4bdb0ddd4a8662a8d61d88ed8f5ed5b173481649d8c414223014cc4e608eea6e2842c9eee54aa7b99669348e5de63626dac7799da1881560a49caf616b5798aa61bdc0a9ba7b2bc9f01c1bf921bfa98c19120e8f80b13177ab8ecb007ab816ce47c92f0519ea0a77240a1142c6f02bf7cf5679de6964953c19ba5d9ff595226056177f539f9bc1de5a6e5e47a40f55b3ade28937bca178d55dd5fa857698b3da49b11487947b6ed351f1fcda05717393e871c3d4a04a38dd5e2a2bf810ff5321ceb46b5bdd611984e6f30b2ff6ca9694435d29f187c67b9795ad30b36490cb1b650aec005eb48d0ef420a8d786833f8bad48a64f773e2c7d769d3672cd9ca27cc980c8f53fa54fb5b18aa4c88cfe3def0b87c4dc77c751e4c65be2206ca4e607390dbdb627c68d22595d1b95904f4e968360cc9cfa27f63fa07886690ee3f188be329210c49bb01d180fc5fe1fa7198bcd5598e95f34b862584a4b2663d5e1e40d41e6bc493940528d8469b206a04a40fad429ff975bd3c353e54c33bbd069ce4ecfb4004458f82a9eccf1790f88bec261e77620a3eaf744d6ce9504c33000e10c41309ba4be0ad44fdc90a7b87dacac9714c71c4e1a078f487fe56641a4a4a39c8d4424964c26939629d5ccf9594f21ff545aa80cd6d3c0ca48bed6b65af694a47c898fc530a12b09d388b993090b0de6fc0e51400b125e0c5a5eea72adbc196d08d82bb465efb24ef685067e94945eb5940040af0c2e1a0296d94811bcc12f08de97f80c24f65eb7051d30b8c60e1dfea317d7b6dbfe4ad22aa0a115916778c723dec4619ec0766faba495adc1ff6a9817306b40c815dd80e10770c32d346466db32e36fc1dc8e80e038da843987542c238abe815e5c716759d2c940f00e7282c4c20e493e146a2c8874aa1af1f74395c86d568859b99cc64d2e5dd1a7331f7f2190309cceb4e860f2c7b6c46dbd1af31ad0b14dd636b6631add0a60cf4bf375c71ae10759912c9a5ac1ac576d9c73f9166bae882c89404ef4c8cb611bb9a5397fa8f944ceb52d2e299062e60b0ea4762db345303d05fe010458fe5246e455bffa84a2ccaede634f0835645be641a48b30dd7875ec424ddc7aef9506d1b6631320efdea2c990140e0dc6cf13a850048d32d01ebe87bc8c0ce7b882c083e17427eba3768c44e9f26b7b012625551c15c16d7356028e1c3614a61e72324f3ec8ea610c6f11907dc66825a9936f001d3fec2bb8aaabc1a6a2ea6201a57e6b41c061ead9b2840e81b5cf82ef63198e8792d34f61bd363f7eb5e3b3f2838d0b79b57627d831f23877d1ac8b4c4d04ea320075180bef6454310c33ab182b8ba651ca5bdad719ea8d28c33acccde3aaaa0f46c89ec6b13ddb1ce511e68d7d7cc03ceb43ae16b0078156280d3f6dd8541fde1b8dafa04be43b128cfcc32e5492e7ed1ae5a7c958043b1255db91ab117cfef27b6a8716d2bdd43d27e2356f7608ff89de32cf5573c59b7fd977b246e8ef55f3b5b76dc8fcb575895a5dcce37c2a093cf58016c1954e5fb3c55f94a14b8bcc91c871363ce4819ea2f54cc96574d3e26e891e9a9827bbf1406a2d99ac9c06c7adf35ceba1bc7b40ab805d416ebb503030251d8323c4cfa2205da70793b96c8d88406379c2908d825954df6f2404f481074eb5b113c25cf6b6ee6188499f448c7512cda69319fa0716f8b3b3fb0f7a394f99dba7fb7bb140e3b1ec6c869d6413fa7eede698587846ff8f1d0d960ed3b91d920b8aad10f05245496d8590a76e7404d1b3b0049f09c01e1d753b9c3e7f873f5e3d1ddf3c199824727ec37af2c15001e135b558172f3af17670b89c0be0c8f2684284691e2b4f00d881a4e1c6e4a57283f49e7edea04edccdcd407da804a8fb2c345f670dca6ba2b884ee2eca8838adb323345cf1d3545eb5c9b793f3926f2250c2f5d908936002f2fe812ec05a1586f9bafb120e14fe3f1de51c2fb36ebd2bc1144cca43850c55b98d23118164a134bd58eda2e14c8b2e2d456089543d4d01b02b07ef4ed47775c4cfe1954a591196c8bb29081650782dca947ffa7bee83546074d915a5a978cd7f1d5d466a1097783cc49452a73c58e3cd14ee110508a6d35c68c7981d67f9fcce120c71af9c5b4bf0e16c47e4506e0829fc60081db3e8297af98be2f6d78092caa8c289a129b288b476480d44914ba4571e97ef0698131a5dbb0ccf43a557fe2c423e9b46b6ef0eba070936a6f9483412be0f215e872090b5310b4e855ff676e90d3b18d1c8e2c388dcd5aa4b49dcf79e7bb242c1b17553925bed8d612de6aa394675c90ff285eb8cd7d9c796ddd187e4286df837c0e4f3b8c90f6ed8aa94d7b7cf2c051e086272e22fdd4880b80e66b38571a03c8aa097b5d41983f04100518dc1e6ac1521ce1672e767ec71ed776cc28e3455692cc89bb4625451c30891e35a64411b01429c76b14b169590e555f82ac08c18979b40bd96bfe85822495cb58bd5a7a87d9291e637d52a5825a0c04ddb3e37116631a4a901a2f52fa4db075c69b145ff4da928fbf7208da5dcfeee78457da4d104da794c645c72c3bf8475fd91c3a4345319939108435465478aa4e71b3ad94c6f00d4811945b51926f93f91a2984fb790d28cf2446635aa58467d14ec25aa799858084000a5bb11c4e46d4f7662f5a50411b3578847b304bc9c1e5c1bf2e281a9d7e4ed2e1141f8f3e5dda909890934dddc3267e75747ed0e268662a4f74cd409c7038ea74296ea13eb5bc6eba1b43b29743854baea310b5745a0b51b4555d93e84431fd868c0707fd1ef696b44bcf5b07eb3c255af756365c247aec87793f48abf6d5d8afe165a1b9d3a0e854ed20e7c39d0fe168461caa5ae7789fbeb5ffce5cb9441113fc5792c9c16851cbdd3816b77c76d652baa0b801c08d1f1e8acc1edd1fe896fd035324e55cb6d96a2c40ee29c53b510f8af19001768421180d5aa3cfaedeffad0dc71cc418673fa27ab88e9ca4cc463868d996a9401688e02a16d6a79fc06ecd0482c81d8d948bcaeae4ca34be0bdb749b300a31088c56d0d51fc3d182c10129516f7a9149a4b9e598d293799e69ff53747e8f13c1af06819ab68bcfe6de899f2a5cd4d059d7070df101e9dec8b8b6a7cede233efe3fa429de476ed9ec7ca", 0x1000, 0x4000000, &(0x7f0000001140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000001240)='trusted.overlay.redirect\x00', &(0x7f0000001280)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000001200), 0x1f, 0x5) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/147) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x3ba2b547bd541ee2, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'veth0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) [ 2118.912744] binder_alloc: 2935: binder_alloc_buf, no vma [ 2118.918293] binder: 17790:17791 transaction failed 29189/-3, size 0-0 line 3274 [ 2118.948530] binder: BINDER_SET_CONTEXT_MGR already set [ 2118.954040] binder: 17790:17791 ioctl 40046207 0 returned -16 16:31:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) syz_open_pts(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = getpgrp(0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r4) setpriority(0x0, r4, 0x7) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = dup(r5) write$P9_RRENAMEAT(r6, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000140)=""/77) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xdc4daaece416a6cb) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="086310400000000000d80000000000000000f800116348400000000000000800000000000000000000000000000000000000000000000000000000003e1118f3972e16cb000000000000000000000000000000000000000000000000000000001263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c10000000000000000"], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = getpgrp(0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r4) fcntl$setown(r2, 0x8, r4) r5 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2118.960617] binder: 17790:17791 BC_INCREFS_DONE u0000000000000000 no match [ 2118.967744] binder_alloc: 2935: binder_alloc_buf, no vma [ 2118.973412] binder: 17790:17791 transaction failed 29189/-3, size 0-0 line 3274 [ 2118.981749] binder: undelivered TRANSACTION_ERROR: 29189 [ 2118.989233] binder_alloc: 2935: binder_alloc_buf, no vma [ 2118.995985] binder: 17790:17798 transaction failed 29189/-3, size 0-0 line 3274 [ 2119.004654] binder: undelivered TRANSACTION_ERROR: 29189 16:31:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = getpgrp(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) ptrace$pokeuser(0x6, r1, 0x5, 0xe8e4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:19 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x10300, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1d) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:19 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = accept(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x80) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0xffffffffffffff06}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000300)=""/8, &(0x7f0000000340)=0x8) ftruncate(r3, 0x8200) r4 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000001c40)='#\x00', 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$clear(0x7, r5) r6 = accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000200)=""/99, &(0x7f0000000280)=0x63) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) [ 2121.829024] binder: 17818:17821 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 2121.849117] binder_alloc: 2935: binder_alloc_buf, no vma [ 2121.856536] binder: 17818:17821 transaction failed 29189/-3, size 0-0 line 3274 [ 2121.866260] binder: 17818:17821 IncRefs 0 refcount change on invalid ref 3 ret -22 16:31:19 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200100, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x8b) 16:31:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fstat(r2, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2121.869487] binder_alloc: 2935: binder_alloc_buf, no vma [ 2121.879770] binder: 17818:17832 transaction failed 29189/-3, size 0-0 line 3274 16:31:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x328000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0x9, 0xf2, "da47c06b9ab18b98f36acac0ad02c3c2250019b5a08014121bdc625f46c7293ea7102a319422793d25b4fc980d517c30f5cfb55ce409fa365edb3e919a6c200ea572e52479bb2f4d3fc90c4305b94ab6c668ecbec880c4a2cf27d9aa880a421125674ffe4133e06f7f9e9baf7dad80f77fed092a888ed8d670bd30148b5ada2282737f32025493a6de00e55991c79faf52a80788046e11024b055393bde8d923dc877a5120c46b94f546d7a11a75f087436a2afb0dd3cd69c7002f16bdc0430758417b9622c4c512f42ce4b386ead49f005776ecc7068332bb8ed64f2306835097a680565ba27b427969b0046dfc288190d6"}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = eventfd(0xfffffffffffffffb) write$eventfd(r1, &(0x7f0000000080)=0x7fffffff, 0x8) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000f667000000000000000000000000000074af03e0e9e0a06c000000000000000000000400"/67], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1163484000"/74], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2121.926627] binder: 17840:17842 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 2121.934329] binder_alloc: 2935: binder_alloc_buf, no vma [ 2121.939824] binder: 17840:17842 transaction failed 29189/-3, size 0-0 line 3274 [ 2121.949137] binder: 17840:17844 unknown command 0 [ 2121.954062] binder: 17840:17844 ioctl c0306201 20000000 returned -22 16:31:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) signalfd4(r0, &(0x7f0000000080)={0x575}, 0x8, 0xc0000) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70329cdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2121.977600] binder: 17849:17850 unknown command 0 [ 2121.982660] binder: 17849:17850 ioctl c0306201 20000000 returned -22 [ 2121.989574] binder_alloc: 2935: binder_alloc_buf, no vma [ 2121.995320] binder: 17849:17850 transaction failed 29189/-3, size 0-0 line 3274 [ 2122.004762] binder: 17849:17850 unknown command 0 [ 2122.009614] binder: 17849:17850 ioctl c0306201 20000000 returned -22 [ 2122.016681] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:19 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x181201, 0xac) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="0870769085ee71987c20de528591282791dfc2a529c518ab49d7017adeffc1770a860c3824932ded7b03c1c8660425b5ef76d5e9f1e602d5556893b39df347c63814a89f60c144693fe6c3dcd0c12323ea0cd5c7b27cfb4f9818ad91b3978cf82b2e707e31951563c79c471b8a555d76fc97124d9814658649e0e1d89c6458e254f17dde3480be1c4956a31dd54bcca194c310bab19e2b1271e37eb194ee54ac25", 0xa1}, {&(0x7f0000000180)="59ddd74a98bd5aec6e728754ebf8f7fa8992f42456a2eb7f0aeab0296260eeb776aca5f96b39469a978f1aadb934ce69fa826c89ceed58b7", 0x38}, {&(0x7f00000001c0)="d87dd672f152ba759716f1c0ec0a2bbe0ad0b2efa8a6ac", 0x17}, {&(0x7f0000000200)="d929dffdb1b0e29cd45e", 0xa}], 0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x82dd5dc097294ecc}, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2122.022219] binder: 17849:17853 transaction failed 29189/-3, size 0-0 line 3274 [ 2122.053373] binder_alloc: 2935: binder_alloc_buf, no vma [ 2122.058937] binder: 17857:17859 transaction failed 29189/-3, size 0-0 line 3274 [ 2122.068515] binder_alloc: 2935: binder_alloc_buf, no vma [ 2122.074210] binder: 17857:17859 transaction failed 29189/-3, size 0-0 line 3274 [ 2122.076263] binder_alloc: 2935: binder_alloc_buf, no vma [ 2122.087183] binder: 17857:17860 transaction failed 29189/-3, size 0-0 line 3274 [ 2122.095232] binder: undelivered TRANSACTION_ERROR: 29189 16:31:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002380)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000026c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0xaa220001}, 0xc, &(0x7f0000002680)={&(0x7f0000002440)={0x21c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x124, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x401, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x86}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1408dacf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x40, @ipv4={[], [], @loopback}, 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2c}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0xe1ddfa86b2ee430a) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x2d7}}, 0x480c1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x224000, 0x0) pwritev(r3, &(0x7f0000002300)=[{&(0x7f00000000c0)="7caadd9b7148e52699b132588cbff40dfe40e0440b81dbdb560377b5bd86158df342227dd3d57dc5b1e6075d210c27a84981d0fd8033e9834bc66558e0bca466071c2e4c53150cddeaf2884d65bc526507dfc9f5002efa6a3844cfd4249076dc12bb8faa793b8eed1413ca5b229a922ffd07c1424e81570e709287120870663897a70cba4e6fa711845361f60766dc09ff20d6ac7623b3525b086c59f377488d2ec7989a3cde793d33cc9961662a4b64b13352313dd60e58696c", 