0527352eb026798fec2d3a8bc31d78046d576b6c06d6ef716a8fcf5c9a3cf720e2f1ffc84ad9c707ee302a6b14c43b1da65be73a4fde419bb0179bcd28c9ec6258ceabde66a81ef426e335fd4608a0a1dd5088b1576f20ce0cb21e237bc077d611fc5001089530ecf0870441cb86239b62c781597cd5399bf1afe2d0346e40dd545f9aa06f240df9bdb9d2453f5ce8f02bd9bbd4572efd018169eeacfdb2a229f3e76e3ff756b3200"], 0x1) sched_setscheduler(r8, 0x5, &(0x7f0000000200)) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x7}, 0x10) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x350) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x14, 0xd, 0xb, 0x3, 0x9, 0x9ef, 0x5, 0x0, 0x1}) 09:37:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10000000000057, r1, 0x0) fstatfs(r1, &(0x7f0000000180)=""/156) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1067.568418] binder: undelivered TRANSACTION_ERROR: 29189 09:37:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 09:37:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x39) [ 1067.691175] binder_alloc: 5501: binder_alloc_buf, no vma [ 1067.697074] binder: 5501:5503 transaction failed 29189/-3, size 0-0 line 3136 09:37:34 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0xf}, 0x8, 0x80000) r1 = geteuid() fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x80000000, 0x80000000}, {0x3, 0xffffffffffffff6c}], r1}, 0x18, 0x0) seccomp(0x1, 0x1, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x400000000000006, 0x0, 0x0, 0xffffffff}]}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) write$P9_RWALK(r2, &(0x7f0000000040)={0x16, 0x6f, 0x1, {0x1, [{0x81, 0x1, 0x5}]}}, 0x16) 09:37:34 executing program 3: prctl$PR_SET_PDEATHSIG(0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f307276d3300000002000000"], 0x14}}, 0x0) [ 1067.754235] binder: 5501:5519 got reply transaction with no transaction stack [ 1067.763944] binder: 5501:5519 transaction failed 29201/-71, size 0-0 line 2921 [ 1067.795015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2035 sclass=netlink_route_socket pig=5527 comm=syz-executor3 [ 1067.809698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2035 sclass=netlink_route_socket pig=5530 comm=syz-executor3 09:37:35 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x28) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 09:37:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff52, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:37:35 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000008, 0x11, r0, 0x4000000000000000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x12002, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r2, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x10000}, 0xc) msync(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x6) 09:37:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x7, 0x100000001, 0x101, 0x1, 0x2}, 0x14) tkill(r1, 0x1000000000016) 09:37:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = getuid() write$binfmt_elf32(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460136083306000000000000000300030009000000c4020000380000003f000000418e00008100200002000100cda700000000000003000000080000000900000002000000060000000600000007000000390000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012207cae5b96b49e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x959) write$P9_RSTATu(r2, &(0x7f0000000240)={0x97, 0x7d, 0x2, {{0x0, 0x81, 0x27e9, 0x1c03b971, {0x0, 0x2, 0x7}, 0x10040000, 0x25b0, 0x3, 0x8, 0x0, '', 0x19, '/@nodevwlan1cpusetsystem&', 0x0, '', 0x35, 'posix_acl_access\'\\vmnet1wlan1(-vmnet0trusted$self\\#{]'}, 0x1, '[', r3, r4, r5}}, 0x97) tkill(r1, 0x1000000000016) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="8cd1b1cb37ab0ce6a4f8663b65e5be482257d68494d3abdc669effe55247f0a9c297eeff23acb9ca82e88c1bca7770b6d6e9e2651d0debfae611710a42f428455c5626a237fedbc858e679c7446bc79ae37cd70f3286d481e8b0cb81f3186671c92c3654c56ed3fd1b139ab78c16dd470e6b9e166bbb5cc523d46fd879d24815fad5b02c44b40cd37abb006f9c35e54dd64b81c0afe0a8b826884d0da8f39095148ba1dfabb22406db5c692f84b4c1fd4e2bcbaa0e28840ddef223532f5d29384e9dabd30e16dfc02538cc47dd0fc0615bc19e7a6ab6dee54877cb7f9bc96d", 0xdf}, {&(0x7f0000000400)="6b5adfe746c202a0ee36fa4147fc0808656c5b54aa4f1f0366126ebe8b94e4f52e160f4094ff5b3d0de9ead58ccc09973c92375d2887ccba40b039546f83dcb43beb68d2f695c399eaf01046147359ffe9d262e55482676fe0e8ef668192e3146d2d396ae97eb448c6ff265a7531ee53ae626128ea48a59310ef29ab80e379ba3d5f91b4e406a405db0b3ec87b7fc8324542785c8683a7d433ad9e96fb4cfa0c101f53ea9bf0643840bfbd028bf93df925a6b4b22260637f5908f822e7dc7b7e8a7f4e0e3e154fce2aa543cc57680039ca4f3b4d3dad3f713a813ca357beec8596524d179f89831e2c", 0xe9}, {&(0x7f0000000500)="ea3a7bf2ffcc772bafb47c05dfe7e2d942e05179ac70946feefd8588205bab7ef7591cfbc05c2219e7bb7e622e10ece6b7f4594245e509d9fb5bdb8803da135c424572acdb107dc596617618", 0x4c}], 0x3) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000580)={@multicast1, @multicast2}, &(0x7f00000005c0)=0x241) 09:37:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000040)={0x6, 0x5}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x100000001}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) getpeername(r1, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x80) getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f00000002c0)=""/95, &(0x7f0000000340)=0x5f) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x40) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@loopback, @rand_addr="0e287c7eaa5f9f1979be345d45f84f72", @dev={0xfe, 0x80, [], 0x29}, 0x7f, 0x1f, 0x5, 0x400, 0x9, 0x100, r3}) tkill(r4, 0x1000000000016) [ 1068.491274] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.497291] binder: 5501:5568 ioctl 40046207 0 returned -16 [ 1068.506395] binder_alloc: 5501: binder_alloc_buf, no vma [ 1068.512977] binder: 5501:5519 transaction failed 29189/-3, size 0-0 line 3136 09:37:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x6) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_aout(r1, &(0x7f0000000180)={{0x107, 0x2, 0x1ff, 0x15f, 0x2ca, 0x6, 0x337, 0x81}, "e72aaf46fe9161f801c2d613a705d22c824407d0154b67154bfcd7a63bf1095111a7cbec7de5599154cf0c1a0e7e7e1f9d989e61766bd6dccc7a35545db7ae291b1b549d8b2c4796f72c977f1f22", [[]]}, 0x16e) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) prctl$PR_SET_FP_MODE(0x2d, 0x2) 09:37:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4000000000000000, @local, 0xfffffffffffffffd}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) 09:37:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prctl$PR_GET_TIMERSLACK(0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f000006b000)={{r5, r6+10000000}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 09:37:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfffffffe, @ipv4={[], [], @empty}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="ee1825e2377db21d8cc76cecb180dcadbf45119ab2a1a2a87b7277b06dd93c55032423f5bc85db446e7a6df0f53795232af0cb63f4503ebf1ed8630a646d5bbd0c5df3cd13477be74cb50f99ce18141d4742426b7e8d321ef7fbcbae5efe92c93ea6b077cfbc8bbcf6feb1ed9a477d6c3c81de0f3a8fb3a7907530b94011596cba1de1ceb26b12", 0x87, 0x40080c1, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x18}, 0x2}, 0x1c) fcntl$setown(r0, 0x8, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x2f) [ 1068.551781] binder: 5501:5519 got reply transaction with no transaction stack [ 1068.551968] binder: undelivered TRANSACTION_ERROR: 29189 [ 1068.552004] binder: undelivered TRANSACTION_ERROR: 29189 [ 1068.557246] binder: undelivered TRANSACTION_ERROR: 29201 [ 1068.576319] binder: 5501:5519 transaction failed 29201/-71, size 0-0 line 2921 [ 1068.583790] binder: undelivered TRANSACTION_ERROR: 29201 [ 1068.623932] binder_alloc: 5579: binder_alloc_buf, no vma [ 1068.630079] binder: 5579:5586 transaction failed 29189/-3, size 0-0 line 3136 [ 1068.641119] binder: send failed reply for transaction 368 to 5579:5586 [ 1068.650014] binder_alloc: binder_alloc_mmap_handler: 5579 20001000-20004000 already mapped failed -16 [ 1068.659786] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.665477] binder: 5579:5586 ioctl 40046207 0 returned -16 [ 1068.665481] binder_alloc: 5579: binder_alloc_buf, no vma [ 1068.665501] binder: 5579:5592 transaction failed 29189/-3, size 0-0 line 3136 [ 1068.665620] binder: 5579:5592 got reply transaction with no transaction stack [ 1068.665627] binder: 5579:5592 transaction failed 29201/-71, size 0-0 line 2921 [ 1068.665878] binder: undelivered TRANSACTION_ERROR: 29189 [ 1068.665901] binder: undelivered TRANSACTION_ERROR: 29190 [ 1068.671230] binder: undelivered TRANSACTION_COMPLETE [ 1068.671236] binder: undelivered TRANSACTION_ERROR: 29189 [ 1068.722856] binder: undelivered TRANSACTION_ERROR: 29201 09:37:38 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000015f1ebb161163f72feaa9e831b5b39891a040000000000000000617f11327589c505004410074fd40000000000000000401dbb4e"], 0x1) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) ptrace$cont(0x18, r0, 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000100)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x2, 0x5d4, 0x200, 0x2000000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:37:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4001, 0x0) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x1c, 0x7ff, 0x0, 0x8001, 0x7, 0x4b7, 0xfffffffffffffffe}}, 0x50) clock_adjtime(0x5, &(0x7f0000000240)={0x7, 0x6, 0x1, 0x200, 0x7, 0x5, 0x3, 0xb3b9, 0xa2, 0x3, 0x40, 0x8, 0x0, 0xa3, 0x20, 0x0, 0x80, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x1, 0x65, 0x0, 0xfff}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x82, 0x0) 09:37:38 executing program 3: r0 = inotify_init1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)='loGPL\\bdevvboxnet0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) waitid(0x2, r3, 0x0, 0x20000002, 0x0) 09:37:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0xad, @mcast1, 0x322be4f2}}, 0x0, 0x10001, 0x0, "64f0ed725ad6bdd4f2200a719ec7aaed77142d75a5e1735fdf08d0e4bfe086e98d8ad63929a24236b85cd7c0b031cda7dfb1c17c78c3299e1fbbd6de3e9d92c088d697e7ec675400b88e18b9138ba726"}, 0xd8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="00040000000000000401a7a5a9d155e48e94060104000000000819fb3d01897d093031dc213efa11de8b44993f32564436f5db4981bc0700"], 0x30) getuid() r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000013) 09:37:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x84) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/arp\x00') perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x3, 0x80000000, 0x7, 0x7, 0x0, 0x7, 0x20000, 0x7, 0x180000000000, 0x452, 0xa000000000000, 0x81, 0x85, 0x1, 0x2, 0x4, 0xe06, 0x8001, 0x0, 0x1b57, 0x8, 0x1, 0x80000001, 0x6, 0x2, 0x7, 0x4, 0x1, 0xffffffffffffffe1, 0x9, 0x6, 0x0, 0x1ff, 0x401, 0x7, 0xccf0, 0x0, 0xfffffffffffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x4400, 0xfffffffffffffffd, 0x0, 0x7, 0x80, 0xba17, 0x3f}, r1, 0x4, r2, 0x8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000240)={{0x6, 0x8, 0x0, 0x20}, 'syz0\x00', 0x47}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000200)={'rose0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="ba2ac61200e000000000005b02adc2f2", 0x10}], 0x1}, 0x0) 09:37:38 executing program 3: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz1\x00') r2 = accept(r1, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/213, 0xd5}], 0x1, &(0x7f0000000400)=""/77, 0x4d}, 0x0) pwrite64(r0, &(0x7f00000004c0)="6b9e274e5acfb34f0dbb2827d0125a4c553df9fe95c8a80452ad70e8aac786199a98ee5795a5d457dc5c86421456ae6cf502acd01b4da9a3b7b159998d0521495b0d41c295fe8cd880c16685f9142efc61ba9e559f5a6de9e47038abd15877e1581d2cb6f7cd2680b9fc546435239837fb1162dff6f2d0f9a2aa0c815700200fb476a575ae7ee6e4780560579d3e164b218525204ad1122746078d6fd60c0f62eff8d954ff57cb036ec6e84eb608c7be5463dd808316ae5bed682475d6d0ec8a2cad", 0xc2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0), 0x10) shutdown(r2, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000740)={{0x7, 0xffff, 0x3fe, 0xffffffffffff2099}, 'syz0\x00', 0x35}) write$P9_RSYMLINK(r1, &(0x7f00000007c0)={0x14, 0x11, 0x1, {0xd0, 0x0, 0x3}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RSYMLINK(r1, &(0x7f0000000800)={0x14, 0x11, 0x1, {0x4, 0x2, 0x8}}, 0x14) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000840)="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", 0x1000) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000001840)) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000001880)=""/4096, &(0x7f0000002880)=0x1000) lsetxattr$security_selinux(&(0x7f00000028c0)='\x00', &(0x7f0000002900)='security.selinux\x00', &(0x7f0000002940)='system_u:object_r:setrans_var_run_t:s0\x00', 0x27, 0x3) keyctl$session_to_parent(0x12) r4 = getegid() r5 = geteuid() stat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000002980)='f2fs\x00', &(0x7f00000029c0)='./file0\x00', 0x8, 0x7, &(0x7f0000002dc0)=[{&(0x7f0000002a00)="e243da46ed62f14e2e69212b56eca5b249f780d5a0ce98aa234cf630cbb8298eafae631248f2d63598b94edcb9f813a3f8644ccb42a03aa3125c2f4f54eeb09f82678cf735fd0e16b16489a0e2f72a476e2e7e4c93365264fa733bff27895a836de0d67c21b8b891923e26add42c0cc8e33ba6a78850e70957f6c82386fcc01b387d16ca7839832491c6b5e157a46e22a4bc561e9c827ec2d2", 0x99, 0x9}, {&(0x7f0000002ac0)="e765f920ee1e0d881a52c14d70a25ca34db0e8b71afb7fad1aa7bb851225a99521dc291c0af0e7465cb9c333d3574b40f3a35cc16b0d01fbfa6e98f76ec953e5d394ad62fbaac9c4c39fbb85b3a21d37a174bbb7b1a372c8498b3885af64716bc2f20c5f7dff68bd658e26000f911074d6a9be78b660aa4523e0f7e769ca9a11d4eb", 0x82, 0x6}, {&(0x7f0000002b80)="70137c90cbe9cbe985a21df8246f3b51f470fc499779e97327d6349975da8d957d74f9bda6ce9122297528e7c4c3ea0500b840a3e9c11e9df2ce5466e89f0b65fb501bd5272c5f2016b054793b84991ba6ad5f354c1bf714a3d35d53b3f5ec4237e1ebdacf85cfcdc8f8653b54370c4b3e5a4ac42ad63a707066f8d20b320d40f2e1d0ff", 0x84, 0x4}, {&(0x7f0000002c40)="5899fc3c4c01ecf137542e94be8370630ca6a4c009aa82cf8d4436bb71c53afad4fd3354ab97fe7d4055afe8adfe834ef910e0fe46f83721dd2d3499dfdb08da9bcfb33904e3e61214bccd", 0x4b, 0x63d5}, {&(0x7f0000002cc0)="087aca465e58d8696498700f30c0eb3673c7271f7e8f85ba00163bf019ea74a1f4512be7c833e33bca95c94f5b4176d8e184d08a1043c1", 0x37, 0x7a21}, {&(0x7f0000002d00)="c1815ac807f7cc658c3fb2ff85dc4e35a60d40b0d4fd70628ad813f254272b0e2c489c0b151dc86f22ff93c2585b2c1cd4feb6dc0e8329f8474f701c536983675849f0135b606f15fd8d560749728636d98b6f07375abf2d62496ae970d4df3c41ee714568efbcf92e25702d807bf20959599be0e029269904112b8e7b72aec0", 0x80, 0x8}, {&(0x7f0000002d80)="f8b3f4b0fbb6d2cd08cc4e5f6f398790b2345721c51a60795621ae7853a5031d20d178d2b38a02121358", 0x2a, 0x48}], 0x1800000, &(0x7f0000002f40)={[{@noquota='noquota'}, {@disable_ext_identify='disable_ext_identify'}, {@grpjquota={'grpjquota', 0x3d, 'system\\'}}, {@disable_roll_forward='disable_roll_forward'}, {@acl='acl'}, {@adaptive_mode='mode=adaptive'}, {@resgid={'resgid', 0x3d, r4}}, {@jqfmt_vfsv1='jqfmt=vfsv1'}], [{@obj_user={'obj_user'}}, {@uid_lt={'uid<', r5}}, {@dont_measure='dont_measure'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_gt={'uid>', r6}}]}) getpeername$packet(r1, &(0x7f0000003040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003080)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000030c0)={@mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="81165a927526c3351e36d24b0e95d8c7", 0x7, 0xb177, 0x4, 0x500, 0x6, 0x200, r7}) lstat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)) write$P9_RMKNOD(r1, &(0x7f0000003200)={0x14, 0x13, 0x2, {0x4, 0x1, 0x6}}, 0x14) write$P9_RCREATE(r1, &(0x7f0000003240)={0x18, 0x73, 0x2, {{0x44, 0x1, 0x7}, 0x7ff}}, 0x18) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000003280)={@dev={0xfe, 0x80, [], 0x29}, @mcast1, @mcast1, 0x3, 0x6, 0x5e6f, 0x0, 0x1765, 0x80240200, r7}) [ 1071.347827] binder_alloc: 5596: binder_alloc_buf, no vma [ 1071.356123] binder: 5596:5604 transaction failed 29189/-3, size 0-0 line 3136 [ 1071.363787] binder: send failed reply for transaction 373 to 5596:5604 [ 1071.374729] binder_alloc: binder_alloc_mmap_handler: 5596 20001000-20004000 already mapped failed -16 [ 1071.384314] binder: BINDER_SET_CONTEXT_MGR already set [ 1071.390014] binder: 5596:5604 ioctl 40046207 0 returned -16 [ 1071.395850] binder_alloc: 5596: binder_alloc_buf, no vma [ 1071.395872] binder: 5596:5616 transaction failed 29189/-3, size 0-0 line 3136 [ 1071.399929] binder: 5596:5619 got reply transaction with no transaction stack [ 1071.399937] binder: 5596:5619 transaction failed 29201/-71, size 0-0 line 2921 [ 1071.400212] binder: undelivered TRANSACTION_ERROR: 29189 [ 1071.400232] binder: undelivered TRANSACTION_ERROR: 29190 [ 1071.402551] binder: undelivered TRANSACTION_COMPLETE 09:37:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0xa40c, 0x3, 0x9, 0x0, 0x0, 0x80000001, 0x8000, 0x3, 0x1, 0x1, 0x2b, 0x24, 0xe8, 0x4, 0x8001, 0x38a, 0x3f, 0x4, 0x1, 0x6, 0x7de7, 0xcadf, 0x3, 0x3ff, 0x1, 0x1, 0x200, 0x60a83417, 0x0, 0x4, 0xfffffffffffffff9, 0x4, 0x7f, 0x0, 0x3, 0x4, 0x0, 0x3, 0x3, @perf_bp={&(0x7f00000001c0), 0x3}, 0x2, 0x6, 0x81, 0x4, 0xfebf, 0x101, 0x2000000000009}, r2, 0x9, r1, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x24) [ 1071.402557] binder: undelivered TRANSACTION_ERROR: 29189 [ 1071.415733] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1071.415739] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1071.415838] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1071.415842] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1071.415879] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1071.415883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 09:37:38 executing program 5: r0 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63f200"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r1 = mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x10810, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x850, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x10c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x3e}], &(0x7f0000000100)=[0x38, 0x40, 0x68]}, 0x3}}, @free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r2}, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {{0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=[0x78, 0x48, 0x48]}}}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x48, 0x50, &(0x7f00000002c0)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x1}, @flat={0x776a2a85, 0xb, r3, 0x4}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000500)=[0x78, 0x58, 0x38, 0x0, 0x40, 0x38, 0x40, 0x38, 0x28, 0x38]}, 0xffffffffffffff81}}, @decrefs={0x40046307, 0x4}], 0x4f, 0x0, &(0x7f0000000580)="ea2b19d3fed71d9f168c6678903482fb38b0d15cb649107ae878e2bb9e3124d04bc48c138a6e49941c2965869b5a459bdfb763eec948de62959eb5b61bd08c5f99e6e2dceed1df9c3837cb0f3e36c2"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) 09:37:38 executing program 3: readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/168, 0xa8) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) accept4(r0, &(0x7f0000000300)=@ll, &(0x7f0000000380)=0x80, 0x800) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="800000000100000019000300e60100006c000000000000000300000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) accept4(r1, &(0x7f0000000040)=@ax25={{}, [@bcast, @remote, @rose, @null, @rose, @bcast, @remote, @rose]}, &(0x7f0000000100)=0x80, 0x80000) [ 1071.415890] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1071.415894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1071.513061] binder: undelivered TRANSACTION_ERROR: 29201 09:37:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:37:38 executing program 5: r0 = socket(0x13, 0x0, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000a40)="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", 0x1000) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1071.593192] EXT4-fs (loop3): bad block size 8192 [ 1071.613429] binder: 5647:5648 unknown command 0 [ 1071.618145] binder: 5647:5648 ioctl c0306201 20000140 returned -22 [ 1071.625384] binder: 5647:5648 got reply transaction with no transaction stack [ 1071.632863] binder: 5647:5648 transaction failed 29201/-71, size 0-0 line 2921 [ 1071.649506] binder_alloc: binder_alloc_mmap_handler: 5647 20001000-20004000 already mapped failed -16 [ 1071.661855] binder: BINDER_SET_CONTEXT_MGR already set [ 1071.667836] binder: 5647:5648 ioctl 40046207 0 returned -16 [ 1071.673949] binder_alloc: 5647: binder_alloc_buf, no vma [ 1071.673960] binder: 5647:5652 transaction failed 29189/-3, size 0-0 line 3136 [ 1071.674356] binder: 5647:5659 got reply transaction with no transaction stack [ 1071.674380] binder: 5647:5659 transaction failed 29201/-71, size 0-0 line 2921 [ 1071.674612] binder: undelivered TRANSACTION_ERROR: 29189 [ 1071.674632] binder: undelivered TRANSACTION_ERROR: 29201 [ 1071.674648] binder: send failed reply for transaction 378 to 5647:5648 [ 1071.679468] binder: undelivered TRANSACTION_COMPLETE [ 1071.679475] binder: undelivered TRANSACTION_ERROR: 29189 [ 1071.731022] binder: undelivered TRANSACTION_ERROR: 29201 09:37:41 executing program 2: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000080)='./file0\x00'}, 0x10) r0 = dup(0xffffffffffffff9c) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000a40)={'icmp6\x00\x02\x00'}, &(0x7f0000000a80)=0x72) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000800)={@rand_addr="06c20e1892540f0ad4aaf9dc303638f8", @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x71e, 0x8001, 0xffff, 0x400, 0xff, 0x80000, r1}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000002c0)={0xb193, 0x0, 0x1, 0x9, 0x6, 0xe4}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @multicast1}}, 0x80000001, 0x2, 0x5, "c5c5153dd749aeb6db9b536ac6efb4882f7fddc443ce2d985cf79f48c21c3e0b6e7f8a06ed0cddfa3d4cc53b562eafc2a921de2bd1fb0e636971002b64bceb286364657595a20c224b9cfc7483989c0c"}, 0xd8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000000c0)=ANY=[]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) exit(0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000ac0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000b00)='TRUE', 0x4, 0x3) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000004c0)={'filter\x00'}, &(0x7f0000000240)=0x78) open(&(0x7f0000000300)='./file0\x00', 0x200501, 0x20) 09:37:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000106}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x808, 0x70bd2c, 0x25dfdbff, {0x0, r3, {0xfff3, 0xffff}, {0xffff, 0xe}, {0xf, 0xffff}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000280)='rose0\x00', 0x100000000, 0x6, 0x3}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prctl$PR_GET_TIMERSLACK(0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f000006b000)={{r5, r6+10000000}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 09:37:41 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x80, 0x3, 0x4}, 0x2400}}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:37:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000180)=""/131) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) socket(0x9, 0x1, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') 09:37:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x896f, &(0x7f0000000040)={'vcan0\x00', @ifru_flags=0x1000}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 09:37:41 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000014c0)=""/148, 0x94}], 0x1, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x1c, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=""/28}, &(0x7f0000000180)=0x78) write$P9_RSETATTR(r0, &(0x7f0000000200)={0x7, 0x1b, 0x1}, 0x7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000001580)="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"}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_triestat\x00') sendfile(r1, r0, &(0x7f00000001c0)=0x25, 0x4) preadv(r1, &(0x7f0000000480), 0x1000000000000268, 0x0) [ 1074.370440] binder_alloc: 5673: binder_alloc_buf, no vma [ 1074.376941] binder: 5673:5680 transaction failed 29189/-3, size 0-0 line 3136 [ 1074.384357] binder: send failed reply for transaction 383 to 5673:5680 [ 1074.402220] binder_alloc: binder_alloc_mmap_handler: 5673 20001000-20004000 already mapped failed -16 [ 1074.411992] binder_alloc: 5673: binder_alloc_buf, no vma 09:37:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x40000000007fa, 0xffffffffffffffff) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x5) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000580)=0x7, 0x4) setresgid(r2, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in=@dev, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8) r5 = dup(r1) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000480)) ioctl$TCSETA(r3, 0x5406, &(0x7f00000004c0)={0x8, 0x8, 0x3, 0x1, 0x16, 0x2, 0x1, 0x326, 0x7fffffff, 0x81}) times(&(0x7f0000000600)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000140)=0xe8) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @random="08b2b2e6f432"}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000200)={0x0, 'gretap0\x00', 0x4}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xfdb) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execve(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 09:37:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c) r1 = gettid() syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000001c0)={0x0, @aes128, 0x3, "1c9dc989a33e316e"}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40602, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000100)) tkill(r1, 0x1000000000016) [ 1074.414632] binder: BINDER_SET_CONTEXT_MGR already set [ 1074.414641] binder: 5673:5680 ioctl 40046207 0 returned -16 [ 1074.434223] binder: 5673:5689 transaction failed 29189/-3, size 0-0 line 3136 [ 1074.452246] binder: 5673:5689 got reply transaction with no transaction stack 09:37:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09d43352"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) [ 1074.469106] binder: 5673:5689 transaction failed 29201/-71, size 0-0 line 2921 [ 1074.483228] binder: undelivered TRANSACTION_ERROR: 29189 [ 1074.488960] binder: undelivered TRANSACTION_ERROR: 29201 [ 1074.505698] binder: undelivered TRANSACTION_ERROR: 29190 [ 1074.511596] binder: undelivered TRANSACTION_COMPLETE 09:37:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8000, 0x0) write$nbd(r3, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x2, 0x1, "53210980ba4c5b7392fa6cc1d538c84534ed77a6588dee6f7ff9aa20ae70df68ac82fc329083b4bd6de561dd992422869cce933cd0449d7e08cfad7e0de159a37e0b3f9cfeb5f2978366a00d37f9e86aa53358811c6be1e24d514135eaca434bf8d3965eec29d38c9529fe8ab9f3193161ffb00a47d9b88eecbe9c0ce3ec3451e342bd7c79b1f7c60602e1c84bb550960c1de6ff5f05fdfe9d175a44da97489a18dae71d79304cb72d602bd9c0b01edc8f3a55c2e83f56d672892bfb43d7457904260f8586cb84334d7e28aeef0e203b91f037333f4b48f72d74c360f5"}, 0xed) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:37:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1074.521665] binder: undelivered TRANSACTION_ERROR: 29189 [ 1074.569484] binder: 5726:5732 unknown command 1379128329 [ 1074.578312] binder: 5726:5732 ioctl c0306201 20000140 returned -22 [ 1074.590874] binder: 5726:5732 got reply transaction with no transaction stack [ 1074.598437] binder: 5726:5732 transaction failed 29201/-71, size 0-0 line 2921 [ 1074.608487] binder_alloc: binder_alloc_mmap_handler: 5726 20001000-20004000 already mapped failed -16 [ 1074.618030] binder: BINDER_SET_CONTEXT_MGR already set [ 1074.618039] binder_alloc: 5726: binder_alloc_buf, no vma [ 1074.618054] binder: 5726:5738 transaction failed 29189/-3, size 0-0 line 3136 [ 1074.618294] binder: 5726:5738 unknown command 1379128329 [ 1074.618302] binder: 5726:5738 ioctl c0306201 20000140 returned -22 [ 1074.618341] binder: 5726:5740 got reply transaction with no transaction stack [ 1074.618350] binder: 5726:5740 transaction failed 29201/-71, size 0-0 line 2921 [ 1074.667734] binder: 5726:5732 ioctl 40046207 0 returned -16 [ 1074.671941] binder: undelivered TRANSACTION_ERROR: 29189 [ 1074.671964] binder: undelivered TRANSACTION_ERROR: 29201 [ 1074.671981] binder: send failed reply for transaction 388 to 5726:5732 [ 1074.673568] binder: undelivered TRANSACTION_COMPLETE [ 1074.673574] binder: undelivered TRANSACTION_ERROR: 29189 [ 1074.702534] binder: undelivered TRANSACTION_ERROR: 29201 09:37:44 executing program 3: chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x1, 0x3, 0x0, 0x80, 0x0, 0x80000000, 0x0, 0x8, 0x4, 0x7ff, 0x4, 0xfffffffffffffe00, 0x200, 0x9, 0x3f, 0x81, 0xfff, 0x6, 0x0, 0x4f, 0x1, 0x80000000, 0x5, 0x0, 0x1, 0x3, 0x1, 0x3, 0x9, 0x9, 0x5, 0x93, 0x4b, 0x40, 0xfffffffffffffffa, 0x2, 0x0, 0x3, 0x4, @perf_config_ext={0x2, 0x2}, 0x100, 0x1f, 0x9, 0x8, 0x8, 0x8, 0x5}, r3, 0xf, 0xffffffffffffffff, 0x8) accept(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0) accept$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x1c, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000002840)='/dev/rtc#\x00', 0x5, 0x2000) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00', 0x240800, 0x15e) accept(0xffffffffffffff9c, &(0x7f0000002900)=@rc, &(0x7f0000002980)=0x80) eventfd2(0xdb5, 0x0) socket$packet(0x11, 0x3, 0x300) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f0000000080)=[{0x7, 0x4, 0x7, 0x6}, {0xff, 0x5, 0x101, 0x1f}, {0x6, 0x6, 0x4, 0x6}, {0x5, 0x56, 0x5, 0x5}, {0x3ff, 0xfffffffffffff001, 0xf7}]}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffff9c, &(0x7f00000029c0)={0x3f}, 0x8, 0x80800) 09:37:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:44 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair(0xf, 0x5, 0xffffffffffffff92, &(0x7f00000060c0)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000006140)=@nfc_llcp, &(0x7f00000061c0)=0x80, 0x800) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000006200)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f000000b1c0)={0x77359400}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xb6) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 09:37:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x5, &(0x7f0000000400)=[{&(0x7f00000001c0)="6025b542461990aeeca3c54c43fc585176d94a3ecb8ffeeceb6af566eca7fe8fb028cd59c77917083b912c840b61b0edd0915394a844e341d52ee2b9b8c2b570acd91a14c4d82d10b8f6d2abc02573944e26f5d00418a32e80886c1211a4c914bd80e6bb0f761e0f6178aa4904a3944bae919aec30cea1cf08a6e981c476fc01ecf140cc7f00eb3e5de05d1a81d7068bb4affc788503b9c850db8fec5440393b32cfc710a53648ec034a937f16eba24edd17e958dd0865843ccffd5c97250f9b4075442eee9466f090784028c1120b1e4c0478c4944ec6ee91ae5ecc3bcfcd22e5", 0xe1, 0x800}, {&(0x7f00000002c0)="e97daed428605321088ae6aa15a2493d2c614c130fb8484b82ac64a901c469ab23175e69a048f5c32745b1ec8ef671418a9b4bd871ea6cc70d1d1e4a6c6ba1bd58d06b14d015bacafe273e9ce5ac2754bd0a51adbaed84af1617fd8fa0e576a307f988317f0ee8ed969f562e11425db81def9e6bfb1cf9eae8da37da4774591e9fab33783dbba61882624d87d98f2e8db79bb0fdd0ef1aac87c05e877a9b8621381d4ffbf9cfc7263c130c4b26efe31319bb3182c0", 0xb5, 0x8000}, {&(0x7f0000000100)='9', 0x1, 0x3}, {&(0x7f0000000380)="42b80c6a3811b25dec84caca755df5915213f530901ebd938b0e1b", 0x1b, 0x200}, {&(0x7f00000003c0)="60e0fde718599049d8305aea8f0e124113ae87368603b8fa86538b8c6613f6a0ff34d7d744f8a0925812a7353dd00e", 0x2f, 0xffffffff80000000}], 0x2000008, &(0x7f0000000480)=ANY=[@ANYBLOB='nodots,obj_user=#em0ppp0*(\x00']) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x9, 