0xba}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="b894fd867299cd6ad49cd9179e451e76a3f933ea8bfcdfeca737e5f9f0e53e1042ee0e8dadec73f17eda978eb12714c211a9f0811431d0ad0fd86c44a074b5ac7571b0bae59f7733bdb43769a318297ec0a59e8c715e76e9a2839799242a6177f5fc7fe10e59288326b258ffa313683e0ea5496f04057f", 0x77}, {&(0x7f0000001200)="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", 0xfb}, {&(0x7f0000001300)="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", 0x1000}], 0x5, 0x0) 16:31:22 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb699", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:22 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000ec65000000000000007f16000000000000000000000000000000000000000000000000000000000000000000000000000000a67ddc62f56602db67092f86d664c45c8531032c2b3a28866b62e0698c999016d28cd4"], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:22 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:22 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESOCT=r1, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64=0x0], @ANYRESDEC=r3, @ANYRES64]], 0x4f0}}, 0x0) [ 2124.868990] binder_alloc: 2935: binder_alloc_buf, no vma [ 2124.877012] binder: 17871:17873 transaction failed 29189/-3, size 0-0 line 3274 [ 2124.891030] binder_alloc: 2935: binder_alloc_buf, no vma [ 2124.896608] binder: 17871:17879 transaction failed 29189/-3, size 0-0 line 3274 [ 2124.912325] binder: undelivered TRANSACTION_ERROR: 29189 16:31:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2000000000000000, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000140)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400000, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x8) 16:31:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = getpgrp(0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/route\x00') ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f00000000c0)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2124.956528] binder: BINDER_SET_CONTEXT_MGR already set [ 2124.965000] binder: 17886:17888 ioctl 40046207 0 returned -16 [ 2124.975992] binder: 17886:17888 BC_INCREFS_DONE u0000000000000000 no match [ 2124.983820] binder_alloc: 2935: binder_alloc_buf, no vma [ 2124.989487] binder: 17892:17894 transaction failed 29189/-3, size 0-0 line 3274 [ 2124.989491] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = dup3(r0, r0, 0x40000) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x31) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400, 0x0) 16:31:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2124.989527] binder: 17886:17888 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.000550] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.007713] binder: BINDER_SET_CONTEXT_MGR already set [ 2125.018759] binder: 17892:17897 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.021054] binder: 17886:17888 ioctl 40046207 0 returned -16 [ 2125.029856] binder: undelivered TRANSACTION_ERROR: 29189 [ 2125.037852] binder: 17886:17888 BC_INCREFS_DONE u0000000000000000 no match [ 2125.048457] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.059576] binder: 17886:17888 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.063186] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.072983] binder: 17900:17902 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.082233] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.087794] binder: 17900:17904 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.096202] binder: undelivered TRANSACTION_ERROR: 29189 [ 2125.098190] binder: BINDER_SET_CONTEXT_MGR already set 16:31:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000feff050000000000000000000000000000000000000000000000000000000000000000000000000000000000516f1d718e2d57b362cccb715a050097252e7a2386c5971bf27021205dc72fa2398357158336e05dfd31eaa09a2d0bd41139d04d887c33744f962b51c83d4e818911b7d16326f7f2d49dd736024b6be8f4e1f09410ba74e3dbfa3072ef098aff00f75f1a86a2b2dc518dd8712b4a9fba675efabe397122c8fc1ba0365a3e1a3ae817dad96aded01802ee92fa"], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2125.107476] binder: 17886:17906 BC_INCREFS_DONE u0000000000000000 no match [ 2125.114845] binder: 17886:17905 ioctl 40046207 0 returned -16 [ 2125.117106] binder: undelivered TRANSACTION_ERROR: 29189 [ 2125.121235] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.126963] binder: undelivered TRANSACTION_ERROR: 29189 [ 2125.139756] binder: 17886:17906 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.149666] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.155492] binder: 17907:17909 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.164583] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.170127] binder: 17907:17909 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.171403] binder: undelivered TRANSACTION_ERROR: 29189 [ 2125.183379] binder_alloc: 2935: binder_alloc_buf, no vma [ 2125.190118] binder: 17907:17910 transaction failed 29189/-3, size 0-0 line 3274 [ 2125.197941] binder: undelivered TRANSACTION_ERROR: 29189 INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes 16:31:25 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8802, 0x0) write$P9_RCREATE(r1, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x2, 0x4, 0x1}, 0x3}}, 0x18) r2 = gettid() perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x2000000}) 16:31:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYRES32], 0x61}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) 16:31:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'nlmon0\x00', 0x1000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2127.878574] binder_alloc: 2935: binder_alloc_buf, no vma [ 2127.884391] binder: 17913:17918 transaction failed 29189/-3, size 0-0 line 3274 [ 2127.893495] binder_alloc: 2935: binder_alloc_buf, no vma [ 2127.899089] binder_alloc: 2935: binder_alloc_buf, no vma [ 2127.899097] binder: 17913:17922 transaction failed 29189/-3, size 0-0 line 3274 [ 2127.912383] binder: 17913:17923 transaction failed 29189/-3, size 0-0 line 3274 [ 2127.920457] binder: undelivered TRANSACTION_ERROR: 29189 16:31:25 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=""/120, &(0x7f0000000140)=0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000001540)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80800, 0x0) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="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"/4094, @ANYBLOB="cbaa7244965b0a0c9d85cd0e4f3236a6cdacd00f81f39b0f9f343fb8bff45f15710d0214e5ea829f4a08bac0c121287cca36727a8febff4ba7beba5ca0c103aa083d60f378bba369fa0d44caea15b62c54ab3ffe706181ff2871a6a966b9d969a49db4e903973964718cbbabc6cf75c7e45fa62b9e8d13a6f52c7e34b38147cb5b56d365b9f788576f2ae97d806f7e4b57a5000ebfd15022ef2dc974f3eda002656c2b9c6af78d587d411e1b7f5c99e233019c948fab5dbad4fd56008805c1c0a95eca7a7d94d572b9fd96498f975db5c28aa2535777ee610ac99372c6b79bf4f3fe34", @ANYRES32=0x0], 0xfc4e}}, 0x0) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001140)={0x3ff, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1, 0x5, [{{0x2, 0x4e21, @rand_addr=0x8001}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x5}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x6}}]}, 0x310) 16:31:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) [ 2127.985847] binder_alloc: 2935: binder_alloc_buf, no vma [ 2127.996766] binder: 17929:17933 transaction failed 29189/-3, size 0-0 line 3274 [ 2128.005702] binder_alloc: 2935: binder_alloc_buf, no vma [ 2128.011278] binder: 17929:17933 transaction failed 29189/-3, size 0-0 line 3274 [ 2128.011281] binder_alloc: 2935: binder_alloc_buf, no vma [ 2128.011305] binder: 17929:17942 transaction failed 29189/-3, size 0-0 line 3274 16:31:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) write$selinux_create(r1, &(0x7f0000000000)=@access={'/usr/sbin/cups-browsed', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xf2}, 0x4a) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2128.032583] binder: undelivered TRANSACTION_ERROR: 29189 [ 2128.052330] binder_alloc: 2935: binder_alloc_buf, no vma [ 2128.057847] binder: 17947:17948 transaction failed 29189/-3, size 0-0 line 3274 [ 2128.072886] binder_alloc: 2935: binder_alloc_buf, no vma [ 2128.078372] binder: 17947:17948 transaction failed 29189/-3, size 0-0 line 3274 16:31:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = dup(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000140)=0x2) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0xf1e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x16}) [ 2128.087383] binder_alloc: 2935: binder_alloc_buf, no vma [ 2128.093230] binder: 17947:17949 transaction failed 29189/-3, size 0-0 line 3274 [ 2128.101382] binder: undelivered TRANSACTION_ERROR: 29189 16:31:28 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x40500) write$binfmt_aout(r2, &(0x7f00000000c0)={{0x4fef5d0fc450f24, 0x0, 0x10000, 0x361, 0xb9, 0x1, 0x3d7, 0x38}, "739b7e12463c81de8b0e1f8b4eb59ab75fb8885148f376e1f8d6532d8b8d1b8ff3f00baf8e19e6600d3c2172a5f5e5e3e5a716036970e86e86d75aedea0dc48134a96affa3bdb92585", [[], []]}, 0x269) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000380)={'hsr0\x00', {0x2, 0x4e24, @local}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x94, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x17095ab90fe9bb17, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x62fa5b01289e81f5, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f0000000540)={0x0, 0xfffffffffffffdd3, 0x30}}}], 0xff, 0x0, &(0x7f0000000800)="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"}) 16:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 16:31:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$key(0xf, 0x3, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@dev, @multicast1, 0x0}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', r3}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000080)=0x63, 0x4) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2130.917240] binder_alloc: 2935: binder_alloc_buf, no vma [ 2130.924094] binder: 17959:17966 transaction failed 29189/-3, size 0-0 line 3274 [ 2130.932582] binder: BINDER_SET_CONTEXT_MGR already set [ 2130.938063] binder: 17959:17966 ioctl 40046207 0 returned -16 [ 2130.944852] binder: 17959:17966 BC_INCREFS_DONE u0000000000000000 no match [ 2130.952412] binder_alloc: 2935: binder_alloc_buf, no vma [ 2130.958050] binder: 17959:17966 transaction failed 29189/-3, size 0-0 line 3274 16:31:28 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:28 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x40000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x800, 0x3ff, 0x6, 0xf0f, 0x15, 0x3, 0x9, 0xfffffffffffffffe, 0x8, 0x2, 0x4, 0x8000}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000080)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r3 = socket$inet6(0xa, 0x6, 0x8) sendmsg$sock(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="050b83955f593513aef174743d1dc28ccd873bc6201021d338b31ce5a136cf16e3fb70ef0d9b9e110fdbe1bb6286d70205042c6afff1a72930e168894283912fa1e8bdb0b139a89e472eb0d7b7053e7f76c7e1b339f35e2f0b86a9812d9e20adbc4e618c71432c47c1d7e96d8bcbfef380a0b06b6cbbec13481ac8b6c83e12214881922dc060c0a9f99826227f9f647074f4ada110c64dbbb91d3373772da997b3b893e8dfce6abf784bb8d61fef1692c678e085b0c9a2878515c2cbf8eae6dc344d222f58cb8ff1d6c7965b", 0xcc}, {&(0x7f00000003c0)="5394732bb6fa4fb7e41206448003aa7fbeba674c69d36fbbb169ea4047340ed628eae941b53d61871b2366a0a1ad4f53e925d66b4cc110a741f01e67f4e855be1cc4f5dae01f58a33a44bd151332", 0x4e}, {&(0x7f0000000440)="cc84572b1f24ea1ce023ed30578aaa0c7e2007d274f4b8e19fde66df1099d682cff6661bb67f4a1c20470c500b5d69dde0474b3716318f67bc48708cf140aacccf92e360c76a236d0dc0cd6acaa29a6354fe8b0d29c2698b1a36a8eada152e27c457f487", 0x64}, {&(0x7f00000004c0)="9e973ad189402827c9880c7c0a237490adebe993e041ffdf92dd7fe27d67f435119687e3bfc50cfee13c7f6150a324ef2144ad078c17a21d202678285524b0aee7ab833cd556fa183a55e69cb67d8a260894cf80f50a2e79a390ffaecfb0b6ba3ba3b2636e431b3bb608975558af3600112b8f08c3a94c5c6ee125bb5e0bc7e174b79e83b8b8937116f6c1030dd5f71e5cf418363e81f3242278eec0c1d3c6803296c7fa1144108ff64b42fd77ef8568ca150269d5bedf0d893e8cf02d3e67fb4b0efec3e621bf2dd01a5485", 0xcc}, {&(0x7f00000005c0)="a74281173c518f57296fe964dcaa904b443e5830bcadaab3cc78530a580370e93e5c2129a66ea199b87e5ec4ed98a9c7d47966fbf10a70b118332cf0c2f478c503fd8000c4130dd258c9b246bd2e44cc13d8db9cc04ae6807e5559bf331c70c62441984009115ee6babb2f9e0cd294d06cb0f92d1a935815959ec1d6e3951010c3f702733a0414681c60bce8135d163e331fa1baf1ff956e9eed973ea0bf96fd717359d626da9bedb2ef6e9b", 0xac}, {&(0x7f0000000680)="1af6795de36527b3c0de22e7c1aa6b27ad4e6689796a7ca39f70a66419f15bd964e9f5248a7493", 0x27}, {&(0x7f00000006c0)="b895a4a4bb118bab9239da48fdbbc4ce495e98acd0e6ab36d1b455499de49408f87280422e8ec6831eb2afa0703674a952a786a046e332ed9760e90b24a74e73ee64c444fc02", 