0x1, @loopback, 0x8}, 0x1c) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100000000, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() r2 = dup(0xffffffffffffffff) write$selinux_validatetrans(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6170745f6c6f636b5f743a73302073797374656d5f753a6f626a6563745f723a73657472616e735f0500000000000000743a7330203030303030303030303030303030303030303034202f7573722f7362696e2f637570736400"], 0x6c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffc88, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000440)=0x44) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x3, 0x26, [], 0x5, &(0x7f0000000280)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/38}, &(0x7f0000000380)=0x78) listen(0xffffffffffffffff, 0x222111ca) 09:37:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x2}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000018) [ 1077.384200] FAT-fs (loop0): Unrecognized mount option "obj_user=#em0ppp0*(" or missing value [ 1077.384447] binder: 5757:5763 unknown command 4 [ 1077.384455] binder: 5757:5763 ioctl c0306201 20000440 returned -22 [ 1077.449481] binder: 5757:5768 got reply transaction with no transaction stack [ 1077.457067] binder: 5757:5768 transaction failed 29201/-71, size 0-0 line 2921 09:37:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x008\xa1\xce\x8c\xf10\x919\x86\t\xe5sx5\xfe|6\xe4\xf5w\x97i\x15\x901\x16\x9c\xde\x12m\x9d\x95\xe6\xf4\x17\xaf\x868\xa0\xb0\xfb\xdc$\x1e\xf6\xa1\x9b\xedV3\xa9_\x84kc\nz\xe9\xf3\x01B;\x9f\x04U\x1d\x05\x91*\x19\x976j\xacEu\xb1\xde\xcfk|*X;\xad\x9d\xe1\'\xdei\x15\xa6\xe8\x9d\xe3\xcf\xa3\xa5Tmw\xe0\a\fL~\x0f\xae\xd2:ny\xdfC\x0f8\xb6\r\xea\xc7<\x83\x99\x86\x90s\x8c}I1x\x1dp\x01\a/P\xcb\x11\xe6e\x0f\x12C\x03\xa1\xb0g\x0f\x82\xe5\x90\xd4\xbd9\xf0b\x94\x88\xe5\xdb\x9a\xfb\xca?=M\xcf\x89\x82V\xc7\x92@\xcc\xfe\xad-a\x9dU\xa7mU#,\x0e\v\x89%\x8d\xfd\x1e6\x80so\vw,\x8e\x96\xdd\vH\xe8\xfb\xe5\xb4\x11\x840\xc5\x85\x9ex\x9e1\x13Cx\xc5\r|-\x9a;Y\xfb\x9b\x00F\xb0Ztj:\x0fA\x8a\x92\xff\xd5Rl\a\x05\xc2Q\xce|\n\xd5\xeb/\xe1\xc6q.d\x8c\x9e\xef-\xdc\x80\xd3_\xf5\xdb\xa8\x98%\xe8\a\xec\x17\xb4\x91@@d(Atz\xe7\xad\x17OQ\b\x92\xbd4\xa6\x87\x05\xe8\xb3+\xbf\xc8\xe2\x8aK\xc1\xc3\xb7@\x8cr\x98\x89f\xf4]t\x82H6W\x13\x85\x82\x19\x81\xf6A\x1d \xd4\xb5\xediK\x8d\x1cy\x87h\xebn\xcb4\xf1\xfek\x1fd\xcaMr\xc3\xd4\xc1\xad\x8a\xffD\xad\xa8\f\x11\xdc8\xf6K\xa0\x15\xa0\v\xf1\x9eX\x8a\xb3\xa6\x19\xb3\xb2\xd6\x9d\xc6ce\xefO^\xb9\xbfP-\xe0\xa5x\xc1\x89&]\xb2z\xdb\xb3\x7f\x01\x80\x8c=D\x16\x87\"\xebH\bA\x85\xd2E\xaay!\x00\v<\x8e\xf5C\xbe\x8c\x9e\x10p\xa1\xec\xb8\xd5\x81\aOC\r\xd7\x80\x19\xe7=\xdcF\x1c\x19\xe3\xddp\x9e\xcd#\xf7\r\x82\x82\xa7\xd89\t\x831\x17\",\x9eX\x0e\x06\xb1r\xee\xf7\x89\x9al%!\xbb\xd9\xc2\xf1\xa5N\xde\xd0\x80-s8\"[A\"L\x01\x00\xbe\x19\x85\xa7G\x1bs\x9e\xa0\xf6\xa7]l)\xc3\x17\x8a\xe1\xc3\x96\x7f.\x11\xb2T\xc8S=\xe1\xbe.\v\xcc\x16&\x12\x1er\x1f;\x86bw\xa5\x1a\x0f0\x1c\"\xedVK\xf6\xe9E\xe1\xbe\x8c\xa7\xeb\xe9\x7f\xd67\xb0\xa7\\\xe8\xb4@^~\xa3y.@${\x97\x85\x96\xfa\x8c-\xaa\xd0I\x84\xfe\x8ff\xec\xb8\xb5\x8a\xe9E\x1e') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x50) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) getpid() ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) getsockname$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @remote, 0x229}, 0x1c) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000240)=0x3) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 09:37:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) [ 1077.616848] FAT-fs (loop0): Unrecognized mount option "obj_user=#em0ppp0*(" or missing value 09:37:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x101, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x400, @local, 0x3}, {0xa, 0x4e23, 0x3, @remote}, 0x3, [0xffffffffffffffc1, 0x8001, 0x3, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffffc]}, 0x5c) memfd_create(&(0x7f0000000040)='\x00', 0x5) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40) write$9p(r2, &(0x7f0000000340)="cd76d81115ef0c3bc08ebd5b2e249bd74720db22d778b67efb61854c2729eca14dfdd83c97625f6db6935d4732de468a18df19c1cebb84af34315ec25e84e0194ad1ece1f2", 0x45) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00000001c0)=""/239, &(0x7f0000000000)=0xef) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @loopback}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', r3}) tkill(r1, 0x1000000000016) 09:37:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = dup2(r0, r0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000002c0)={0xffff}, &(0x7f0000000300), &(0x7f00000003c0)={r5, r6+30000000}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x9, 0x8, 0xca90, 0x1, 0x30, r4, 0xc2f}, 0x2c) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000100)={0x12, 0x51, &(0x7f00000001c0)="0ac4619179ca1e8bc1a4b9e64fa18c337fcc3ef9c450aaad5ead79cd74e77292dfdc0990ba7f1aec35b1573a026de131a593e127c95aa5b0b7a12eceb09e4b95fccb2fdbd17667985cad8aa40d60eca2ed"}) tkill(r3, 0x1000000000016) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x3, 0x3, 0xabdb, 0x4, r3}) 09:37:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0xffffffffffffff18) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ptrace(0x4207, r1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x604000, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x401, {0xc84, 0x6, 0x3fe0, 0x5, 0x5a8, 0x5}}) tkill(r1, 0x1000000000016) 09:37:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x008\xa1\xce\x8c\xf10\x919\x86\t\xe5sx5\xfe|6\xe4\xf5w\x97i\x15\x901\x16\x9c\xde\x12m\x9d\x95\xe6\xf4\x17\xaf\x868\xa0\xb0\xfb\xdc$\x1e\xf6\xa1\x9b\xedV3\xa9_\x84kc\nz\xe9\xf3\x01B;\x9f\x04U\x1d\x05\x91*\x19\x976j\xacEu\xb1\xde\xcfk|*X;\xad\x9d\xe1\'\xdei\x15\xa6\xe8\x9d\xe3\xcf\xa3\xa5Tmw\xe0\a\fL~\x0f\xae\xd2:ny\xdfC\x0f8\xb6\r\xea\xc7<\x83\x99\x86\x90s\x8c}I1x\x1dp\x01\a/P\xcb\x11\xe6e\x0f\x12C\x03\xa1\xb0g\x0f\x82\xe5\x90\xd4\xbd9\xf0b\x94\x88\xe5\xdb\x9a\xfb\xca?=M\xcf\x89\x82V\xc7\x92@\xcc\xfe\xad-a\x9dU\xa7mU#,\x0e\v\x89%\x8d\xfd\x1e6\x80so\vw,\x8e\x96\xdd\vH\xe8\xfb\xe5\xb4\x11\x840\xc5\x85\x9ex\x9e1\x13Cx\xc5\r|-\x9a;Y\xfb\x9b\x00F\xb0Ztj:\x0fA\x8a\x92\xff\xd5Rl\a\x05\xc2Q\xce|\n\xd5\xeb/\xe1\xc6q.d\x8c\x9e\xef-\xdc\x80\xd3_\xf5\xdb\xa8\x98%\xe8\a\xec\x17\xb4\x91@@d(Atz\xe7\xad\x17OQ\b\x92\xbd4\xa6\x87\x05\xe8\xb3+\xbf\xc8\xe2\x8aK\xc1\xc3\xb7@\x8cr\x98\x89f\xf4]t\x82H6W\x13\x85\x82\x19\x81\xf6A\x1d \xd4\xb5\xediK\x8d\x1cy\x87h\xebn\xcb4\xf1\xfek\x1fd\xcaMr\xc3\xd4\xc1\xad\x8a\xffD\xad\xa8\f\x11\xdc8\xf6K\xa0\x15\xa0\v\xf1\x9eX\x8a\xb3\xa6\x19\xb3\xb2\xd6\x9d\xc6ce\xefO^\xb9\xbfP-\xe0\xa5x\xc1\x89&]\xb2z\xdb\xb3\x7f\x01\x80\x8c=D\x16\x87\"\xebH\bA\x85\xd2E\xaay!\x00\v<\x8e\xf5C\xbe\x8c\x9e\x10p\xa1\xec\xb8\xd5\x81\aOC\r\xd7\x80\x19\xe7=\xdcF\x1c\x19\xe3\xddp\x9e\xcd#\xf7\r\x82\x82\xa7\xd89\t\x831\x17\",\x9eX\x0e\x06\xb1r\xee\xf7\x89\x9al%!\xbb\xd9\xc2\xf1\xa5N\xde\xd0\x80-s8\"[A\"L\x01\x00\xbe\x19\x85\xa7G\x1bs\x9e\xa0\xf6\xa7]l)\xc3\x17\x8a\xe1\xc3\x96\x7f.\x11\xb2T\xc8S=\xe1\xbe.\v\xcc\x16&\x12\x1er\x1f;\x86bw\xa5\x1a\x0f0\x1c\"\xedVK\xf6\xe9E\xe1\xbe\x8c\xa7\xeb\xe9\x7f\xd67\xb0\xa7\\\xe8\xb4@^~\xa3y.@${\x97\x85\x96\xfa\x8c-\xaa\xd0I\x84\xfe\x8ff\xec\xb8\xb5\x8a\xe9E\x1e') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x50) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) getpid() ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) getsockname$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @remote, 0x229}, 0x1c) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000240)=0x3) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r1, 0x1) [ 1078.193495] binder_alloc: binder_alloc_mmap_handler: 5757 20001000-20004000 already mapped failed -16 [ 1078.217019] binder: BINDER_SET_CONTEXT_MGR already set [ 1078.222382] binder: 5757:5813 ioctl 40046207 0 returned -16 [ 1078.237799] binder: 5757:5768 unknown command 6 [ 1078.242518] binder: 5757:5768 ioctl c0306201 20000440 returned -22 [ 1078.283821] binder: 5757:5768 got reply transaction with no transaction stack [ 1078.284101] binder: undelivered TRANSACTION_ERROR: 29201 [ 1078.303766] binder: 5757:5768 transaction failed 29201/-71, size 0-0 line 2921 [ 1078.314222] binder: undelivered TRANSACTION_ERROR: 29201 09:37:45 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x2100, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000380)=""/234) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair(0x0, 0x1, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/185, 0xb9}], 0x3) getsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @rand_addr, @empty}, &(0x7f0000000080)=0xc) mremap(&(0x7f0000a0e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 09:37:45 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140)) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) ioctl$sock_ifreq(r0, 0x8939, &(0x7f0000000180)={'veth1\x00', @ifru_names='ip6_vti0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'team0\x00', 0x2}, 0x18) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/121) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) 09:37:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @empty, 0x4e21, 0x6, 'ovf\x00', 0x8, 0x7, 0x39}, {@empty, 0x4e24, 0x1, 0x44, 0xe90, 0xffffffffffff7fff}}, 0x44) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x10e6) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:37:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0xffffffffffffff18) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ptrace(0x4207, r1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x604000, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x401, {0xc84, 0x6, 0x3fe0, 0x5, 0x5a8, 0x5}}) tkill(r1, 0x1000000000016) 09:37:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) timer_create(0x0, &(0x7f0000000040)={0x0, 0x10, 0x6, @thr={&(0x7f00000001c0)="97ddc16372e448af399cb91cd8700d3620b82bbb114aaaf095cc76b4ee8bd99858577697b9d39de277fbea8379b2ce9d7aa42ebb10f6be17afa0996656ecfa251bfe763842e844338105e395928a45e2c86ee66338736f19ba4bf46be565067a926de0a529c9b9f4f5728fde69066af3750b36860503d485514667a1b5408125973a5aadfd50c83217c36c67fde939228f2c56c1ab03a3512c594dd03fb094105b6588b1f90ce804b962dc459fc7b3987fa04a031396532a4e334ce89a621f7e8f7739943b53f1e0", &(0x7f0000000000)="c0"}}, &(0x7f0000000100)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fs\x00\x00'], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:45 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) fallocate(r0, 0x20, 