0x46}, {&(0x7f0000000740)="fb6d44efe10a1799fdaa3677285b051f800e5afdf84ba6369e6696618d62a87357cdda01a44633e72a920c7873c2e123448c51d07176b03810fe7dd360d433cf204b29b18b914c4ee73d1ffa869433310266abd4b4f8490eb9baac3595fd5b86e6a217f4a9873d5af6b65e006fddaf5b32d3fd7b2d3c32a56c39f336d1a7eb1f08349b33fe75007c6d", 0x89}], 0x8, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x9830}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd4b}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}, 0x810) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@random={'os2.', 'cpuset\x00'}, &(0x7f00000001c0)=""/208, 0xd0) [ 2130.966330] binder_alloc: 2935: binder_alloc_buf, no vma [ 2130.972029] binder: 17959:17966 transaction failed 29189/-3, size 72-24 line 3274 [ 2130.984563] binder: undelivered TRANSACTION_ERROR: 29189 [ 2130.991762] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.003599] binder: 17959:17975 transaction failed 29189/-3, size 0-0 line 3274 16:31:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x148) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@local, 0x47, r2}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00001dcf48)=ANY=[]}}, 0x20000090) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x28, &(0x7f0000000240)}, 0x10) [ 2131.031205] binder: BINDER_SET_CONTEXT_MGR already set [ 2131.037688] binder: 17959:17986 BC_INCREFS_DONE u0000000000000000 no match [ 2131.064138] binder: 17959:17975 ioctl 40046207 0 returned -16 [ 2131.064204] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:28 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0x69c, 0x8b7, 0x0, 0x4}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2131.075710] binder: 17959:17986 transaction failed 29189/-3, size 0-0 line 3274 [ 2131.087576] binder: undelivered TRANSACTION_ERROR: 29189 16:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='veth0\x00'}) r2 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) 16:31:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="0203fc000f00000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a0000000000000000ff00"/120], 0x78}}, 0x0) 16:31:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="116348400000000000000008000000000000000000000000002000000000000000000000000000000000006a8a0ea503a9abde167c01452400"/89], 0x1, 0x0, &(0x7f0000000580)='7'}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = signalfd4(r2, &(0x7f0000000080)={0x2a}, 0x8, 0x80000) write(r3, &(0x7f0000000180)="aa8b69543718603b26014e07caaf5b44bf47", 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r4, 0x10e, 0x1, &(0x7f0000000240)=""/28, &(0x7f0000000280)=0x1c) [ 2131.122312] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.127867] binder: 18004:18006 transaction failed 29189/-3, size 0-0 line 3274 [ 2131.137470] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.148150] binder: 18004:18007 transaction failed 29189/-3, size 0-0 line 3274 [ 2131.156951] binder: undelivered TRANSACTION_ERROR: 29189 [ 2131.182935] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.188505] binder: 18011:18014 transaction failed 29189/-3, size 0-0 line 3274 [ 2131.196909] binder: BINDER_SET_CONTEXT_MGR already set [ 2131.202329] binder: 18011:18014 ioctl 40046207 0 returned -16 [ 2131.208563] binder: 18011:18014 BC_INCREFS_DONE u0000000000000000 no match [ 2131.216980] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.222578] binder: 18011:18014 transaction failed 29189/-3, size 0-0 line 3274 16:31:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sync_file_range(0xffffffffffffffff, 0x10001, 0x5, 0xa49fd384708f2637) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)=0x2) [ 2131.231447] binder: undelivered TRANSACTION_ERROR: 29189 [ 2131.237525] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.243410] binder: 18011:18014 transaction failed 29189/-3, size 0-0 line 3274 [ 2131.247908] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.258185] binder: 18011:18016 transaction failed 29189/-3, size 7638104968020361216-1647943256063151754 line 3274 16:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr="000000001500000000020040000000bf"}, 0x1c) r3 = getpgrp(0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r8 = creat(0x0, 0x0) write$P9_RWRITE(r7, &(0x7f0000000100)={0xb}, 0xb) write$P9_RREAD(r8, 0x0, 0x0) r9 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r8, 0x0, 0x40000, 0x0) fallocate(r7, 0x0, 0x0, 0x110001) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r10, 0x4, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x891}, 0x8081) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r12 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x40000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8}) r13 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r13, 0x0, 0x40000, 0xfff) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000008c0)={&(0x7f0000000700), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xca86}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r11}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x80}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8}, {0x8}, {0x8, 0x1, r12}, {0x8, 0x1, r8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x267851c16d1e0944) r14 = dup(r1) r15 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r15, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r16 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r16, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r17 = dup3(r15, r16, 0x9383cc09aa48aa5a) r18 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r18, 0x0) r19 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r19, 0x8200) r20 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x2000, 0x0) r21 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r22 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r22, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf25030000004c00070008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000180", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="0c0002003f000000000000000c00080007000000000000000c0006000600000000000000"], 0x15}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sched_setparam(r3, &(0x7f0000000080)=0x9) r23 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r23, 0x8200) ioctl$TCSETSF(r23, 0x5412, &(0x7f0000000040)={0x16, 0x2, 0x0, 0x3, 0x3}) [ 2131.280332] binder: BINDER_SET_CONTEXT_MGR already set [ 2131.285633] binder: 18011:18016 ioctl 40046207 0 returned -16 [ 2131.296196] binder: 18011:18014 BC_INCREFS_DONE u0000000000000000 no match [ 2131.299209] binder: undelivered TRANSACTION_ERROR: 29189 [ 2131.309287] binder_alloc: 2935: binder_alloc_buf, no vma [ 2131.315175] binder: 18011:18014 transaction failed 29189/-3, size 0-0 line 3274 [ 2131.322916] binder: undelivered TRANSACTION_ERROR: 29189 16:31:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a0000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x6e}}, 0x4003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r1, r0, 0xc0000) 16:31:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xd0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0xfffffffffffffc89, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000000000e300000000000000000000000000000000000000000000000000fffffffffffffff000000000000000000000000000000000000000000000003f7c00001816ab0f7358ce64d9fe39f3d187029b9a3fb200"/111], 0x1, 0x0, &(0x7f0000000580)='7'}) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'osx.', 'posix_acl_access\x00'}, &(0x7f0000000280)=""/176, 0xb0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x22a000, 0x120) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, 0x3, 0x10000, 0x7fff}, 0xa) 16:31:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}) r3 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000001c40)='#\x00', 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$update(0x2, r4, &(0x7f0000000180), 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@rc, &(0x7f0000000140)=0x80, 0x1000) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x16}) 16:31:31 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:31 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2134.032255] binder: 18027:18032 unknown command 4 [ 2134.044991] binder: 18027:18032 ioctl c0306201 20000000 returned -22 [ 2134.052011] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.057478] binder: 18027:18032 transaction failed 29189/-3, size -256-240 line 3274 [ 2134.067009] binder: 18027:18032 unknown command 4 [ 2134.067041] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:31 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2004}, {r2, 0x8090}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={0xd64c}, 0x8) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000001c00"/76], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2134.071937] binder: 18027:18032 ioctl c0306201 20000000 returned -22 [ 2134.085663] binder: 18027:18041 transaction failed 29189/-3, size -256-240 line 3274 16:31:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f00000002c0)='.\x00', 0x0) ftruncate(r1, 0x8200) socket$key(0xf, 0x3, 0x2) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000000)="fc8b0953826777e0458f4467df9a6b6fa29e1fcae30d228c967a09de79ca95047e13822dfd85aa", 0x27) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000000000000000000000000900000000000000000000000200010000000000000000000000000005000500000000000a00000000000002008000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:31 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2134.127627] binder: BINDER_SET_CONTEXT_MGR already set 16:31:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x7ff, 0x7cf, 0xd1df0, 0x7, 0x12, 0x6, 0xffff, 0xffffffff, 0x2, 0x7fffffff, 0x3, 0x7}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0xf2, 0x6, 0xa8, 0x8000}) [ 2134.155657] binder: 18048:18049 ioctl 40046207 0 returned -16 [ 2134.163053] binder: 18048:18049 BC_INCREFS_DONE u0000000000000000 no match [ 2134.171194] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.176706] binder: 18048:18049 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.185497] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendto$inet(r2, &(0x7f0000000080)="783aa0163a2602b077dc58153d4796e18d9d5c1ed1a0d2c83e8bb3b479e2ec3360b269514633c7fc09430c5939b4870634171be762ba3a977ec64a83d482ce4585082f1aebb100b7bdd486d65278323fa03023e5744599", 0x57, 0x4000, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000001c0)={0xffffffffffffff81, 0x0, 0x1, 0xcf, 0xc5e3}, 0xc) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") splice(r3, &(0x7f0000000140), r0, &(0x7f0000000180), 0x334, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2134.200207] binder: 18048:18049 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.209139] binder: BINDER_SET_CONTEXT_MGR already set [ 2134.209145] binder: 18048:18060 BC_INCREFS_DONE u0000000000000000 no match [ 2134.221561] binder: 18048:18049 ioctl 40046207 0 returned -16 [ 2134.221607] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.233495] binder: 18048:18060 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.240142] binder: undelivered TRANSACTION_ERROR: 29189 16:31:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000080)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x248881, 0x0) rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$poke(0xffffffffffffffff, r1, 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0x8, 0x3, 0x7ff, 0x800, 0x55, 0xfffffffffffffffa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) fcntl$getown(0xffffffffffffffff, 0x9) 16:31:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r1, r2) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000280)={0x37, 0x9, [0xfffffffffffff801, 0x4, 0xa23, 0x8, 0x7], 0xffe0}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x7e0, 0x0, 0x200, 0x2, 0x6, 0x1}, &(0x7f0000000140)={0xa52a, 0x3fe, 0x9, 0x6, 0x8, 0x7, 0x7ffffffc, 0x6}, &(0x7f0000000180)={0x80, 0x5, 0x0, 0x2, 0x800, 0x101, 0xffffffffa13d6e14, 0x3}, &(0x7f00000001c0)={0x77359400, 0x0}, &(0x7f0000000240)={&(0x7f0000000200)={0x2}, 0x8}) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000000c0)) r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r7, 0x8200) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000001940)={&(0x7f00000006c0), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48800) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x24a0410}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004081) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r10, 0x0) r11 = ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) fcntl$getflags(r11, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) prctl$PR_SET_FPEXC(0xc, 0x40000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000116348400000001b0000000000ac358c1c25d108c9a062262bb10000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000042c1bb00000000000000000000001263484000"/188], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESHEX]]], 0x1c}}, 0x10) [ 