0x3, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='loginuid\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r2) pread64(r1, 0x0, 0x0, 0x0) 09:37:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x199) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000200)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) r3 = fcntl$getown(r2, 0x9) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000280)={'dummy0\x00', {0x2, 0x4e20, @empty}}) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x2, 0x7fff, 0x3, 0xfffffffffffffffd, 0x0, 0x8, 0x80, 0xc, 0x10000, 0x7fff, 0x8, 0x2, 0xbf9, 0x6, 0x0, 0x1, 0x81, 0x7, 0x3, 0x101, 0x2800000, 0x7, 0x100, 0x10000, 0x7, 0x1f, 0x1, 0xffffffff, 0x5, 0x2036, 0x0, 0x800, 0x3, 0xfff, 0x0, 0x80000000, 0x0, 0x4, 0x0, @perf_config_ext={0x80000001}, 0x1000, 0x2, 0x80000000, 0x0, 0xda5, 0x2, 0xffffffff}, r3, 0x9, r1, 0x1) write$P9_RUNLINKAT(r2, &(0x7f00000002c0)={0x7, 0x4d, 0x2}, 0x7) dup3(r1, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@md5={0x1, "95270304aea50471223f35684f0fdaf2"}, 0x11, 0x2) 09:37:45 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x802c2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f752c6465636f6e66696e65645f752c0006d0f6b3923a8330410489e3f142befd0ad8550d631ea90000000000000000000000000000000000"]) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1078.496191] binder: 5834:5838 unknown command 29452 [ 1078.503268] binder: 5834:5838 ioctl c0306201 20000140 returned -22 [ 1078.511037] binder: 5834:5838 got reply transaction with no transaction stack [ 1078.522127] binder: 5834:5838 transaction failed 29201/-71, size 0-0 line 2921 [ 1078.536214] binder_alloc: binder_alloc_mmap_handler: 5834 20001000-20004000 already mapped failed -16 09:37:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$getown(r2, 0x9) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = socket$packet(0x11, 0x6, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000040), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="0201000010000000001c0000000000000800130000000300000000000000000006000000000000000000800000000000e00000010000000000000000000000000000000000000000000000000000170003000600000000000200000490cf7ced000000000000000003000500000000000200423b1d632b010020000000000000"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x400000000000117, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000008a80)={0x0, @loopback, @remote}, &(0x7f0000008ac0)=0xc) sendmmsg(r3, &(0x7f000000c940)=[{{&(0x7f0000000080)=@rc={0x1f, {0xfffffffffffffffc, 0x1, 0xe27, 0x4, 0xfff, 0x9}, 0x7ff}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000680)="970d7812f03b7b44ce83d3f04cd00b883faa5b40ba2f8a1fe91f13eb66b2732b2612a32539c08ae6c4b75cce9a4c96d0ee39a149f9c30f714f31fa178ef53898955dbc245733038317d6db823b48a7188441698250965bd165c94990261d976e461630a482621295de38daef659aabb1e07a4e8de7050ece1bab8eac48b381e12ce2da8453ee0ee93503eb24507bc449316f4cdf84b99a732ef15395f133", 0x9e}, {&(0x7f0000000100)="63978f703577a08a7bc5eba6abf774814c7bd0d79d4b84ee72d46058dd52082a09e7b45c57f9cc1ab005ac014c4c2fc98120849756b0e422aa202ccc5a6cb287553b4325532408f1c548378bc37d4bb37cb5ac8ce7a5290d", 0x58}], 0x2, &(0x7f0000000c40)=[{0x1010, 0x102, 0x7f, "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"}], 0x1010}, 0x100}, {{&(0x7f0000000500)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x80, &(0x7f000000cb80)=[{&(0x7f0000000300)='L)', 0x2}, {&(0x7f0000000740)="46dc3f96ca05dcb9e1a4f7c7bafdbac0faeed2227540fe807d9a7aa2cf72916d825ed81bc75499af772365b1a8508fa94f13ba72985c084a97ec9451b6cec2d392b1f2a0c49d616d08c81476780d7a26327d0bd70d8b31fff2623ec404d8d7962cf600b8288f99ed4c8fdaf11becfbe987ad5aac8b181f2066c695d65deaa3351e879e04f5cb", 0x86}, {&(0x7f00000003c0)}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000000800)="d9cc25597928c0bb8d82e924a8ac875c1b5bf6acd8867903f6e827f8e43d51a8f0fd5a65bed503830b6b0e94860dab9e5fae3334156409fce3be8163e02f9b42585b208ff76bde0074a01c729a9336f6554cf717b2", 0x55}], 0x5}, 0x47}, {{&(0x7f0000000900)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000002c80)="a6865246d791781c375d6097c4d453d9c3805cec936e5bc68c765b829e3068f89cb3748622bfb2635ecb35eda3e5ce580f8c61f15d27ae06af546a317f40c58058576064fbc8a678c9b243022f26b4dc0bee87e88152a739d5013a4d9e304257a85490067af8c4249323d83c71f6ed00f8c7d65951a291f77da72bc083bf51add5d78dfaf4568a3a319cdd200f2bc75acfdd6eed3c7f912862d0ef18443e1ad3222f981bb1519a2414ac942495914d9e359c663a7d592c482e4013d5a329f6c7877691300d4bbff85ff34e96e52436b1bf87d570629096b2349b0d199e17bd2f72433b82e107e6bc4bb50202fa4daaa7f80434584d5d99885476120eeadbd8a1d63c01308302085eaaf2ff74ca18769d6e0c62c01b4896af5d3dc0dd93a229e0782853ffd3505ff2ddeb9339e1ffe249252f90e0a57d6dfdf54f62c713cade0505ecd240835ee34124a588a2e80d71a6ded3fef676bd7937a30e50d478786cb6ba28cb2fabd4aaba11699ef494f39143be848fc3504aa3adb80c460102b3d2d427eaa4ac4a6acdeb3e0ee197f5787c0d08e99b8916be748f3f71107983fcd4d1fe3bf2c611d889a2d4ef86e794c75ba5aa6f00899121f9bb678b1f70fea0da93b7891531ce768f073abc3579016dbf65d2ab7c7912efaa5686a5b6cf57cd2275c633fbece6eb5f38858975d93ff891e6ef2ed1be6c05af9344a8d15ef9a6263020fcfa1c804542d6d9fd660f68509aaea45a476c3e1888160a4952aea7fe2edaa76bef21427f29c64ba0961bfe229a94be789df31c45ebf329d340e030f9b1763b72e68e8aa1245e73dedc694f1dd06eeb86895ada4e02b9d86341f3def278172d301ad588eedab19504a615a9cb512f3616145f9d079a36316dec3c25fdeb2df6330ab18203ae0279eefae9e6d00ce26188db01d4f9707c40a93f61d8baf9d564684e9752bd363d418374409f37d8dfbf85247318b8115fa30f3d2518d61f04fa3a757a8255468ddf3fc79166eba0d25a8de267d45f6e0daf657cb939521a953d60a570cf9d2adcf263c5c5fb1e27f1533420376c7814c10974a1b91859ccb31687498210062ac440d9cd67ef46455bcd86367876ac8e7017ecd20a395f182124368a55b8fe10e80958e037d3ddb0ee627cdb52b1d8315d6258b93533bc520dd8fafb7efa020236a92bd63a2ddba0aa7b70ca33ec232979d485ecc74528bfa6aaedb60d5ce3adadacd7d70c0c558fe6248ff1361e1e9e37ee56e239b8d2acca578916e8b0fdfa7721c5a7cd3c0746115d8714b02ff000a452dcb50eb3c4d612cf34c85f5fb73b9522c84c276e4a60d7a9625fc454cbf4da4c9257edb80bee92078bb5d047c27323c84204d118a919de8889fdc6c52502ff9a2541c94539c0c8bcfe392dd2a14bad1b90fd7132b65f227fd9eabb2e432c6a4d03dc48c1cfef262d45fa320ff61ae9b18f5c368074ff76221611daa30ac2924f5f49cb08c9d9fce5e3b805ef05b3c82c4d66d477f9c5ebcca0af9d456254968dc0283705f55376225d68c23e1111b6e6d732f82dc4a2423ba9b96784aa9547df7b89cfe0540bc0a7758c4a782efa02763b955518dfd66301f259f525e5f9b7f6fe867f0b3a30375114b133b547e5ead88572e05c52676a42f57d322d9bf1234b61a6d8c6ee7e828443159e51544e73822f45052c8333c298598ea3ae617013f863bb2a1ae7618d07c337e7b32e7d8adef2a701b90a3a24a91ceb53d7e2f8a590b47e29ce04d71011933b80c973287ced940f279a511c225098ff0e26421d8b565bf2d62c2b8bc48bcd703c7865816dedc2437b809aafafac52b813eb2155bef8eeb4740c9f78f9b198919430ea97a1d216f1b0b6a89b3489c84b8c645d13622ea9069f27928e034c72117e3a6f3e46fa538523562ce7a6ab4394d43b53d21a2b88914b52f978b9ca852bc96eae6ed621ace2791625afd947deee03f7079e11ee4946ceb53101fa9a8b4811f335cd020fd636595cbb2992b32d67620be7a5474392baa59daf603f643d73773530d29b4f219cd4b36699f9f24e7702c27acd22f96ef68a2deb2addaf4f66eb865b0e1cebd070c880aacd861df8f9560651666be0c12b60d365d492aebf049b50d2591a6b3881bb311515349825436b70ca177a58a3a2c2ec7063eb5619f75fc561d83f54a38361208c023526eb92c5086d40cd0045b0fc876e2cb63b612200d55f451d00fdbfcd1e267d0183af5f56ba33e931c713e036e977705832c3f51d2daf0a2ff32c1b385586b50edc362d3fc266da8c49d69c47f3455214eba676a4ca553c84a988be11bf51709bcfdc60cfd33040be356a77ea43f02195bc00e3dd09aacfcb5e551dbec87a1cce9b49298d7447cc5bc3370d3b4fb0324cef1befa5741c9e8c1f758be76a40f19be91ea5f722ca78b116d9f17c28bf27406f7f99f031bc7d435e8ec40f6a044f2bd009448cd18012051a71507b02b0e11f9ace2cae9dec3b3ff052a288b33bd017872bf2323642f5a47c111048a9af989977aec495bfbe3d9aa99ea8cf461f32fc45e5bda5c03675d1a310ce9d48821a0af85ed345f485f71ebfa8466907c193d6d326b4fae2ce04d6d27e278ed1f5368f95be2f29cae2afd7c6d63b7a880699c1f032d11c604a3b618ae5024764e14b40db4c73a5a543d4c74f8d521ce1a2f5ff67a4b961c61f1335725efdcbb1384b2134607090ba6bd112d4271a2e93df24ab5d078c483a1c0dfd7465f44550567d6840acc863fdb38ec6af495b64673656dd9084f02af94637c915b0c0dde1e3f9bb2015e713a691a1995df95307a2d8986f1e5d8291f7cfce6c8da45d79406bffe9b7181b37c29f8222dc51caad372c42944d0131389643347ed1abf73f37137b3455fba2276309dd45c618e5c3ae42a98ae8efb0870f8ce13708a029d6ba71fde24cacd14300cf5360a213d84e4716083803f2b4da975af1d7e0eb081acfdc544195d7c205cc3ce8700e533a58a3e729ceb4d829a0f3e25d087a689928ebecf2efdbe891977d38898f040e4723d46716712c6e127b13e510d40cff89d98b0e59306089a58fc00b3d1332322c1bf12e39ced093b72ac3a49c9926b55d04a50437576f5224baf7454b012a909e4acb05655a9f6dec8bcad840d79d4b904fa9ba4b42840628bb8036cae152d3c2802f517ec99880e4bb43e64fd603d5e396f7c46d556f023b8b3bc69b2dc1ab6225f35d399a33e0a68f7f8efa4659ea8c195d697931b03da7a55534cf53f45c92628028ae6452faf2c5f2dbbaf31eb8940e82d683180982dfe1448dd040c5ccaf93da099cceeb9038a2c313d46ed2f28fdbfe2835a3072fa152c6d39ae2298273bb559ff3dc6c8709f947c2e164811e9ce3083b81a17c796de95f317c06a62238e0481ee837d5988e52cef3092d9fd2ab8fa5ee710fd0ffb306010a04d07c5369909b1ee42d571584875dc5e10f9259c0fe1027becf8d00bd810d737b626f6130e60a3ec52889416e840433a6d6e72cd7022c174640a6121391ce9e9f8f65ef6872f19fb9b2e63d67efdb946b3d3f4f9e73b87b72b22908119f2615f924fe1e0377751c6fca5cfb4a76a749c41092b6f0b37c71c67a47fc44a4430d55a98fb54ef350b34709b5a068a0ec8cfde404b53a734579e4cf793a0e9856937518ed71bf36e61b45a1768c13d6b112f95de42346f0ffd9f253e706c8fa414635b1bf9d9fc60740bd83a538683795fa526b8d21c2abced0d448d80fae6c022507a77c67e14a26b2c669902d007d75416885a7cff9f251460135e3a6dc8f212154ab407820f3a5ae27750185d94a61f3e2e4bb846d386cef5f7a04191a50c34635ef63ccb264e539f672a8b7a0b1636a7bf5cb098a1bd2fc2ea1101bd9ecbd8ec2aae42e4fab69438873aeb88e2776df72ac8feec8f3814bd01a3b8ccc28fa18a89e6f6c6a90a2f24a4346e033d443c3ae1fd95c22a87bad73df1c81b542bbf34beea03101bcb9e1cb65e734870e7c83e5f2f51f04f8ae9bf6cb0fde5ce8d7b76d50b8c63569c5c4427d4f5ef6517fa66a79eed008b7fa5370b5a4b1174f9d4d40ba0847483a4d387426348e9648893b8c8f9b4bb7fc2f80726dc04cdebd6b654d46c7208442d47d342643cad4a148bc19265f11756421a9cad0ec6f0e440a46812e525762d3fbed14ecc61c48a0a2f690269ed0531e1bdb512ea4a2d79f1efbd50c662f3fc2d760cccc020e126212a4abb70effb0bba066da73eb15a000e2e071211803e9d23abb3403399e6ea7dfc6bb627d90bdf59adb52597262bf90317bafeefff87f63126678272fbf132aeedc283bf8306a7ab860c1d74403624047be261e8109422de741d6fd208b06ba7562ca321b78332dd3ff227278fbc656ac1c124ae25d92f697684ddd0977cd377d42f4ad9f573aede538776c8561fd1d6778ca6897f1477ed36a1dcdb1ee28bf99625dd371f9fbc5ab13b3bc227832d956dfe51b45e93f07b07689270e28edcb49