2134.266462] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.272109] binder: undelivered TRANSACTION_ERROR: 29189 [ 2134.277700] binder: 18064:18065 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.288072] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.302386] binder: 18064:18065 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.310307] binder: undelivered TRANSACTION_ERROR: 29189 [ 2134.348224] binder: BINDER_SET_CONTEXT_MGR already set [ 2134.353662] binder: 18074:18075 ioctl 40046207 0 returned -16 [ 2134.360219] binder: 18074:18075 BC_INCREFS_DONE u0000000000000000 no match [ 2134.367403] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.373421] binder: 18074:18075 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.381707] binder: undelivered TRANSACTION_ERROR: 29189 [ 2134.388713] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.394914] binder: 18070:18076 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.398617] binder: BINDER_SET_CONTEXT_MGR already set [ 2134.407736] binder: 18074:18075 ioctl 40046207 0 returned -16 [ 2134.414193] binder: 18074:18075 BC_INCREFS_DONE u0000000000000000 no match [ 2134.421256] binder: 18074:18075 got transaction to invalid handle [ 2134.427489] binder: 18074:18075 transaction failed 29201/-22, size 0-0 line 3128 16:31:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) epoll_create1(0x80000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000080)) r3 = syz_open_pts(r0, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x16}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000180)) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$getownex(r5, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000000140)='net/sockstat6\x00') [ 2134.450841] binder: undelivered TRANSACTION_ERROR: 29201 [ 2134.461691] binder: BINDER_SET_CONTEXT_MGR already set [ 2134.475206] binder: 18074:18079 ioctl 40046207 0 returned -16 [ 2134.488243] binder: 18074:18075 BC_INCREFS_DONE u0000000000000000 no match [ 2134.497757] binder_alloc: 2935: binder_alloc_buf, no vma [ 2134.504562] binder: BINDER_SET_CONTEXT_MGR already set [ 2134.510117] binder: 18074:18075 transaction failed 29189/-3, size 0-0 line 3274 [ 2134.522435] binder: 18074:18083 ioctl 40046207 0 returned -16 [ 2134.527870] binder: undelivered TRANSACTION_ERROR: 29189 [ 2134.535306] binder: 18074:18079 BC_INCREFS_DONE u0000000000000000 no match [ 2134.544952] binder: 18074:18079 got transaction to invalid handle [ 2134.560272] binder: 18074:18079 transaction failed 29201/-22, size 0-0 line 3128 [ 2134.600550] binder: undelivered TRANSACTION_ERROR: 29201 [ 2135.141598] binder_alloc: 2935: binder_alloc_buf, no vma [ 2135.147128] binder_alloc: 2935: binder_alloc_buf, no vma [ 2135.147136] binder: 18070:18087 transaction failed 29189/-3, size 0-0 line 3274 [ 2135.160549] binder: 18070:18088 transaction failed 29189/-3, size 0-0 line 3274 [ 2135.168178] binder: undelivered TRANSACTION_ERROR: 29189 16:31:34 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:34 executing program 3: syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x8884}, @val={0x2, 0x0, 0xffffffffffffff80, 0x2, 0x3, 0x4}, @x25={0x3, 0xfff, 0xf1, "918f440b763bbe90b492d2d9512c367314e94c9994002f5416d99e76f4fdfd333e97bd043c476eb0e9b3c457c50ca5fcce0223aa5658bc88ea500d7c103e3e48b106cd835d4c5ff6ae31316f5beb43140059c4fad85a85fdc81a978737d7c14075c6332186cb4f73c80466a856319c4dbc5f50a9f7ab53f86327ea12"}}, 0x8d) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x38) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x100000001, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2137.080160] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.085794] binder: 18094:18099 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.097741] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.103402] binder: 18094:18099 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.111058] binder: undelivered TRANSACTION_ERROR: 29189 16:31:34 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'team_slave_0\x00', 0x80}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDENABIO(r2, 0x4b36) 16:31:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pread64(r1, &(0x7f0000000000)=""/85, 0x55, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x40000, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000002c0)=""/13, 0xd, 0x80000, 0x7, 0x9, 0x4, 0xa59}, 0x120) recvmmsg(r2, &(0x7f00000012c0)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000000140)=""/127, 0x7f}, 0x8000000000004}, {{&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000001280)}, 0x9}], 0x2, 0x40, &(0x7f0000001380)={r3, r4+30000000}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000100)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000013c0)={@local, 0xb, r6}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) r8 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fstatfs(r8, &(0x7f0000001880)=""/4096) [ 2137.178745] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.193980] binder: 18111:18114 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.203518] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.209068] binder: 18111:18114 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.216746] binder: undelivered TRANSACTION_ERROR: 29189 16:31:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x5, 0x5, "b68262e4fea16dade2b5ebe99d61215afaf597", 0x5, 0x7}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2137.252046] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.257559] binder: 18123:18124 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.265764] binder: BINDER_SET_CONTEXT_MGR already set [ 2137.271347] binder: 18125:18126 ioctl 40046207 0 returned -16 [ 2137.275018] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.283482] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.287255] binder: 18125:18126 BC_INCREFS_DONE u0000000000000000 no match 16:31:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/member\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x13c, 0x0, &(0x7f0000000780)=[@increfs_done={0x40106308, 0x3}], 0x20b, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="116348400000000000000000000000000000fdff0000000000000000000000000000000000000000000000000000000000000000000000fbd80000000000000000000000000000000000000000002c1aafedb68b58cdf191ffb5524b1c4c8d40a7c4f72a5cd692b9b4074f1c260cc035597e6c80dd27f0523862e915d1f6e449a2d36ad03eb592b1d05d5e8cc78abd8f9d02e9507df3d0e69fd4e0bd8ba6c4347b074d8fe92fdebfdc34"], 0x1, 0x0, &(0x7f0000000580)='7'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendfile(r1, r3, &(0x7f0000000080), 0x1000) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r4, 0xb}, 0x14) [ 2137.288982] binder: 18123:18128 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.289219] binder: 18123:18124 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.298003] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.308272] binder: undelivered TRANSACTION_ERROR: 29189 [ 2137.311792] binder: 18125:18126 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.339628] binder: BINDER_SET_CONTEXT_MGR already set [ 2137.345246] binder: 18135:18136 ioctl 40046207 0 returned -16 [ 2137.351727] binder: 18135:18136 BC_INCREFS_DONE u0000000000000000 no match [ 2137.358854] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.364455] binder: 18135:18136 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.372630] binder: 18135:18136 ioctl c0306201 20000000 returned -14 [ 2137.379474] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.380951] binder: undelivered TRANSACTION_ERROR: 29189 [ 2137.385335] binder: 18135:18136 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.392622] binder: BINDER_SET_CONTEXT_MGR already set [ 2137.399394] binder: 18125:18140 BC_INCREFS_DONE u0000000000000000 no match [ 2137.411976] binder: 18135:18141 BC_INCREFS_DONE u0000000000000000 no match [ 2137.420105] binder: undelivered TRANSACTION_ERROR: 29189 [ 2137.420885] binder: BINDER_SET_CONTEXT_MGR already set [ 2137.426777] binder: 18125:18138 ioctl 40046207 0 returned -16 [ 2137.431253] binder: 18135:18136 ioctl 40046207 0 returned -16 [ 2137.436930] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.448601] binder: 18135:18141 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.448605] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.448629] binder: 18125:18140 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.456256] binder_alloc: 2935: binder_alloc_buf, no vma [ 2137.456281] binder: 18135:18141 transaction failed 29189/-3, size 0-0 line 3274 [ 2137.457421] binder: undelivered TRANSACTION_ERROR: 29189 [ 2137.494469] binder: undelivered TRANSACTION_ERROR: 29189 16:31:37 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000044dd00e9ffffffffffffff00"/76], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x40800) fcntl$dupfd(r2, 0x406, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffed3, 0x0, &(0x7f0000000080)="00f70b4c3d0cbb401fa3c5f2264f7cd359ce746599d05482c792354a4eef39467162fed39e4aa923f79df4be15eacfcc239bab1d90d1a5a326c2dce4a3e366d8df853fbc48243e29827f91d861f4ab0f6eee0847c6c4267ec3be1c9dd70a5d6f"}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r4, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5c}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xad}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @loopback}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x80000}, 0x804) 16:31:37 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x3f, 0x4) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) 16:31:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea36", 0x53}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2140.102569] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.116877] binder: 18145:18148 transaction failed 29189/-3, size 4899916394579099648--1507107 line 3274 16:31:37 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea36", 0x53}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2140.143794] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.154132] binder: 18145:18159 transaction failed 29189/-3, size 4899916394579099648--1507107 line 3274 16:31:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = getpgrp(0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfb) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x4000, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000240)={0x7, 0x7f, 0x1}, 0x7) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x70, 0x5, 0x8001, 0x189, 0x1, 0x0, 0xc5, 0x1, 0x8, 0xad31, 0x4, 0x75bdb8b2, 0x1, 0x2, 0x9, 0x100000000, 0x0, 0x10001, 0xffffffffffffff28, 0x7, 0x8, 0x865e, 0x101, 0x401, 0x7f, 0x9, 0x80000001, 0x71cac7aa, 0x1526ddda, 0x13a2, 0x8, 0x47a, 0x1, 0x2, 0x10000, 0x7fff, 0x6f, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x7}, 0x84, 0x3, 0x4, 0x4, 0x4, 0xfffffffffffffffb, 0x100000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x276148d7f5a93f1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x4, 0x3, 0x2, 0x77, 0x0, 0x5, 0x2, 0x4, 0x100, 0x6, 0x2, 0x1, 0x4, 0x101, 0x9, 0x80000001, 0x7, 0x2000000000005, 0x6, 0x3, 0x800000000000100, 0x1, 0x3, 0x100000000, 0x796, 0x5, 0x800, 0xfff, 0x9, 0xfff, 0xe055, 0x3ff, 0x7, 0x100000000, 0x80000001, 0x7ff, 0x0, 0xd3c, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10, 0x5, 0x80000001, 0x5, 0x3, 0x3, 0xffffffffffffffd0}, r2, 0x3, r4, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = getpgrp(0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x4, 0x7, 0x401, 0x4, 0x0, 0xfffffffffffffffe, 0x4, 0x4, 0x7, 0x5, 0x10001, 0x8a, 0x2, 0x7fff, 0x4, 0x0, 0x800000, 0x1dc, 0x8, 0x99f, 0x7fffffff, 0x5, 0x1, 0x5, 0x5, 0x7f5, 0x9, 0x2fa0, 0x8, 0x8, 0x513, 0x6, 0x200, 0x9, 0x1, 0x5, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x400}, 0x4001, 0x2, 0xff, 0x6, 0x6, 0x401, 0x1}, r3, 0x5, 0xffffffffffffffff, 0x6) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2140.217751] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.223996] binder: 18173:18174 transaction failed 29189/-3, size 0-0 line 3274 [ 2140.249976] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.255734] binder: 18173:18178 transaction failed 29189/-3, size 0-0 line 3274 16:31:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r3, &(0x7f00000001c0)='setgroups\x00') r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x10) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "72a57f30f560"}, 0x7, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2140.263731] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.269254] binder: 18173:18174 transaction failed 29189/-3, size 0-0 line 3274 [ 2140.278251] binder: undelivered TRANSACTION_ERROR: 29189 [ 2140.303768] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.309382] binder: 18183:18184 transaction failed 29189/-3, size 0-0 line 3274 16:31:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x4}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6a, @local, 0x4e21, 0x4, 'dh\x00', 0x10, 0x6, 0x40}, 