694952fb0293c9bbb94cae6151632b34bdd506981f485c80674b415cff46c05603a36651984761adee41fbf38f1689e7d8a74fc33d965b5fd85ef6670cda6d9a7066632e28da0e93aba9a4dbb17b14871a4c281ff04ad76d66d06ba1eb9316414b6518f011f63a183bf018a9152d90c93372fcdb9d8363a3c15054de4cad2083145f6a736c31ec5372e17d404910d77024cc8c08aa9450b4aed3698ee4b4c6abc2b3f2270b25152a15e2e619f977c349380dae616b239d705c72d12b07223c351fc8a239aa51144267828969d5a0c85026e1641909e7dce02f7bbd4db93540e11698a4c4ba9ac32b46493a4e6730e3b3e451fe0472b5b4a777789af0aa86af5c3bd2da3b49e1eea2a64299066a11c483b6b90119316b598efe369c0d58a3e3d19e37c3d7a0d643aff01ceff2744fe40d97beacad9ad2949a2215758a89d7a0c57467429b7a3ac6dcd1461e4346ca45d2e8b62e83b26bae8bc7d2ec6fb052c4d1a040ac3994546c803837bddbb02f9e5cc279b76f53e5f2272c28b734f1b6d087595a11cd2ebc9f3ef5f0f5f7b6eccb1b5921c699b32f094d203ee38b53ab237c1bdbda8bb96535b78f22be7f2fe597a61ce4ccf610dd5fd05f181b8587a0578a059b8a3f1e61be78c3b5e534eb9754b8e40dc89bb90e637aba8eb1497c008ea47861d99484849f3da106c0c1aff97dff073519ad07e8820401436ac55422a5457d176c76379f89b3caeaf196b60033cb6f86b438ce407856f0834b10d3a28f0778635859531f5091056bbbfd0a750a5c9c06ceb51e1ea9adcdbecedd1b34e8466b6a30a5a9607ea74ddf37eebc622d80ab90ad2cdb81eb3d65f95447301113ae1c3ab230177c2768d876343dd3db8681a7a6d8cb82f1d5d3cc7994bd217086a20028cb4fb7b492e069281b464a7b9da82ea91d4e64891c789cec5702d123863b82bc4fef74c1c2b4f6c41a940768333dc843facad690d39b88fac4aa134626e30b35d4ddec4af69bc177c131b3176a8bfd027628c281047fc8189332e10b1a69174f8135cca662d65b38cffa595470b270046a8329d4384e100b95a57675a540b3fa5d25d31c1297e6e85d633d186bdd522c78d89ad410e5269b16f8b8f335529411c05f89e282dfd879ed21b09bf2b5e8dc7d614030ff800dc3b875334b5621f440cb8950e24aeff7070c350efee7cd97696ea25b5d07f520e8cfe1756cbf695286cbf60dc924917fffffbf59f595c9671e54e39c700b259e74838ce0b6ad24b86b7d79a2c5a0c5f0bc6c", 0x1000}, {&(0x7f0000000980)="7e1d61add6", 0x5}], 0x2, &(0x7f0000003c80)=ANY=[@ANYBLOB="20000000000000000f01000003000000714498892a65edbebb309dcc17f66ff1f800000000000000110100000700000034cae6cb3ad37d757d8f1f42110bd345d574dab1a2e85dc2a528c2de7223c379abb3e7849ec3e60ecfa4e461c0fa6fbe0f491fac27738adde93464d5f382153fc423a67cd08c8e4a9023e95e8cc771cf8bc58a0e1bc2247ff16d0233ed71af026ee40495a27078dd6b9739584dd39a0ccf018f0dab19605cad7a6eed5d3d6e89c369213e406b17c17101e5e06ea187cd84676fb04a5e570eeed271d2e64c3361cd6157b34464e404e0a542e411d1e0127e86e1a8382fef07be9a36851f1415cb0fd262e8fc0d2dc077a702ed0210915a718e01eb124a2b87209c984b736e83be9a8700000000000010100000000000000a010000030000009ff39d942dcd6f084b6ceca1bd9e201a7468cbe6130360afdfc512a9a4e1577f818b2501bb1f07a66d4de17a5641ff80f416dd846702f6e46153a31028125ddd55bfdb4bdfbff62e842ccd6c035d332e00da5de7c7c0e16da6e8a930dacd5df6278ae94730d3cb8bdaba99d0881567b4bcfa14c1357a9e0bb0f126f8f95dddb8f9ceafe8713322fc6e219f73ef052e193ed816eb2e3fb10caa76c368e1917920d0c4b9753e841cbd92f1b07082459bd61e2e7ead1d72fbdd14f1fe58b433c1ee8469cd3591c50b79c29197905cdd7a7a52c9376df60a377a17facd40b066477db965f78e02ecc06e559ee5eaaa22b8d8026d0fd349cfa4da580c078bf610717ee33b6a7690f3a88524c3e352f633aedccd951385640e42dcc7b5be726db4abe93e06e8cae5d35c5644a92d30fd887ec88aa72a998448ffbe5392064df8cfe3c421ba069af0700ffc627fb450e78e34a82c0ab5bafe84dde16f963d3fb19ce65e94ee981817658df86315da5b70dd278144b111cb7cfaba97c6ae370e4d1834a9c5c7cd5a97a95450ae984ee99e211fbc2b1c912893251ba69a3207ae4294e990d93947d4fb785e5d341e01a15116f64f1353d9f83a612b998e1e7ffb01a52ff962e5a04e38e2fc09f9d6157d492136f4dcf619cfa475c9a11c330a74fcf316d2c72664443cf79a4526305a29ee2ad435daf6d481516c0effaec0b5a65cab089846a4f4dc58b13e5525b6631679c9824365306fcc44f14a5bca88a7e8339c7593ed9f752504ebf0eb14f6a5c53008eb3009531cb3dab835455352d6eea7a58b6bca9b38840b1349ead09ebd8d6d95682e378f3ec43477ad05484c0746a36654d49bca9fe2886e8c294d5b38fbddd2b65ac65fd4ab1c78146dbe75bf7e3dc85ca90d6ab2cdeb83a028e4a7298e4f4c9929bfa34b355c8e8eb6a351a977fbfbfe757c076771e78954a0d3689f0b0b76c2ea6a36200f95dce50446de4edb6eaf0d1dd9fd9b09cc05ed055327ef0810685aecf477a7d5c8d6eeacfb20cf0fda27da2fc38bde8b03c67138c2bba6f9792b0c54abde129383ee0444bbea993cbb674aa5f9936c13056e2aa0f05f3138ecf78226c7c551114e548f5246230f184a3bb806ad326500914f6b0ded611904c5ad17c85d250c6c303c6507e5e137552c7785a49600e11ea09a278ae3383c8110607e8dd9d96e8253afeda1f7d829b49edf144b6aa206ceb7dcfdd1c82c9efe7951432169af5003f1cb4a54de0ccda5af88bbf561af2aba7f79ce5917eca6bd06bb90e75137043715ea41f4baeaf4215e3211bbe3c53d3ca66c8af13658a1900530a32b8031c166f5c56bc33610a851a7f1d456d9024f377422d5491a2039beb8963051cfebc91804879db3b38b353c2044111fb3c2d13e7f1d279c454a096d30fae4054b55b472b01e6d0c6aca6ae98d63bbe68ef2b20d0be24b3862bc8beb52b1b75ef9d38ca6753008b8bf6f5a32de1bf1e40b671389f44b5d88295ba05939802f94fcc7020a765bf18741f7d516f8dc80dfeec16a4963ca818c38400b257f01ad609b6b82338bae99d64b99df992d18f8c431ceb6c734920412585beea27d2023797bd96e4ac00238c75a6f15d29aefe530c0dfd554eee2b65f4a83d2fdad9bb9c4487d620573b4be21acedda4d6391275b828abb0f4b5fd51292777862b7c661494b218a72065371d33d3d9e45f659043ff51f134ad582eeb91f6e0c85235e4c9bb6adae6baf899093bfd99f768615403dbc82b9b49ba5af815bdc1a8489b96ed1c3fff72ecc0ed3caeeeec105682f70600cb3c69cfc04be407509d5755f504e261cae0248eaf1e79216b098fa9b60cf915c95dc58ac62365cdfae786a9a3807e55cb33cdb60e2f859a8f86b7b8114b0f320db5205d1e893b443e8f14f4105312bbd0055ed37670e3d76d27cc68dcaa7a6f4077e87a2b54f8a357cd1cb90af3ebf8983e0051bc3e44b35687338dd3627d0ace1da00992c1025297474db7fb1b74256cd4b059154ea9b4182d8fe75334050c52a9c03a09b3fa159e86feaade11f0034f10d0fbf3801cdeabb2c1642cb12cbec51f0414eb1253900dc3b1897397b6eee4523051520d6ccc5ec14bc0ede53ad4ae1682de57ee2a77f6597a53117fd9175c0bace9fdd99696c50fe78b79b755197013c9d9a57000a238f7ec7350c5bf091ce1abb6168c8f4511d5a7d6733a627296ce6766bbf3a01b24f6f5190ccb29e7c25ade1df4916eae714eb98afac58bba72df1bcf8877e3da3b2659c766519fc48d44e03233ef4fe7eadd17eb2fdebbf1e6f0e60d0839f71fa01bdcf784529a07980adf3b8aa6e0efa8faeafe781944a269c0cd450794b0ea7d6c1adb90dcb2398aeec505c8bb3511dff8b6cb70090a604c016afd013e022dc4da858ff2393dbbb485e27b13a718a3a38829c03a6a651ceebb841a1c44b5929d95eaa3765458da55b9bb144867980a815afd6087c6a3c4dc49a11e7cb7f214f97eac257c8a39c2aade6dce2a3a08e9559b3fa3758727f1c30cf052d74f02ce1e4b3b53f18e4c0732173f0f10b2a3e47c2d575213a4b5010a519ef3d4f21e7635ea27ddcb3cf5dd5d8d896fffb53f9db51c5f666d10a6e2135d949868eca72c7019974521d7d1bbb9f5bbecacc526c2b65b7cecbe6c526b00e704b08e27f6907542330ce0023086d20b8f852b715b62292fb593047d6853656d95956ef064dbd72f948e7ef66f0fe63786db748d2f406125242c16900ebffeab3bd38ef3ff6390e4ecd71e82b4da659ae4d16df5056f559133623a7c987e239d000dd00c4a7070c04124c41662fd4aff0d404850f80c19d113ce05e36f16f7f5b35dd54aca2f51df02e87bfbec10999ca2c65d167c1a3289660f5971869c6c7b086782244f977044461db5759a770293f8f3d2f42dbe80dfaf68151e3d1116463c1a117442b1a83da6cae9ca83a9634aa2e0f131be7d4771ab15c2f61193e3e05bd14e2a2d35f73f7f70e64627f2edb04782720f836c3c57a5010c76e151cf73cf616cad676fcaa2cedda27d757f4cbcad1b3d0d7d18761d28a6475284c74549723b88db9c80692e48c25e2e652aae337b9a36dd9ee62a80aa9f53fab0e1eef2070f5368576a66caec8a8db6649c04deed7fc2dedbda40a8c01ca5da84abdb4ba7ed0b6504b58b2288c7b4c4842078f2d89ab4b0fbe36b5bbec93e08c8dcce183414d5094b657834aca4aab82cea05bd0b7c090a6c9a18089a82f1865c2811f489a3f46f4430e4c8096838872d4b225ee61c0e9ac7f32f9a1470781a82893296ae05388896bb446b8315bc7de882cac15a7481a97ed40c95ae3e819d9f6fe314592fa8f356b7fbf3a727900cc8cc6241ae860b470372c126d2f5080e37faffee032ed174dd91b777bb969f587e23690e72e0140081e38d21f4d272577e8fc0dbb0721d5b73a2f29dfae3e33d2fd244dea961e0b879419cb884b5d2f500788842dbe486edfa1f0fc1d5dc6725b66ad7aaeea3d48a2b1dc5d3a7aaf6e0217573098f6b97b97f512c73b5b02ee65166b75ad0c36e56d73de530c58d451d17e99e1e98378b199cc3030fea3dbfad18af0444e3a8a20449bc8a9c60c344b9781b9541809a7ff87dfd7f04dfa915a650c1b306d5f79909ce99c2283a43d4d10550e8225cb628490b38b370ced896db17dd783fd6f6663094a08c583999092b94d0887e1f2fbf4bd8c0a31f8e2a2a7dae28fc95eab636151d994161f2f09926a935377aa920aa5aee83c71734987a92854a8ee8e1e6130f235e7156dfd0a4cc698469a518945466c23a2133ecdeacf600e1ca73ccb1b3dbd8cb24adb3cde9f4d103b2a0afe79c0dfe60811c397afc0ae7fe38cfc54df40a4a2676a4d2e253588785eea70c4b513be9f5b084b15a186c5f6e221024cc6914d1e57e452a0d12a3bda6a02986599efad7305c2e0313bbaa47c62d09a8cf052a0fc753bd9f3e38708ef7a11b544701096ea0777726ee89a9457cfa72c143695bd2cea64f1185739a523c0d5af3d16cadcf49cc5aefef0858f17e53b0bd0177143c76947239fcd15fa7e5e5bc54bbffa1961ce5390cd45126059a9d83fa183a1be5e0c94d927fa086a5c02d8639df158a55f2515aca3b87c661cb842d96b7cb724e1e2ddb87bcb2fd2bb7e13cfe1a7ea9ba67c9f47c8c4e9d5f2455c419aa3dc34acedfcf627e7c3c65f406239365a50a93c4becbc543caa2c143555136bb3e9f80cf87541131892405d7ec4beea6b2c19bf1ae324b623ac17bf0845187205bd32f6717a56723b196fc2049d2924217ecb7d48369390d3a42760275499b7712084c73f8e0d3e608bc22d008f8fe2fad0f390f893999f663eedb56929fbf28c13c1734842f121dceab1eb88689ee690ce8acff426c0f307bd4f10996ee2e623833eba48a81e8250c20429f9cfbf8482b13e74f767eaff9a9ea0ebc3ad964f6b0495e20a9460c418dc941aaec1e1e7a10b81954e5a8e6b826015868d6f38dd2e8e414182a8b9e9f0c8d2749ede0e3bef0d6bb018eeca41e87daca93f7b823544b035a46cff38d75a7d36de7a264f3d8f60693edde6de99cec1a556289e0d9d98ab293d526b1cc6e6a73e7f8be0e81e1061d2347d6cbfc8bd40e7e84c0ce2201a5e6101d587e02e03e9455e595ace5eb871e1d409b04840429b278b6941684561de0b7ec72373712f21b5628a3153127850068cd90225bcfe0e0ba5b9fde46e229f735afb46c2bed4eeb64b9fdaedb0064ab31c7b935792a8a2e1940d8bb46577deede1b346c6921e4297ba1332d37bd5d1f6437c28d9593df53f66f9935cafd622adb4afd15acd86a28e1bfc79f1075f02ee9d597c02495fac3463c2dad6187c5e376cfa4073e6a42883d65c3cad4ea80a82dd0731a7a96f80e0b7b0aaae25ac33d4d4f73c8e9857e3fb0b0504c742305e1203f8fccc7deabbd7e0b6b9c8d2df4dbf76d2b70dd9a2381ea82e8b3cfff53d0b4f52ff0fd4424dc3f6c1644b64d53543b41235e78af88ffc65fc1cee8a0ab604dda01d50a517d9db8bba9bf4723aec1eced0ffd72f0408fa68eea378c3950a1b566b8478af1c5c36eab89e9d06fc705cff021a163d4f3e6c896978e84f9a3c5f8d3d1ffce56becaebf91b84cf36e38402597d20692ab1764e63136afd5e4425b351846d69a3645a2be0eade9459c5a9935d289663ae5ff2240f68975567fcab3a6484970c10c7458f844f86c7e1a217537e04a9edf331198bccb60c067e6072d2b92ba347aa4f4391d443e22d1d2e6c4cb8625b4f86c73a9d9866f2e31d6eba7cc3be23b2836f8cfbfb89b543246c5401c9759c0e55a7ed585a298a16ade60e30ed061229039b7bfab1767696b8d377f8df80be9009c14c162d4cfa03b7240e55ba3dc77d007a5393ce17f51323b405b70ddd9f4ab234eb755b10ad884d3a42bfcb4af99a6f1aa5e2206fc41106ebf486ec2874a5f575adbc1cba0bcad68cea5da6bc1e3d47e3627b9954c9902adfc3d35141e4d00ceb14b071960160564500d4ad6e013492ed3a3cd27997c11b4efc123598bb806bbeca82df061bf6196a3e67338f7466549f0a5dc3edaf798f6f225aeec0a0745afc2c0f8d232a972c8ce3ef1cb37dd468114a5a6487fc63745d3e8e171584c52bc3bae4c4f18baf8a3c92a41f3607ff1edabdaa36ce21e0554849f579d96afc2cbc513cc38aaa2b33535639a999aa220928ee2986078b11dc816ccdd4e4448c7b8bd8d1be8c5b61175101586be9fb558817ccc710c83f54c6e4614dd973174cfb303b03e80000000000000001f010000f7ffffff0f7adcb7d1921afdb3c2883bdf0f528dae42fb374d7a0f9a6dd15b8dac1a519d26160592e2ab83b70f524bdb637b9b23d583d6a3b8b2d9de5264c365d9aa3c06a20ed250f1831edd4aad101751283b91719f5c111ccf462ca7d23bd562f1d760cc8d68bcd2f3a2e98d4f3595a4b600000001000000000000070000005c00000073325e8252b01f2518ab09f4d5c3d2ca885de5fbd6ddf855aa7aa009012848f283975ffabdf9385e56533cfffcca5a9a64f110ebd12de1399ed0072be7a00e57bb3724bd58c4a428bdd4aa6d43e4377ad5312b4badf820df9825f6415e9882bfecbcf1dad2590b9688f83adb9bac729721cc2b5552e03bb4cc38151350bfd35aabc883c269d995da0848d169dbac2d8fb15d3c80d006b0e5bb18b5a0eb5fd653c2f29ebb6af418ad896ecd0807a656d1f8a26e7d256cc65178d2c8072794872253809db77da227b612e31322b6b74710e6b39000ee107b92a5f41c7fd38de35401c1b04b428db2afcbd1643d08b4f100a000000000000000090100000000000078cd0eaa7023b4cccb6f0e5bee28d88e118c94821be9be247d659bb2c6248a68b854cab5d71bf95c01b32270590a0a993cc3638de04eae6f408dea1eb99af4fa3aaf37f411c0e45496ec29ac257a3091f5b518f1a753077ef81c908a6e17f18b139c387bc17dfbead6d1942dbe58246c0ed7b3b7e4d57c276b3e29ea14033951227bcffc2b6485cda7cec20000000000"], 