0x2c) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setresgid(0xffffffffffffffff, r3, 0x0) [ 2140.319659] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.325749] binder: 18183:18184 transaction failed 29189/-3, size 0-0 line 3274 [ 2140.333509] binder_alloc: 2935: binder_alloc_buf, no vma [ 2140.339346] binder: 18183:18185 transaction failed 29189/-3, size 0-0 line 3274 [ 2140.347608] binder: undelivered TRANSACTION_ERROR: 29189 16:31:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000080)={0x6, 0x6, [0xfffffffffffffeff, 0xa9ba, 0x100000000, 0x2, 0x27d7], 0x5}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x80a0) 16:31:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2143.120377] binder: BINDER_SET_CONTEXT_MGR already set [ 2143.126634] binder: 18192:18196 ioctl 40046207 0 returned -16 [ 2143.132635] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.132758] binder: 18190:18197 transaction failed 29189/-3, size 0-0 line 3274 [ 2143.134001] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.149344] binder: 18192:18196 BC_INCREFS_DONE u0000000000000000 no match 16:31:40 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:40 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea36", 0x53}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 16:31:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="0d712c47fa22f1e04ba124dc015e41b4992d6261ddb4793cf6cbd1867ed0ca29b7e76e8b6335a6e9f7526acda85b62f5a26572e3f4ac7175e77fec65f7782526c0d37125b9e5485f9717dcc9f27461a1870e1b0cc6550e685abf2708649cac5f156078d41441bf6e9890459dd3ec13c027dcadb14eab9640d31a7d69897d7234fab35c75889e0603e6d0abab2723650867d05227cd7c86393848086e20ede677721480b21f2ae16f5c6c79afb82ab660634fa30099d50fa8dfb07c0621fed26e292f0198997c14cd6672ff05732ae8dd72e46a62ae82741aa3637a5d7c4169f6c75f4794663acd6c127295c9144d7e9625f8c348fb3415de26456ea4", 0xfc}, {&(0x7f0000000340)="df56e9e4eda7f262c6483515d3494012ac55133c537a537a5231cc04ef87f60e52b57242d52b1899f1a39d97c616e914ab6d554b9d923cc67cc37897b060eac1b68f91be", 0x44}], 0x2) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xf) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x6c, 0x0, &(0x7f0000000780)=[@increfs_done, @dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd9b, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000080)="3734b414688892531cf40f155a6cb28a7cf21f0f0deee2c53705b8100b6e2f19f66e2bcec7f28cf8174f025bd15b0e68235c73fa48e947f8d142d990db5abaacbbf079ae7bd26f412a03c6e5302573e025b5d92fd26431f0ca38f5a8e5a21cf9b43a184ad174a350a19cf10a1e23"}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0xa095}, {0x306, @random="bb637ca30b78"}, 0xa, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'hsr0\x00'}) 16:31:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2143.163112] binder: 18190:18200 transaction failed 29189/-3, size 0-0 line 3274 [ 2143.164062] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.176196] binder: undelivered TRANSACTION_ERROR: 29189 [ 2143.179649] binder: 18192:18196 transaction failed 29189/-3, size 0-0 line 3274 [ 2143.261718] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.267343] binder: 18216:18221 transaction failed 29189/-3, size 0-0 line 3274 [ 2143.275778] binder: BINDER_SET_CONTEXT_MGR already set [ 2143.282318] binder: undelivered TRANSACTION_ERROR: 29189 [ 2143.287931] binder: 18216:18221 ioctl 40046207 0 returned -16 [ 2143.294723] binder: 18216:18221 BC_INCREFS_DONE u0000000000000000 no match [ 2143.301825] binder: 18216:18221 BC_DEAD_BINDER_DONE 0000000000000000 not found 16:31:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f000000000000000133b2fb2400000005000600000019c8cc91a55f15c45b000000000000000000000000000000000800000000000000a61a8f7590b294b10000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff00000000"], 0x78}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) [ 2143.309222] binder: 18216:18221 got reply transaction with no transaction stack [ 2143.317536] binder: 18216:18221 transaction failed 29201/-71, size 0-0 line 3036 [ 2143.328693] binder: undelivered TRANSACTION_ERROR: 29201 [ 2143.334511] binder: undelivered TRANSACTION_ERROR: 29189 [ 2143.336290] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.340965] binder: BINDER_SET_CONTEXT_MGR already set [ 2143.345533] binder: 18216:18229 BC_INCREFS_DONE u0000000000000000 no match 16:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x4044094) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xfc, 0x4, 0xfffffffffffffe01, "f7b07d1a35ad4104f41c4bf3965aefcf", "44239845a7e92acb0f04a7d05b92ea45000628383e693f660b8fd309e69c53b65cdaddc91bc755ab27c2e3ce5326d299d2fb097b3168bc79397bd89618b9cbd0238c19d0721ed01294bf9f7e1e7a342de7692502c300440b8941f9cd83e85281394420f3dddec893a74149dba4bdd30e0ff390cb8a32b942031c9cca7d488f297b64f864da51e71cdc9e546236a8fbeacf63851c38a25202b719e331eec7ea3675ef09bc7041bcfaf985a499b6b9d4affe3e0e7c566a262eaed72f8a8e183ecb6b8a3059cb5b12dfaa2e394de359420ea1c71ecccdb977c1179d3212ca321374263ed4ad9e5490"}, 0xfc, 0x0) exit_group(0x9) [ 2143.351256] binder: 18216:18228 ioctl 40046207 0 returned -16 [ 2143.357835] binder: 18216:18229 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 2143.357846] binder: 18216:18229 got reply transaction with no transaction stack [ 2143.357857] binder: 18216:18229 transaction failed 29201/-71, size 0-0 line 3036 [ 2143.357928] binder: 18216:18221 transaction failed 29189/-3, size 0-0 line 3274 [ 2143.366159] binder: undelivered TRANSACTION_ERROR: 29201 16:31:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x1, 0x11, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)={0x0, @speck128}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x101, 0x79, 0x5, 0x5a, 0x0, 0xff, 0xe02e9024b397ad91, 0x4, 0xdf, 0x0, 0x1, 0x4, 0x9, 0x200, 0x6, 0xb6, 0xae8d, 0x5, 0x7fff, 0xa318, 0x9, 0xb81c, 0x7ff, 0x7, 0x2, 0x4, 0x1ff, 0x3, 0xb2, 0xffffffffffffff80, 0x8, 0x3ff, 0x2, 0x81, 0x0, 0x200, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x4041, 0x5, 0x80000001, 0x5, 0x1ff, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0xe) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) write$selinux_load(r1, &(0x7f00000001c0)={0xf97cff8c, 0x8, 'SE Linux', "5a6afb0c381c80cf5cf9d5cdcb41ef85a6cace"}, 0x23) r2 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) 16:31:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000000000000000c300000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2143.409432] binder: undelivered TRANSACTION_ERROR: 29189 [ 2143.429622] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.435456] binder: 18237:18238 transaction failed 29189/-3, size 0-0 line 3274 16:31:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfff7bf070") r1 = socket(0x2cac33efe50ba32a, 0x404, 0x80) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x3, 0x592, [0x20000840, 0x0, 0x0, 0x20000a86, 0x20000c4c], 0x0, &(0x7f00000001c0), &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x1, 0x6007, 'veth1\x00', 'bond0\x00', 'bond_slave_1\x00', 'tunl0\x00', @random="61e46d3fa8c0", [0xff, 0x0, 0xff, 0x17e, 0x80, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff, 0x101], 0xae, 0x1de, 0x216, [@time={'time\x00', 0x18, {{0x200, 0x8, 0x7db8, 0x127ec, 0x0, 0x862, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x910, 'system_u:object_r:restorecond_exec_t:s0\x00'}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xa0020ab06fe6f29e}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x20, 0x8100, 'gre0\x00', 'veth0_to_hsr\x00', 'bcsh0\x00', 'eql\x00', @remote, [0xff, 0x18f70a71105e889f, 0x0, 0xff, 0xff], @dev={[], 0x15}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x12e, 0x166, 0x196, [@helper={'helper\x00', 0x28, {{0x1, 'RAS\x00'}}}, @stp={'stp\x00', 0x48, {{0x7, {0x1d, 0x7, 0x400, @random="5ee5e6f8b1ba", [0x181, 0xff, 0xff, 0xff, 0x0, 0xff], 0x9, 0x0, 0x4, 0x9c, @dev={[], 0xf}, [0x563ca1bbbe5ce415, 0xff, 0xff, 0x0, 0xff], 0x4e24, 0x4e24, 0x229, 0x7fffffff, 0x3, 0x4fa2, 0x1, 0xc2, 0x9, 0x1}, 0xa0, 0x80}}}], [@arpreply={'arpreply\x00', 0x10, {{@remote}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x48, 0x1c, 'veth0_to_bridge\x00', 'veth1_to_team\x00', 'nr0\x00', 'veth1_to_bond\x00', @random="55d32a0adb0f", [0xff, 0x0, 0xff, 0x80, 0x80, 0x7f], @link_local, [0x0, 0x0, 0xff], 0xa6, 0xee, 0x126, [@mac={'mac\x00', 0x10}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x6, 0xa1}}}], @arpreply={'arpreply\x00', 0x10, {{@random="3e6a533e96bd"}}}}]}]}, 0x60a) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x941a9b9d65b91b91}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1490425518f61704}, 0x40000) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2143.480681] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.486384] binder: 18245:18247 transaction failed 29189/-3, size 0-0 line 3274 [ 2143.520998] binder_alloc: 2935: binder_alloc_buf, no vma [ 2143.526578] binder: 18249:18252 transaction failed 29189/-3, size 0-0 line 3274 [ 2143.534967] binder: undelivered TRANSACTION_ERROR: 29189 16:31:43 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x1, 0x16, 0xfffffffffffffff7, 0x1000, "2b3c38cd7105248ee2a409369a508d5391e261d0c7924dd1336834c0026a83dc"}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x24) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x178, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESDEC], @ANYBLOB="03f8e1f6181ba307dcc03ded02f5f9b7ce684973c0251a8237d2ce6776d36050a895cb3c51588b735c5db87309ba4d9b14e0b0b2abe248b1b6a5c7bff23e032ff25a89c7acb8d4a970e347c3181c1fae", @ANYRESDEC, @ANYPTR64, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESHEX]], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="5cd932fcbf4edf7d09608ec2913addff6479e3287424f4aeac8570bad26c08ea09e377ca84373f1a5eb75ec6958766bd8b580082a09f51d0dbef87f50594db2161830e0511faf1f5879f40361e9f8dbbb991788b15986f029efd63821e8d8d3340eb91a5447af72d5e255fd0b623e22df45b494e5e55b319d44950b8c7ed736f7bd378d02ec366d7791fae2f53dacb2e174462c6ee463f01f1dc69823bd79e5d113080885a3896951f85f81abd0e2e5284c9f448203389a5b21da1919d961de8fc42c7b2149df42dc6ed08149f49056de4445069d526d1ceb4926c00477d9ad54b2105a186a5705b245b3bc5667f5d95"], @ANYBLOB="6f164863c671430df1997b0d86a08e2cc5b7a0a98c45a7ffcac2d2023adbdaa6a7893462284a42ca5ecef4b9d2926b8a6d1db9e1af05aa377b064905d4ffba879c48b5c889eeee76a33f72bd7aa8926d8721ea329ea0ae31522ccfac7732da15bf421852ae20d2abf3432cfc9b330436b7ca70f0477340ac724887", @ANYRES16, @ANYBLOB="6e6e8ce97f9561fad8cdf02f401fe3c8b8bbd7d6687c5fbbfd90661059faae518250c09ca521993bd4e62a8fb9fffa8f4142ee79e956439ef0d137bc512c1ec22aca910e37f17bb1be0d5a68c8cd28f36170f60de10afddcf924368b2e30ae6781cee3846f2dfb8775689652b1f799e2cbb73e7e63e030a130dfb0a98a7fc086434cb3c49f72e11099152a3805a99f8f7f1fa040c5428be26cdccfb4390e3bb089a0c9464ae74f04bc3c4dab79cd904d6a45075edfd4cdf850ce9cadfb0f9ff2ca7aed0c276b43", @ANYPTR, @ANYRESDEC, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRESDEC, @ANYRES32=0x0]], 0x1, 0x0, &(0x7f0000000580)='\x00'}) 16:31:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:43 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) getsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000001140), &(0x7f0000001180)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000001080)=ANY=[@ANYRES64=r2, @ANYBLOB="cb1b0b6cd7f8a45cb1fb404947083d66805a5c88eac121e8ff35c0248f0be73613153290f7c93695bcc4df23cca3ae3d1a8a2394015dc804bb56f42687c3ac0e4aa99749989874a1ff4476e53385b56b10f2696ca592d65d75ba99db6c9439ea741bc188b906f2", @ANYRES64=r0, @ANYRES32=r3, @ANYRES16=r1, @ANYPTR=&(0x7f0000001040)=ANY=[@ANYRES32=r5, @ANYRESHEX=r2, @ANYRES16=r6, @ANYRES32=r2], @ANYRES16=r7], 0xfffffffffffffeb6}}, 0x844) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_buf(r8, 0x1, 0x3d, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 16:31:43 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d239", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2146.286650] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.295078] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.298362] binder: 18267:18270 ioctl 40046207 0 returned -16 [ 2146.301119] binder: 18265:18268 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.307422] binder: 18267:18270 BC_INCREFS_DONE u0000000000000000 no match [ 2146.315647] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.326671] binder: 18265:18268 ioctl 40046207 0 returned -16 [ 2146.326725] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.333863] binder: 18265:18268 BC_INCREFS_DONE u0000000000000000 no match [ 2146.338599] binder: 18267:18270 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.345276] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.356469] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.358211] binder: 18265:18268 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.371396] binder: 18265:18281 BC_INCREFS_DONE u0000000000000000 no match [ 2146.371512] binder: 18267:18270 ioctl 40046207 0 returned -16 [ 2146.378447] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.378465] binder: 18265:18280 ioctl 