0x1348}, 0x2}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x3}}, 0x80, &(0x7f000000cb00)=[{&(0x7f0000005000)="13bfbee7a59e580857d65630dbf82564a9475f27678f600f2676e1e2fe1069ed3264370f1a3396161e3311143dfa8489e9fd46e1ffabd9107edead81dbdab8071a1e7c0e2fdd61f64c863068ef44923292e18a68f0def94580c368608408a9851716", 0x62}, {&(0x7f0000005080)="9e78c5ee6d22989225c2cd6b26d9e0686b35c8b5b19f47a0597887756ce79d233d862aa6649acda54250d6b74e8611598301e11a8665004accafb086c3fb80e85f0b464adbe1e6acaf8c8268d2c5750f00fca9686ddb21283862486b5676511e462997905595b878fca46f9e10107cbf0cbe3e2acd4b2e34149f3d391dbaabee503bf0257e4d8cedcd012950f3a413442a72ee945afd", 0x96}, {&(0x7f0000000a80)="aec533225e751f01393f7d7b7dcbc1c1c45e2e", 0x13}, {&(0x7f0000005140)="376472b3b41f59199ab58d006cf119c90314bdf0c183b362b305c14ea84b19d8fa7a09e9d810d2cc7e3212321258cb4ee8a501ab08204c2aa648a10a7fede68335c4658449cc24e7e5926b484475f5ad1fa825092c3453694e94833b2a0c338c5a2381ccc7b01d6dda20d772993d8b17e81c5c665be5ef53e9a1e1b35700e4b5accdaeaade733009dc003079af466012a6db9eeb9f3f04cb9cfc93d43aee7c4f4a9e37263fa7dc95081d08968c020e89d89ce04a57d8ad680c47f1fc3d659125891257ea7be4eb82e224211e9f2f06c694", 0xd1}, {&(0x7f0000005240)="46a9c567bebf83b72ec53056e46912b9ec0f", 0x12}, {&(0x7f0000005280)="1a8c594dbc027cc6fb0f476abbc53b843c27b2ff8544d9441c2d9ec54a234c8d", 0x20}], 0x6}, 0x1e0}, {{&(0x7f0000008b00)=@can={0x1d, r7}, 0x80, &(0x7f0000008e80)=[{&(0x7f0000008b80)="1331117cc3a577b446ddee74e685920875d663206eb3bdf35a039b4831655f1577fbe34d405dfed6255330be", 0x2c}, {&(0x7f0000008bc0)="f3ca568bd6076a89895f8db05544250c84a18d74d63918b602f3b2e39f1e73105eb421fb204fcf7e2c7b4950ee78aed9019e0f0df1944181dbb4b998b46d0a6306a96da072fa7078cf3470ca573a052a01b93b15c8c9db12b1d2a6428e7a91bc193b2e0730c46d35fc91", 0x6a}, {&(0x7f0000008c40)="cfac27eab85745d8f7910dc755f6c0b2bab777", 0x13}, {&(0x7f0000008c80)="cef817a94e540271ed1d5681acb71dd4d0366f902bd5b1cf198f913d83b0497ecb945074c07ceb4b09efa33926674dd9af8112ba1c717f1f8f92f5acaa1fcd39e83ae781310e9d77470cc842a9f8f77990b8ed16ef047162ff1fd64329f73b9c0aae5d0dfc5062aeea3665e3c2f8999b5f7678582ea2dfdde6c06a50058f1b3e90940152a3a89c8c11ef416c1a2f24213bf4e8c15699de7eadcae19d73c9861e5470e6818372c82f3720c7d07296a38e66184eed94c84fc8d747af7e165825df912bc49e1ba6d75ece46e5431b0ea32f3a1ad505827a93bcb3c714ca02a43265023fea71d06a42", 0xe7}, {&(0x7f0000008d80)="6bb6e768f55b439731756bb38bbee65ebe847665bf4579d3a5b4ecadc554d6caa9cf471bd6ae254eb0622a5c6b54eba59f0d210fd26b94c2700f90059a0c36783953ae63ced4418dc12cb9c8e3b679ab98a00bfa77616cbc450deb2b4ca06dfdc5b807e4ce1d2a885c07303aad264a8d8e722df16e0967531c13aa5044e01cca09490190dab3901813f409f46fb0706f05cd4be7fb4efe6fb377a7445570a219bb43bd2bd17a872626d0eb4f53acc1805e4ae744743ed82aa44655248fe04c5a67d6ca87fb979a17155e36c950b7a31ea55ad9e76d06aed4cb0be0efcbeb1109ad0f938d54082cd289c37441f9071c83", 0xf0}], 0x5, &(0x7f0000008f00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x6}, {{&(0x7f00000090c0)=@isdn={0x22, 0x0, 0xffff, 0x5, 0x1}, 0x80, &(0x7f0000009400)=[{&(0x7f0000009140)="1e15fa36c7d1e2c851cd4932a88f421176d9928caf", 0x15}, {&(0x7f0000009180)="fceffab2e7245913d9ebe48fa8a458096c9f22a9b9b41e59ec2e071d48e9aaf2d64d4f4ec1813d309ed43d033170ca66bf16de6f29530ac2fe117cbfbe8f8b55a8d691f39ae0cbc7", 0x48}, {&(0x7f0000009200)="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", 0xff}, {&(0x7f0000009300)="78194e5eebb54ef891a60c5b7f2086154ecfae089a660cebb255c13e2e8b1d9de09f74527351404d3d00f1ce8321b9f4873d36850a207c294f4effae2a3340d26578a823bd1ade20cb1308f04d23855f18220e4ccc141326fe", 0x59}, {&(0x7f0000009380)="d27d245f6e87fa059535b7d85e8be8d05d0dfe7db414207f0ffdd6a30f3b87d6d30fdb9d9b8dc29d24480da6ce1c36ec929dd755faf5ae991cfd4be20d09860c1fab9aba2d096ed1fcd2e6570c59cf95ade99c7a95fdcf4a1e8b8243", 0x5c}], 0x5, &(0x7f0000009480)=[{0x20, 0x199, 0x3, "2b06bb8576d1c29895"}, {0x1010, 0x88, 0xfc, "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"}, {0x40, 0x13f, 0x2, "bf7059042a91fee20c47217aa966714003799e44693f76a38328313ebbacdbe2fdbb7b15d76856987ebe"}, {0xe0, 0x119, 0x2, "aeef0dc76f6f1fc2333b8a31afe268de22f770934bcf5150628ed14e3c476c1457291663b33eddeab3f6aca3330d26bbfd99d92c0b1af28057113185bc6f5c7aaa58021d7bf98d5dda39970168cd0622d3e1bf2bc5798c26a420771fa6ceef67af5c6e52756e984a2a1fa77f1a959ce2a359e76e47c20cff5dc508adc1d1a5726a5e76a9773462cd659bd66cee781d52b2c62a23453b997f987919f078111aa40d48aac2032337ffe15f281b97280ce78045592f1622fe07082d1ad0d91ac280c9eaa6736e38b3c54205355f7060"}, {0x20, 0x113, 0x3ff, "1fc5279390220537927c"}, {0x68, 0x11d, 0x1, "cc5f534ba71fb072c5ab1eeacebbdd3f73ccaca47f37e0216403cf431998931d9156287aad8110b109cde3e9b086ee4e02d49bf18fcdad318c369b46f18e07a8a0e5c416db60af7c5ec3595408fbfa63083978ac"}, {0x38, 0x0, 0x49a40, "1bd63b559e2897495eae9ffcb68d2eee982df98f5bf1db4c9c15179f16c4689fbb9e2fb5da2ec4"}, {0x68, 0x1ff, 0x17cc000000000000, "668f54f45a1507c3c71a3fe09e598216c1fa58ccde3e35fe76ab9ebe42b8285241740a352b8106b6cc2a7c56ff4d96bfa08f7101bc9a6eb7abd2cedfbe2909687f3d5382d677539b3ee50bd7de5f9c256962defa0a7abc"}], 0x1278}, 0x400000}, {{&(0x7f000000a700)=@ipx={0x4, 0x7, 0x1ff, "3daac7104253", 0x6357}, 0x80, &(0x7f000000c900)=[{&(0x7f000000a780)="342e780abc06846441dab1151d337964fbcc92b815592265d257793a707926e8134284d15b4af5169af53fed3406d4dfaf3105ab2cc91703d2873c9179193f6f2b705193e1c7e268367fc1dd51f5edd6a375c1966b266d5a56616c048090766c551e324886df7f5127fe47cca35df0a3c62b7a5254a15352b14bd2e8e7557f8518397c63afb0432291ad98d3b01ed210e85611d60f9421a254d6e10726883894db17f7a3b7c2241bcb16dee88618b9f1d07988a1", 0xb4}, {&(0x7f000000a840)="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", 0x1000}, {&(0x7f000000b840)="f5eb783c441066ee32f253a4cb3686dd314969a89853d3f495af5c54fdc0030d6733430299ccca98507cf40853c502e2ef808436f306f52c56f6ab025cdde67145cdcf0d64aa3667a808720936d7b045e788820e1628a645ff794bbf64c8ba63834f7e070731bcd4aa57f795b88655afb0cd318d31e556fd4a9dac2819b6d98d05ae01dac2f083d4ba932cdd267f65c373b01940f5c653ea39bf4bd100", 0x9d}, {&(0x7f000000b900)="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", 0x1000}], 0x4}, 0x327}], 0x7, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) [ 1078.564940] binder: BINDER_SET_CONTEXT_MGR already set [ 1078.574498] binder: 5834:5838 ioctl 40046207 0 returned -16 [ 1078.580778] binder_alloc: 5834: binder_alloc_buf, no vma [ 1078.580875] binder: 5834:5849 transaction failed 29189/-3, size 0-0 line 3136 09:37:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0) fchmodat(r1, &(0x7f0000000840)='./file1\x00', 0x42) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x3aa, 0x370994dec511ca80, 0x2000}, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000380)='./file1\x00', 0x6, 0x5, &(0x7f0000000700)=[{&(0x7f00000003c0)="cb041153a737b1b8623428ebf9daed96114a0e27baa9068b7cc019c79ed41a187ed3cdbc90746176e78ade655fc056c22142d840e415f396c96d672e72dbff68be2d42b5286a250d3f0e2a266b191d6508cb4a0a26ba055b70ff5979fd7a50bc0cd4c0d66e84a029b6ea4c3a0994a13800c5333ae0e34fbfedb660a3b937605c572dbdc6078de4", 0x87, 0x2}, {&(0x7f0000000480)="8dca653b90df352fed75ecb13b069bb1b03ee1fc8026b9ef7e8ff9424b1d703d8d8acf75acf79ddd890e4e301dc1366be7ea03f5f2a3df699654c9b88dfb79e8228a7109e9c2232c4c67f70110b6ef8c49df41a392180774deea306af1fca5a52e81c7bb8d0b350ff92d558d8e9dd9", 0x6f, 0xfff}, {&(0x7f0000000500)="8860a441128cdd7c4ad0c96825c86030e8f69c9a24b5aa2781d847798aad0659f941d2ffddbee67f63678e1959ce037e42119f68761d6c3e0ce97f95e03b1fb45859ed1b786dbd1edf33f5fe7b67faec4e07d13c57f622d7e5f4a6aff0cb6b0f91d0adc753c406a9c353cc761170a00bf7ccf91088fac24b99adebc15d012bfb265e0da766d11d1942ffc5dbfb494ff492236b48ebd9e8232263a2487c3e8c4807f64826727be85cea992ab200598f933406b78d73cf06e57f551c8eed67ab750575bc3f4deb774fcdfe5362bf3f66ad852fab", 0xd3}, {&(0x7f0000000600)="f86cad57e8e57a60e6900522536d7318fa4b672e136c020fcdb7f22ee916b45bb1f9d97a0995c9c3aa4a1832f6978b03ee64b496f3ecbb7e8d636bd3d82126ae9b15a742163d4c26e226a3a8527c42af4c89f8cbd8b578b600eac2fcaabebfbdc6bf69410b663fa29e6ed77031e5ed397ff99941b8f90dcbf6bcb3e4a5ab380652239faca4b13cf92750d010", 0x8c, 0x9b8}, {&(0x7f00000006c0)="90c78ef19820c242269a32a2e501", 0xe, 0x1}], 0x2000000, &(0x7f0000000780)={[{@whint_mode_off='whint_mode=off'}, {@noinline_dentry='noinline_dentry'}, {@lfs_mode='mode=lfs'}, {@noextent_cache='noextent_cache'}], [{@appraise='appraise'}]}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4b8b95f6}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) unlink(&(0x7f0000000000)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) set_tid_address(&(0x7f0000000340)) tkill(r2, 0x1000000000016) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) quotactl(0x1a0490e4, &(0x7f0000000040)='./file0/file0\x00', r3, &(0x7f0000000200)="258161e8d7cb5156546a8cab490210693cb0c99c722bcf599dae8741050cb2c098cdf11b420e4eb9b0707a5f0b9e6984ce8b88ec043fc9d32b174a60b3d5d7e241adad13d709d239c03fe2c139e8ebd004d968d9458727933184e97441c791bf78bbb3d828ebadf01dcdb6196217685fc94cc3cd1c98562442ebb8a92503ab1bee83ea33bc991368e47f4f33c62393d657b84f279f8e17df62c6f58843e83294f56bce45fa9b") 09:37:45 executing program 2: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) mlockall(0x3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) 