40046207 0 returned -16 [ 2146.378492] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.386062] binder: 18267:18270 BC_INCREFS_DONE u0000000000000000 no match [ 2146.390419] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.413793] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.413800] binder: 18265:18281 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.414775] binder: undelivered TRANSACTION_ERROR: 29189 16:31:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2146.419449] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.438397] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.443825] binder: 18267:18279 ioctl 40046207 0 returned -16 [ 2146.445154] binder: 18267:18270 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.449809] binder: 18265:18268 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.462818] binder: 18267:18270 BC_INCREFS_DONE u0000000000000000 no match [ 2146.464866] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.472372] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x84102, 0x100) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0x75) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_hsr\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x38, 0x4, [0x6, 0x7fffffff, 0x859, 0x9]}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2146.483698] binder: 18267:18270 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.504357] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.509803] binder: 18267:18270 ioctl 40046207 0 returned -16 [ 2146.509834] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.516631] binder: 18267:18270 BC_INCREFS_DONE u0000000000000000 no match [ 2146.521463] binder: 18286:18287 transaction failed 29189/-3, size 0-0 line 3274 16:31:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x0, 0xfff, 0x1, 0xa3ee}, 0x8db, 0xff, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0xcec, 0xaa6f, 0x400}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) 16:31:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2146.528575] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.542250] binder: 18267:18270 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.549281] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.555809] binder: 18286:18287 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.563633] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.599815] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.601322] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.605668] binder: 18297:18298 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.612404] binder: 18267:18270 BC_INCREFS_DONE u0000000000000000 no match [ 2146.626561] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.632622] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.638184] binder: 18267:18300 ioctl 40046207 0 returned -16 [ 2146.638275] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ftruncate(r2, 0x6) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) [ 2146.644522] binder: 18267:18279 BC_INCREFS_DONE u0000000000000000 no match [ 2146.650051] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.657638] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.667836] binder: 18267:18303 BC_INCREFS_DONE u0000000000000000 no match [ 2146.669669] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.679198] binder: 18267:18300 ioctl 40046207 0 returned -16 [ 2146.685909] binder: 18297:18302 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.691376] binder: 18267:18270 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.693933] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.703687] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.707002] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.712487] binder: 18267:18306 ioctl 40046207 0 returned -16 [ 2146.717869] binder: 18267:18279 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.723789] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.731337] binder: 18297:18301 transaction failed 29189/-3, size 0-0 line 3274 16:31:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000"], 0x1, 0x0, &(0x7f0000000580)='7'}) geteuid() [ 2146.736933] binder: 18267:18303 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.744497] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.752460] binder: 18267:18270 BC_INCREFS_DONE u0000000000000000 no match [ 2146.757533] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.766010] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.775508] binder: 18267:18270 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.789728] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.795803] binder: 18309:18310 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.804669] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.810438] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.816840] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.822772] binder: undelivered TRANSACTION_ERROR: 29189 [ 2146.829500] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.835427] binder_alloc: 2935: binder_alloc_buf, no vma [ 2146.835442] binder: 18309:18310 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.841531] binder: 18309:18311 transaction failed 29189/-3, size 0-0 line 3274 [ 2146.856641] binder: undelivered TRANSACTION_ERROR: 29189 16:31:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001, 0x0, 0x0, 0x7fd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff9ba, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:46 executing program 1: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x14}, 0x10) ioctl(r0, 0x7, &(0x7f0000000200)="8c75c94c1452fbd919fb9eb067447342a47fbca5c75233397c3c7c174c65821a1040e2fc10c4fe99be5b7800923ab1b5c9b6c9cb2869b8e84466a5fe9554") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/154, &(0x7f00000000c0)=0x9a) r2 = socket$key(0xf, 0x3, 0x2) fchdir(r0) r3 = socket(0x3, 0x4, 0x3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000e031817ab841f9fc2d1d473fa60a000005000600000000000a000000000000000000000000000000000000000000000000000000000000000000010019360b83f1d550c4b6aa0d00000000000000000068000005000500000000000a000000000000"], 0x78}}, 0x0) 16:31:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) socket(0x3, 0x181735274e94b9d0, 0x6) 16:31:46 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d239", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2149.330362] binder_alloc: 2935: binder_alloc_buf, no vma [ 2149.335880] binder: 18316:18322 transaction failed 29189/-3, size 0-0 line 3274 [ 2149.358294] binder_alloc: 2935: binder_alloc_buf, no vma [ 2149.364111] binder: 18316:18322 transaction failed 29189/-3, size 0-0 line 3274 [ 2149.373996] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d6d7d700005f3aa0f7de3a7fd8bb3fae2fbe8b1ac7c2fab6e618cca3c1eac1f41fb9f5c20ab56c21ca745289f88758420640c0b0c3ace8a75750b64d83273"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2149.379678] binder: 18316:18335 transaction failed 29189/-3, size 0-0 line 3274 [ 2149.388013] binder: undelivered TRANSACTION_ERROR: 29189 16:31:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x10, 0x10000000001, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}) 16:31:46 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f00000000000000000000000100180000000000051e5700000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000ff0000000000000000"], 0x78}}, 0x0) [ 2149.430000] binder_alloc: 2935: binder_alloc_buf, no vma [ 2149.452962] binder: 18349:18350 transaction failed 29189/-3, size 0-0 line 3274 [ 2149.462693] binder_alloc: 2935: binder_alloc_buf, no vma [ 2149.468191] binder: 18349:18350 transaction failed 29189/-3, size 0-0 line 3274 16:31:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2149.476636] binder_alloc: 2935: binder_alloc_buf, no vma [ 2149.483341] binder: 18349:18356 transaction failed 29189/-3, size 0-0 line 3274 [ 2149.494054] binder: undelivered TRANSACTION_ERROR: 29189 16:31:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:49 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1163304000"/76], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000c4d2d469bacc35023eeaa93aa96a00"/76], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240)={0x1cce600000000}, &(0x7f00000003c0), &(0x7f0000000440)={r2, r3+10000000}, 0x8) r4 = syz_open_pts(r1, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r5, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000180)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d9c00000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x16}) pipe2(&(0x7f0000000080), 0x80000) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r6, 0x8200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair(0x4, 0x4, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r7, 0x40049409, r8) syz_open_pts(0xffffffffffffffff, 0x200000) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x40, &(0x7f00000001c0)={0x9}, 0x8) r9 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) prctl$PR_GET_SECCOMP(0x15) ftruncate(r9, 0x8200) ioctl$TCSETSF(r9, 0x5404, &(0x7f00000000c0)={0xff, 0x6, 0x401, 0x9, 0x11, 0x401, 0x65a9, 0x2, 0x6, 0x6, 0x5fb, 0x3f}) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r10, 0x0) ioctl$PIO_FONT(r10, 0x4b61, &(0x7f0000000300)="53909f3fc63d55f34077cd1dc06d820532da97f5601ad1543d9f8ac33d48ac68be89411526bb99a1d9b03e542bdd9d26b12dd3c57e4f45a3d2d74d56291f4e02f8a7d4dc2bf95e181642b2e5a4a5f0d2d28b63182964d4b6a7b21290eae11ee641e183bfe85d00a6ce225548e3d747f6cbd50d35245c82187f1349cca95826e5c0baafbb574e826682b7579ed807b5955faf5f98c6039918b2c8ae61ea445895bae16f8bc6ee1ff2d3d6c37ee998ac765d6bf3") 16:31:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000580)) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000100)=""/48, 0xfffffffffffffff4}, {&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/160, 0xa0}], 0x7}, 0x80010000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfb) fcntl$setflags(r2, 0x2, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000005c0)=ANY=[]}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x40000, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000640)) bind(r3, &(0x7f0000000500)=@nfc={0x27, 0x1, 0x1, 0x4}, 0x80) 16:31:49 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d239", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2152.359304] binder: 18373:18380 unknown command 1076912913 [ 2152.365323] binder: 18373:18380 ioctl c0306201 20000000 returned -22 [ 2152.373693] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.379422] binder: 18373:18380 transaction failed 29189/-3, size 4468192933722051794-458105727466 line 3274 [ 2152.390911] binder: 18373:18380 unknown command 1076912913 [ 2152.391992] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.396644] binder: 18373:18380 ioctl c0306201 20000000 returned -22 16:31:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYRES64=r1], 0x8}}, 0x0) 16:31:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x8000)=nil, 0x8000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x198, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@fd, @flat=@weak_handle={0x77682a85, 0xa, 0x2}, @flat=@handle={0x73682a85, 0x0, 0x3}}, &(0x7f0000000100)}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x1, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/72, 0x0, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000002c0)}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2152.402335] binder: 18373:18389 transaction failed 29189/-3, size 4468192933722051794-458105727466 line 3274 [ 2152.442668] binder: 18393:18395 got reply transaction with no transaction stack [ 2152.451102] binder: 18393:18395 transaction failed 29201/-71, size 0-0 line 3036 16:31:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r1, 0x3) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000240)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000140)={{0x0, 0x1c9c380}, {r4, r5+30000000}}, &(0x7f0000000180)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x40) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl(r7, 0x6, &(0x7f0000000200)="31ac6a020b9b3167388a44230b541601f4675e11dec58d92642b0e50aba2018f17ee9c1bcd2fc60e") fcntl$setsig(r6, 0xa, 0x37) r8 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2152.460531] binder: 18393:18396 got reply transaction with no transaction stack [ 2152.467986] binder: 18393:18396 transaction failed 29201/-71, size 0-0 line 3036 [ 2152.476837] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.482920] binder: 18393:18395 transaction failed 29189/-3, size 0-0 line 3274 [ 2152.491004] binder: undelivered TRANSACTION_ERROR: 29201 16:31:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x10001) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e24, @multicast1}, {0x306}, 0x4c, {0x2, 0x4e20, @broadcast}, 'ip6_vti0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v\x1d\x0e\x00\x00rbiter\x00', 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x26, 0x20, 0x70bd2a, 0x25dfdbfc, {0x1e}, [@typed={0x18, 0x5b, @str='selinux\\).GPL$lo+-\x00'}, @generic="bfdb9e614df4b94f9e019a7e69bb582540f59c450ce56b6ee4b3db35dd8d1f97c91731d13ac6bef4f945c2ab035107f1091a26ebf09c077581806909388adb5e827c10e22bbcb8343cda83083da9b4247d643e9eb8a2e743e2652b3c446bc5ca101e6e2e79b230a071dd0d8d23c26c3b7458a3b0dfcddbeabe6c32dc3a9147ce3c22d677457cf990ef1655a8f9c5144094555b8405ce8e7272d935f304098c359690b87ff16d6fce6fa046b8e3835c"]}, 0xdc}, 0x1, 0x0, 0x0, 0x24044000}, 0x40010) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2152.523249] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.528832] binder: 18401:18402 transaction failed 29189/-3, size 0-0 line 3274 [ 2152.539440] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.545392] binder: 18401:18406 transaction failed 29189/-3, size 0-0 line 3274 [ 2152.553591] binder: undelivered TRANSACTION_ERROR: 29189 [ 2152.583816] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.589470] binder: 18410:18411 transaction failed 29189/-3, size 0-0 line 3274 [ 2152.599739] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.605353] binder: 18410:18412 transaction failed 29189/-3, size 0-0 line 3274 [ 2152.614539] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.620607] binder: 18410:18413 transaction failed 29189/-3, size 0-0 line 3274 16:31:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "19278fb36115bb1a908d96f09ac4ce81d4b52783"}, 0x15, 0x1) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2152.632361] binder: undelivered TRANSACTION_ERROR: 29189 [ 2152.664579] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.670673] binder: 18415:18416 transaction failed 29189/-3, size 0-0 line 3274 [ 2152.679773] binder_alloc: 2935: binder_alloc_buf, no vma [ 2152.685362] binder: 18415:18417 transaction failed 29189/-3, size 0-0 line 3274 [ 2152.694016] binder: undelivered TRANSACTION_ERROR: 29189 16:31:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x0, @loopback, 0x4e20, 0x3, 'dh\x00', 0x22, 0xfec, 0x19}, 0x2c) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:52 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ftruncate(r2, 0x1008200) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x190, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffeffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14d50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000001c0)=0x5cbf7a7b, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f00000004c0)={0x7, {{0xa, 0x4e22, 0x8, @loopback, 0x8}}, {{0xa, 0x4e24, 0x4, @mcast1}}}, 0x108) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) r4 = inotify_init1(0x80000) r5 = syz_open_procfs(0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0xc) r6 = syz_open_pts(0xffffffffffffffff, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)) r8 = inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x34000022) inotify_rm_watch(r7, r8) inotify_rm_watch(r4, r8) inotify_rm_watch(r3, r8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000000000000a004e220000000400000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000baf200000000000000000000000000000000000000000001000000020000000a004e200000fffffe88000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24fffffffd00000000000000000000000000000000f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00"/400], 0x190) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) 16:31:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:52 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999", 0x4f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) [ 2155.384624] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.400688] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.402998] binder: 18425:18430 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.406308] binder: 18426:18436 ioctl 40046207 0 returned -16 [ 2155.416569] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.424152] binder: 18426:18436 BC_INCREFS_DONE u0000000000000000 no match 16:31:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999", 0x4f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r8 = epoll_create(0x8001) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/connector\x00') poll(&(0x7f0000000200)=[{r4, 0x1010}, {r5, 0x410}, {r1, 0x235}, {r0, 0x8000}, {r6, 0x6085}, {r7, 0x4}, {r8, 0x100}, {r9, 0x80a0}, {r1, 0x40}], 0x9, 0x8) r10 = accept4(r3, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80, 0x800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2155.425206] binder: 18425:18441 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.432391] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.441567] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.445370] binder: 18426:18436 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.491543] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.503559] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.509110] binder: 18450:18452 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.528658] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.534026] binder: 18450:18452 ioctl 40046207 0 returned -16 16:31:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = getpgrp(0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfb) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x1011}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can={0x1d, 0x0}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x22}, 0x5, 0x4, 0x200, 0x400, 0xffffffffffffffff, 0x4000000, r4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', r4}) sendto$packet(r3, &(0x7f0000000080)="9413", 0x2, 0x4004015, &(0x7f0000000140)={0x11, 0x6e, r5, 0x1, 0xe32, 0x6, @broadcast}, 0x14) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x16}) 16:31:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000000c0)={0x100000001, 0x3, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDADDIO(r11, 0x4b34, 0x4) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYPTR64], @ANYRESHEX, @ANYRES16=r10, @ANYPTR, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES32=r6, @ANYBLOB="6fcce7c9509f48655917fe1932d227090035f868a5b42509bc14495446698ffc947cf619ec33ecbf2d80ff74fdb6fbb8437c6f615415de20452bd51beb91cfaf62bd64660aa7b7549a423a151d68a47c2553d760c1b2c97c23167079439f96f8ebede7d0b2d50b7777fc23745a687884e00d41ed5cf21e511d941c57e4727a3905a473acc9896731068488113c5c339f02dca1b1d8d2", @ANYRES64=r7, @ANYRES16=r8, @ANYRES32=r9]], 0x34}}, 0x0) [ 2155.540502] binder: 18450:18452 BC_INCREFS_DONE u0000000000000000 no match [ 2155.547625] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.553533] binder: 18450:18452 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.562080] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.567439] binder: 18450:18452 ioctl 40046207 0 returned -16 [ 2155.574158] binder: 18450:18452 BC_INCREFS_DONE u0000000000000000 no match [ 2155.584299] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.585891] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.589789] binder: 18450:18452 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.602997] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.603130] binder: 18454:18456 ioctl 40046207 0 returned -16 [ 2155.608603] binder: 18450:18452 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.617236] binder: 18454:18456 ioctl 4b46 200000c0 returned -22 [ 2155.628870] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.634489] binder: 18454:18456 ioctl 40046207 0 returned -16 [ 2155.634596] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.646372] binder: 18450:18452 BC_INCREFS_DONE u0000000000000000 no match [ 2155.647325] binder: 18454:18456 BC_INCREFS_DONE u0000000000000000 no match [ 2155.653856] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.666213] binder: 18450:18458 BC_INCREFS_DONE u0000000000000000 no match [ 2155.673181] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.675649] binder: 18450:18457 ioctl 40046207 0 returned -16 [ 2155.678873] binder: 18454:18456 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.685178] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.693199] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.697873] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.704947] binder: 18454:18463 ioctl 40046207 0 returned -16 [ 2155.708537] binder: 18450:18452 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.716701] binder: 18454:18456 BC_INCREFS_DONE u0000000000000000 no match [ 2155.722132] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.722168] binder: undelivered TRANSACTION_ERROR: 29189 16:31:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffcec, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00634040010000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="8561646600000000070000000000000001000000000000001c00000000000000852a747001000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/185], @ANYBLOB="b90000000000000001000000000000004000004000000000852a62770001100006000000000000000020000000400000347dad3176b03fbb1cbb948a62e7ac690272a8344605ec1162"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2155.730117] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.735574] binder: 18450:18458 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.740451] binder: 18454:18456 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.750780] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.782840] binder: 18454:18456 ioctl 4b46 200000c0 returned -22 [ 2155.783059] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.789271] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.794662] binder: 18467:18469 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.800860] binder: 18454:18463 ioctl 40046207 0 returned -16 [ 2155.807558] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.818900] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.822100] binder: 18454:18456 BC_INCREFS_DONE u0000000000000000 no match [ 2155.824879] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.832129] binder: BINDER_SET_CONTEXT_MGR already set 16:31:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x6) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) [ 2155.837521] binder: 18454:18471 BC_INCREFS_DONE u0000000000000000 no match [ 2155.842334] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.855086] binder: 18454:18463 ioctl 40046207 0 returned -16 [ 2155.861084] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.861114] binder: 18454:18471 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.861179] binder: 18454:18456 transaction failed 29189/-3, size 0-0 line 3274 16:31:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x10001}) 16:31:53 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[]}}, 0x0) [ 2155.888302] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.896650] binder: 18475:18476 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.906439] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.912086] binder: 18475:18479 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.919751] binder_alloc: 2935: binder_alloc_buf, no vma [ 2155.922280] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.930872] binder: undelivered TRANSACTION_ERROR: 29189 [ 2155.932671] binder: 18475:18476 transaction failed 29189/-3, size 0-0 line 3274 [ 2155.944433] binder: undelivered TRANSACTION_ERROR: 29189 16:31:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2480}], 0x1, 0x0, &(0x7f0000000080)='7'}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0xc040, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 16:31:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000180)={@random="293bbef25ae2", @link_local, [], {@llc_tr={0x11, {@llc={0x179, 0xfc, '+$', "0d47536307bf9b27d1b9fb92e0b19af3c1225bbd95ab713249355625f58bea20bd3a0cd7cd252e82a2882b59fe5e7f417fb264a351a5d5bfb4509f473dd4565bd72b42d995744a55428d8b698f660a7424a2d75e3f428417b78a226d392fc1491cc81013dd5a802a696141b26855ac33d08de476fcc8b9b5f9f5fb22"}}}}}, &(0x7f0000000240)={0x0, 0x4, [0x855, 0x69b, 0x871, 0x17d]}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./bus\x00', r2}, 0x10) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000001000000000000000000000ff0000000000000000"], 0x78}}, 0x0) [ 2158.419078] binder: 18484:18492 unknown command 0 [ 2158.424431] binder: 18484:18492 ioctl c0306201 20000000 returned -22 [ 2158.431690] binder_alloc: 2935: binder_alloc_buf, no vma [ 2158.437377] binder: 18484:18492 transaction failed 29189/-3, size 0-0 line 3274 [ 2158.447179] binder: 18484:18497 unknown command 0 [ 2158.452245] binder: 18484:18497 ioctl c0306201 20000000 returned -22 [ 2158.459071] binder_alloc: 2935: binder_alloc_buf, no vma [ 2158.465007] binder: 18484:18492 transaction failed 29189/-3, size 0-0 line 3274 16:31:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999", 0x4f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:55 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = geteuid() setreuid(r2, r2) r3 = getegid() r4 = geteuid() setreuid(r4, r4) write$P9_RSTATu(r1, &(0x7f0000000280)={0x68, 0x7d, 0x1, {{0x0, 0x50, 0x3ff, 0x8, {0x44, 0x0, 0x3}, 0x0, 0x2, 0x80000000, 0x7, 0x0, '', 0xd, '/dev/binder#\x00', 0x3, 'sh\x00', 0xd, '/dev/binder#\x00'}, 0x3, 'sh\x00', r2, r3, r4}}, 0x68) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000001c0)={0x84, @local, 0x4e24, 0x1, 'sh\x00', 0x7e, 0x7, 0x4a}, 0x2c) r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000480)=ANY=[@ANYRES16], 0xfffffe2e, 0x0, &(0x7f0000000580)='7'}) 16:31:55 executing program 1: syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 16:31:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x19f, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000100)) [ 2158.538319] binder_alloc: 2935: binder_alloc_buf, no vma [ 2158.545139] binder: 18503:18505 transaction failed 29189/-3, size 0-0 line 3274 [ 2158.577037] binder_alloc: 2935: binder_alloc_buf, no vma 16:31:55 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x18d, 0x20000ffd, &(0x7f0000e68000), 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r2, 0x0, 0x80000003) 16:31:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/42, 0x2a}], 0x1, &(0x7f00000001c0)=""/115, 0x73}, 0x20000002) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.mem_hardwall\x00', 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 16:31:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe42, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1363484000000000000000000000000000000000f800000100000000000000000b00000000000000000000000000000000000000000000000000800000000000000000fcffaafc4690a11b385652e252fcc8256dfd924962f156788392137bfe50cbb5b2afc79fdf296b0400f4ffffff0000221f66a760704cd9ff4a7ca64c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4f, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000580)='7'}) 16:31:56 executing program 1: request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0) [ 2158.582755] binder: 18503:18505 transaction failed 29189/-3, size 0-0 line 3274 [ 2158.590779] binder: 18503:18519 unknown command 65535 [ 2158.596160] binder: 18503:18519 ioctl c0306201 20000200 returned -22 [ 2158.604464] binder: undelivered TRANSACTION_ERROR: 29189 16:31:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 2158.647494] binder_alloc: 2935: binder_alloc_buf, no vma [ 2158.653950] binder: 18533:18534 transaction failed 29189/-3, size -433-0 line 3274 [ 2158.664898] binder_alloc: 2935: binder_alloc_buf, no vma [ 2158.670632] binder: 18533:18538 transaction failed 29189/-3, size -433-0 line 3274 16:31:58 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffffa, 0x20000802, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) shutdown(r1, 0x1) dup2(r0, r1) 16:31:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="08631040000000000000000000000000000000001163484000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000001263484000"/172], 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r5, 0x0) r6 = accept4$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") poll(&(0x7f0000000300)=[{r1, 0x8100}, {r3, 0x9500}, {r1, 0x200}, {r4, 0x628}, {r6, 0x200}, {r7, 0x80}, {r2, 0x4}], 0x7, 0x0) dup2(r0, r2) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x20010, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r8, &(0x7f0000000080)="6d9565904ee9813c5cc30255765ab6264e4e2d48c6176aff4b521758c2c9abe29076497b2a15065fcacf98fae51be540281353c08743b7ac7e25b450a9ae0fc6eb32af432588d82804ca74138a68ee82acf67397e17122d5b84be889dead804ae82858dfc99c8f6413a449c979140619c75e70d324d006677a8ffc4b27cffed488e1410c23", &(0x7f0000000140)="a5d8240b1999f9373de0b8669b84ab30e54aea37d77194befe8a075166b0bda0639321b534fc0078927dc0c80404e09d057a864b899ae6694efc9f4ca589000950cd108a5d1e261d56b7ce59f1962cfc9c48edb313dc0bb92e3e5f62205bd126d1638842e4f26175618dc95e9ce802182cf121ed0e196a00482b8877d070df4eb43aa2b71292179c36986f168da6b86a95f67d801cfc1e80952d82c773b46dc21cd9ea5cd62e1d2c15ece8c368695b978621a76466d4cc787825b7172da46f1ff9b973e0e30c4adebdf5f0306fe532169ebec01a481771cb0c7eedf3616c206cfaae", 0x7}, 0x20) 16:31:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = gettid() r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r3, 0x200006) sendfile(r2, r3, 0x0, 0x8000fffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0xd, 0x0, 0x9}, &(0x7f0000000340)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r3, 0x0, 0x2, &(0x7f0000000040)='[\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)='/dev/ptmx\x00', r4}, 0x30) perf_event_open(&(0x7f0000000080)={0x481b0b321647650b, 0x70, 0xfff, 0xffffffffffffff80, 0x7, 0x8000, 0x0, 0x6, 0x2000, 0x0, 0x9, 0x0, 0x1f, 0x6, 0x2, 0x81, 0xe4, 0xff, 0x7, 0xbd, 0x2, 0x0, 0x8, 0x5, 0x6, 0x8, 0x1, 0x0, 0x26ae, 0x1, 0x8000, 0x0, 0x5, 0x6, 0x5, 0x6, 0xfffffffffffffffa, 0x0, 0x0, 0x7fff, 0x1, @perf_config_ext={0xfff, 0x1000}, 0x20000, 0x546, 0x7fff, 0x1, 0x1, 0x7, 0x73}, r5, 0x5, 0xffffffffffffffff, 0x2) r6 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)={0x16}) 16:31:58 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb", 0x50}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r1, 0x0, 0x0) 16:31:58 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00'/10) fchdir(r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db2", 0x55}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000003c0), 0x10, 0x0}}], 0x1, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2161.544264] binder_alloc: 2935: binder_alloc_buf, no vma [ 2161.554489] binder: 18545:18547 transaction failed 29189/-3, size 0-0 line 3274 [ 2161.571953] ================================================================== [ 2161.573312] binder: BINDER_SET_CONTEXT_MGR already set [ 2161.579481] BUG: KASAN: use-after-free in tcp_init_tso_segs+0x19d/0x1f0 [ 2161.579497] Read of size 2 at addr ffff8881d3d811b0 by task syz-executor.1/18550 [ 2161.586524] binder: 18545:18547 ioctl 40046207 0 returned -16 [ 2161.591489] [ 2161.591500] CPU: 1 PID: 18550 Comm: syz-executor.1 Not tainted 4.14.143+ #0 [ 2161.591505] Call Trace: [ 2161.591522] dump_stack+0xca/0x134 [ 2161.591533] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2161.591544] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2161.591557] print_address_description+0x60/0x226 [ 2161.600311] binder: 18545:18547 BC_INCREFS_DONE u0000000000000000 no match [ 2161.604949] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2161.606589] binder_alloc: 2935: binder_alloc_buf, no vma [ 2161.613635] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2161.613647] __kasan_report.cold+0x1a/0x41 [ 2161.613660] ? kvm_guest_cpu_init+0x220/0x220 [ 2161.613667] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2161.613678] tcp_init_tso_segs+0x19d/0x1f0 [ 2161.613687] ? tcp_tso_segs+0x7b/0x1c0 [ 2161.616322] binder: 18545:18547 transaction failed 29189/-3, size 0-0 line 3274 [ 2161.619771] tcp_write_xmit+0x15a/0x4730 [ 2161.619793] ? memset+0x20/0x40 [ 2161.627591] binder_alloc: 2935: binder_alloc_buf, no vma [ 2161.628585] __tcp_push_pending_frames+0xa0/0x230 [ 2161.633851] binder: 18545:18547 transaction failed 29189/-3, size 0-0 line 3274 [ 2161.640392] tcp_send_fin+0x154/0xbc0 [ 2161.640411] tcp_shutdown+0xd5/0x100 [ 2161.640420] ? tcp_remove_empty_skb+0x320/0x320 [ 2161.640434] inet_shutdown+0x16f/0x350 [ 2161.645059] binder: BINDER_SET_CONTEXT_MGR already set [ 2161.650282] SyS_shutdown+0xe6/0x190 [ 2161.650293] ? SyS_getsockopt+0x1f0/0x1f0 [ 2161.650303] ? SyS_clock_gettime+0x7d/0xe0 [ 2161.650311] ? do_clock_gettime+0xd0/0xd0 [ 2161.650322] ? do_syscall_64+0x43/0x520 [ 2161.650332] ? SyS_getsockopt+0x1f0/0x1f0 [ 2161.650342] do_syscall_64+0x19b/0x520 [ 2161.650363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2161.656603] binder: 18545:18559 BC_INCREFS_DONE u0000000000000000 no match [ 2161.658965] RIP: 0033:0x4598e9 [ 2161.658971] RSP: 002b:00007fd9f4d8ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 2161.658980] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9 [ 2161.658985] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 2161.658989] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2161.658994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd9f4d8f6d4 [ 2161.658999] R13: 00000000004c8463 R14: 00000000004df000 R15: 00000000ffffffff [ 2161.659021] [ 2161.659027] Allocated by task 18550: [ 2161.659039] __kasan_kmalloc.part.0+0x53/0xc0 [ 2161.659048] kmem_cache_alloc+0xee/0x360 [ 2161.659057] __alloc_skb+0xea/0x5c0 [ 2161.659066] sk_stream_alloc_skb+0xf4/0x8a0 [ 2161.659073] tcp_sendmsg_locked+0xf11/0x2f50 [ 2161.659081] tcp_sendmsg+0x2b/0x40 [ 2161.659090] inet_sendmsg+0x15b/0x520 [ 2161.659097] sock_sendmsg+0xb7/0x100 [ 2161.659103] SyS_sendto+0x1de/0x2f0 [ 2161.659113] do_syscall_64+0x19b/0x520 [ 2161.663798] binder: 18545:18558 ioctl 40046207 0 returned -16 [ 2161.667992] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2161.667998] 0xffffffffffffffff [ 2161.668001] [ 2161.668005] Freed by task 18550: [ 2161.668013] __kasan_slab_free+0x164/0x210 [ 2161.668019] kmem_cache_free+0xd7/0x3b0 [ 2161.668028] kfree_skbmem+0x84/0x110 [ 2161.668036] tcp_remove_empty_skb+0x264/0x320 [ 2161.668043] tcp_sendmsg_locked+0x1c09/0x2f50 [ 2161.668050] tcp_sendmsg+0x2b/0x40 [ 2161.668059] inet_sendmsg+0x15b/0x520 [ 2161.668069] sock_sendmsg+0xb7/0x100 [ 2161.673803] binder_alloc: 2935: binder_alloc_buf, no vma [ 2161.676152] SyS_sendto+0x1de/0x2f0 [ 2161.676166] do_syscall_64+0x19b/0x520 [ 2161.676176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2161.676181] 0xffffffffffffffff [ 2161.676184] [ 2161.676190] The buggy address belongs to the object at ffff8881d3d81180 [ 2161.676190] which belongs to the cache skbuff_fclone_cache of size 456 [ 2161.676197] The buggy address is located 48 bytes inside of [ 2161.676197] 456-byte region [ffff8881d3d81180, ffff8881d3d81348) [ 2161.676201] The buggy address belongs to the page: [ 2161.676210] page:ffffea00074f6000 count:1 mapcount:0 mapping: (null) index:0xffff8881d3d80f00 compound_mapcount: 0 [ 2161.676223] flags: 0x4000000000010200(slab|head) [ 2161.676234] raw: 4000000000010200 0000000000000000 ffff8881d3d80f00 00000001800c000b [ 2161.676244] raw: ffffea00071c6480 0000000400000004 ffff8881dab70400 0000000000000000 [ 2161.676248] page dumped because: kasan: bad access detected [ 2161.676251] [ 2161.676255] Memory state around the buggy address: [ 2161.676262] ffff8881d3d81080: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 2161.676268] ffff8881d3d81100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2161.676277] >ffff8881d3d81180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2161.683934] binder: 18545:18559 transaction failed 29189/-3, size 0-0 line 3274 [ 2161.687744] ^ [ 2161.687752] ffff8881d3d81200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2161.687759] ffff8881d3d81280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2161.687762] ================================================================== [ 2161.687766] Disabling lock debugging due to kernel taint [ 2161.697070] Kernel panic - not syncing: panic_on_warn set ... [ 2161.697070] [ 2162.079101] CPU: 1 PID: 18550 Comm: syz-executor.1 Tainted: G B 4.14.143+ #0 [ 2162.087394] Call Trace: [ 2162.089970] dump_stack+0xca/0x134 [ 2162.093509] panic+0x1ea/0x3d3 [ 2162.096684] ? add_taint.cold+0x16/0x16 [ 2162.100642] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2162.105036] ? ___preempt_schedule+0x16/0x18 [ 2162.109438] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2162.113838] end_report+0x43/0x49 [ 2162.117273] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2162.121662] __kasan_report.cold+0xd/0x41 [ 2162.125794] ? kvm_guest_cpu_init+0x220/0x220 [ 2162.130267] ? tcp_init_tso_segs+0x19d/0x1f0 [ 2162.134665] tcp_init_tso_segs+0x19d/0x1f0 [ 2162.138889] ? tcp_tso_segs+0x7b/0x1c0 [ 2162.142758] tcp_write_xmit+0x15a/0x4730 [ 2162.146799] ? memset+0x20/0x40 [ 2162.150075] __tcp_push_pending_frames+0xa0/0x230 [ 2162.154896] tcp_send_fin+0x154/0xbc0 [ 2162.158679] tcp_shutdown+0xd5/0x100 [ 2162.162385] ? tcp_remove_empty_skb+0x320/0x320 [ 2162.167032] inet_shutdown+0x16f/0x350 [ 2162.170919] SyS_shutdown+0xe6/0x190 [ 2162.174620] ? SyS_getsockopt+0x1f0/0x1f0 [ 2162.178777] ? SyS_clock_gettime+0x7d/0xe0 [ 2162.182988] ? do_clock_gettime+0xd0/0xd0 [ 2162.187142] ? do_syscall_64+0x43/0x520 [ 2162.191093] ? SyS_getsockopt+0x1f0/0x1f0 [ 2162.195224] do_syscall_64+0x19b/0x520 [ 2162.199105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2162.204273] RIP: 0033:0x4598e9 [ 2162.207443] RSP: 002b:00007fd9f4d8ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 2162.215129] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9 [ 2162.222390] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 2162.229682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2162.236930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd9f4d8f6d4 [ 2162.244185] R13: 00000000004c8463 R14: 00000000004df000 R15: 00000000ffffffff [ 2162.252282] Kernel Offset: 0x14000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 2162.263184] Rebooting in 86400 seconds..