09:37:45 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/8) r1 = inotify_init1(0x10800) fallocate(r1, 0x40, 0x0, 0x1) [ 1078.581194] binder: 5834:5849 unknown command 29452 [ 1078.581203] binder: 5834:5849 ioctl c0306201 20000140 returned -22 [ 1078.585349] SELinux: security_context_str_to_sid(system_u) failed for (dev bpf, type bpf) errno=-22 09:37:45 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x100000000, 0xd7, &(0x7f0000000280)="bbceced3df7658593a51f95ce689f43e300ef84b4f53d8c782d300cd7ad906151ddd8c63705125c23178e3a6498b81d452259520f756560bc1adc97453c483e83725f4d3525cb185fbb69a77b84cef1e7fbc9b66d6c9bd97daef9c9ac674c15ec07f4b38ec67a909c87e0ef8af0af97957818c435955b64ecc0484068efe1d255c3c6830b6034eb2351938ba6e699108295286364af26df591c632e3b86a168e677b50c0529cac934b8cca0e805a2d4c682b2e5097d6dbee45d9f246a805a1a456239a0ae1e4d12e9848085ecb498737a606855d18e875"}) r1 = socket(0x1, 0x80003, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x180, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa0d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9d}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) r4 = dup3(r3, r0, 0x0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000580)=""/4096) 09:37:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$cont(0x18, r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ptrace$cont(0x1f, r3, 0x0, 0x0) [ 1078.594065] binder: 5834:5859 got reply transaction with no transaction stack [ 1078.594075] binder: 5834:5859 transaction failed 29201/-71, size 0-0 line 2921 [ 1078.595254] binder: undelivered TRANSACTION_ERROR: 29189 [ 1078.595276] binder: undelivered TRANSACTION_ERROR: 29201 [ 1078.595295] binder: send failed reply for transaction 396 to 5834:5838 [ 1078.595351] binder: undelivered TRANSACTION_COMPLETE [ 1078.595357] binder: undelivered TRANSACTION_ERROR: 29189 [ 1078.613887] SELinux: security_context_str_to_sid(system_u) failed for (dev bpf, type bpf) errno=-22 [ 1078.665648] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 09:37:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x22) [ 1078.665654] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1078.665744] F2FS-fs (loop1): Unable to read 2th superblock [ 1078.665787] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1078.665792] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1078.665806] F2FS-fs (loop1): Unable to read 2th superblock [ 1078.739978] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 09:37:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = getpgid(0x0) ptrace(0x421f, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1078.739984] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1078.740005] F2FS-fs (loop1): Unable to read 2th superblock [ 1078.740039] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1078.740043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1078.740056] F2FS-fs (loop1): Unable to read 2th superblock [ 1078.861180] binder: undelivered TRANSACTION_ERROR: 29201 [ 1078.877903] binder_alloc: 5908: binder_alloc_buf, no vma [ 1078.883885] binder: 5908:5909 transaction failed 29189/-3, size 0-0 line 3136 [ 1078.891529] binder: send failed reply for transaction 401 to 5908:5909 [ 1078.899710] binder_alloc: binder_alloc_mmap_handler: 5908 20001000-20004000 already mapped failed -16 [ 1078.909250] binder: BINDER_SET_CONTEXT_MGR already set [ 1078.914544] binder: 5908:5909 ioctl 40046207 0 returned -16 [ 1078.916756] binder_alloc: 5908: binder_alloc_buf, no vma [ 1078.916779] binder: 5908:5912 transaction failed 29189/-3, size 0-0 line 3136 [ 1078.934355] binder: 5908:5913 got reply transaction with no transaction stack [ 1078.934365] binder: 5908:5913 transaction failed 29201/-71, size 0-0 line 2921 [ 1078.936080] binder: undelivered TRANSACTION_ERROR: 29189 [ 1078.936098] binder: undelivered TRANSACTION_ERROR: 29190 [ 1078.941706] binder: undelivered TRANSACTION_COMPLETE [ 1078.941711] binder: undelivered TRANSACTION_ERROR: 29189 [ 1078.971108] binder: undelivered TRANSACTION_ERROR: 29201 09:37:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x2}) r1 = syz_open_pts(r0, 0x303400) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3f) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 09:37:48 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) sendfile(r0, r0, 0x0, 0x27) 09:37:48 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) fallocate(r0, 0x20, 0x0, 0x100000000) 09:37:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0) 09:37:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = open(&(0x7f0000007240)='./file0\x00', 0x60000, 0x10) getpeername$inet(r2, &(0x7f0000007280)={0x2, 0x0, @multicast2}, &(0x7f00000072c0)=0x10) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) sendmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="00fc55c8838f095687eb4e2936ec37e61016bee92e273011b9d09957c6b7bb693f2585d1f89d42791e4b4cd6edc6ce235d8801ed0dbae9ecaac99e74d36b2180a9805c1a6416ac9686ab2832991e3f07d8ad874ff08367594df713d0ba6e", 0x5e}, {&(0x7f0000000240)="56144c78ffb39cf11947eac5474faa9f8bf6199b38745ffcab0d1334b618de02dd7058a58b6a5d0beb8bf3ab775362ad239b7990881e929e21ad14220a0bef6c81ffd7f3f4ed4626ab8e85ea3195e143ea75b52364be01f9e65fe031ec00f45292dc30a62d70fbf49c8fb61ae7564f275377149b726903473f6ce6bcc275dd07d2c81023826e2238d219f55978012cc146", 0x91}, {&(0x7f0000000300)="3f08d1c83a6809fcc960152299f7485ca847b51d0130dc6fd6b44e1ac76e11713bd2e63ffb02dc3264348f6a6465c2207709867fc11af7cc2a87afb1ae55bb103f8f069558c459d251a36a86efdc033ac60e0cf7f2514f2efb4c2e354ebc286ad903e8feeed15c00a1c9f256098d3f2f6ab6f833ff968a98514bcef1033b5dfbb29c6db9ca8954", 0x87}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="77d433fa3e2bbab805a1771bef085d03669ee35cf31eafb4b25f0a52cd0db70fd2d61425e7b40d0009b73879d02df430a50e0addf79876ae0cc5c71646cc99d93cfbe243bf12eaea23a3fb1cb65d40063b96fa1e433dac5e7af2801d72a15bbe0bd402228ff9abeb65524e71fef2a0b171a6e6d3b77f57f25210a1f817426a518bdc168430816c8719bba684adc9e74264236dcf2ab5923c02e71ce91a4b817ba44d4c0dbd10ffc08973e2cbca3e9f52c942fa33a4c2b65d3bc01ae4cfa0e340ecb6dcd9124375dc6162a7ad5fe8b044caf352d902c4a99f1383d6e4142249d74e6a3abb7676a1c5a8dd7f521e277414989c887b", 0xf4}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2360}, 0x8001}, {{&(0x7f00000029c0)=@caif=@util={0x25, "61d9bc12f7691535fcb4c79afe739ddf"}, 0x80, &(0x7f0000000040)=[{&(0x7f0000002a40)="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", 0x1000}], 0x1, &(0x7f0000003a40)=[{0x1010, 0x6, 0x800, "a09451a64bf21529cc6da5dcbaf9d0eb1fc0bf7652de81b0f4b1e6d71944a46654d6690f595e65d75e0608814878d7a2fadf6fea3e8e8d5bf4620eddaa47e5bfe7cd865fa7c54eef4a92b9151658b33284312e65544561071b15d64553e87244aa3cb2ee3048d46af5a5f542b64d2774621ad88cb38f202fdb369d6546b87aed529d70f9f534b7bf2fa422fbcf12cba3411023017641903b0407b7f19eee65c90c505b2a74aa37b687742a1651ed65fe69a8413572f3b8856edafd0d32b93fceadea767309b12b818e06e754c5dba7c15520c60578f4e9a10ad09c94c511733d9f95164e5a6ddf9acd972af1d946c97ec6f7de1cb6936b4b686a636a28fa0234db844b6eb95da5c152e53022e92552d0dad643318018405782120553cc86e593d92047e06645d9be6f0c52b228a7f8e800c4f1c926523f6b685cfb2eba43879ddd7b3b3696f2b596af238c9d2cce440345d24b6fa92dbcfadb01100f7b8664712a4e7ccc9b73e8a67b2ca47c9edac3077e5538331aabe380fbb34554ac9d16e2820bd286777dc019ffce878ad7978a4a01db74c81f92b023b03b4bbf8eef1aed71e6c91c9982b9984272fe27e3639a43efa6025fd0fd00e284d84b606fe81b81761dc1404e8ceb97ed394b83fa0050eca0fb810e5d7acc7141e473deef42cd51c7af23213eecb4cb4449af0eee2da3845fb9ab9ced5881a2fa1f08b7c5c24ed8d6fae60192578936ec9b5e32aed203b4ca13466459ab39c0e944e3daede9c624af86c05305b472a0334732896b41b0a3923cf011b15f69f2876431005e413b83702e2e9af03dcab40c14da72ece5ccb4e40bc19a60d643d814f6f01e628f96e59897799661be57896780decb084c728431eac5cfab1c24dc576104bec0434018dde76592927f82418704358ecc834011c2f2f5101504d9b57c0eab32d2bc577117873b1c8d6e82fab66a51621841229f1e9f4b1e61fb8ad5ad19b7520f56a8447fa19433a7a468f587791a01ad975d7d9b4fa975cf6ebbc7cd8a9e913b74eea28911f477431439fb1663e043f1bbe50f61ebb19a63cf28b9d3fc3b4dfd54f6afd4bbe32047250e081625355aa42bc0b881182f59f44bdcf710e9a991eceea0b19f40865016852cc7c7d198a8b695aa1c45768c3848ee567c70cfdbf79bde7f4f39a88b4a7f90f9378ab2560a4728c0027b4f4ae52d5c88321e6f7f036dee19a8382f797bf7069895be4418d943b55f71bbdbc8f9afa216da9b6dd4aa51eee04ba479cb2c1584da94e8aa142d66b92b41dccfb08ce4d2ebeb9d8233f0d154211d8cfd298b02cb9b89d808acd70017c09c4462f7e44a49695dfcc779cce97db34cee9b6ce69249a205025295562cd35d269ab8d5aede8b2463a9cdcdc79fc479e0886dd521f39088bb9655157629c6beef7efed9130af338ea3762236e330ba956f52a074b1c1d676a2cd2231eb19898e555d71bb41d470792e16285a542bfac36d642587de5e0e2ca305c6ca3913cda41ac214ee3cae3f76eac3baf88ea84e672cb6998cb25fdba9ac620deca253e62df09e54578a30033f35692691ccd950196fc6150dd3cb69275ce7da12ed570a3e4bb7e94d32630c682d9a11f06c20ad90ff77b2fcead21434921cdf63fec01927288948a7c8b7f7662f81aaa736ea13d9c6f0b69a1c9ae86f70078f51fd59e0905294e97896246a3b07fc8270f6697fc5833bdf958a3a2d3d0deda9282195b01e537b46b1703b626fa670610569a6ceb3b0eff4a672e61ccac68de5c9a4adfd53bd27e7eea26cc4504c94188e7338038d676b91a66818ceeee5488c43bb055abc7f640496947a7f21584e424327559dd1787ea0ac258853d8e0cfb64333ca03d48857fb727eca1a8b055cfeea8187fdf6452a19992f803de0dd18c7ea144d093475d7c03fb9a4db68d97016edb1f1ced379aed058d9db1094a188cec0d478e4e82ae2bbb452819aea25e780e8e1c7522432442ceab5853f88e53724ad59c6d261f8683b477bc049eb318fdc5911d6b51cb1b13df090c85b601144f25f29b2fa3b8ecb9f196fd51e1a5667f7b620eef464135a3c98e8ffadb62f498a26bc4c608b734fcb7a8fbb97c6f3eb285e470f9a7a65e02e0809bde4b0fa47b337610c6adc80abe8b2f3a194d6a2e9bce2eef6cfd6138fb0980b6c2551e0c751988fff41d7c386d9e65b0ebeaeab6ce55aeb964a299636327dcb3e9adf4681a3b5006d27f77d05c98e94e7de9e65cdac203f8b580c6b65ba1abb8745c3e056a46176ed66e5d632bb4a48530ed156ff5fbb1aced27897265c7201902b8e35fba201f74b702430fb5a123d4a544eaad9e312fccf3c424c507a8a0260ae3defecb1ba0caf7b6cf657326988e4fc1a4c903fb355a82e0f2881e4ed974769f64d4f7c8ead0804a5ab1618c820a40780d937d6bf2879cc5a01a3d972d4d8fc6b02208ad50d3b1d302c0c976efbf567cb503149e64759dd6ff3264ca64ca3e029e3c35f171e5036c303be97e6cff124143294feea2184d621cd4736054dec0114de223bba4ccf87226afd0856cc65972d4e734848020fb4c503a32c6410783bbc8c449506e09ba4ad94ecf7a2b92dae415fb7970d5bdf10e8d771bc4c74a1a2951c4b8740de3cdf152443446c877fd78257f8e527998a6ace5177e913630731f429d3431ac0658b51dcabccf0ec70c173cc784ed957851cf892d1a78faa9113351e511d26dcf0a3b4aa37c2e9542cebb38aeed733320a95c0870fe051f9c6c5d933047a43f05edca3e6f8c1ae9262b04366642d3e807bdb7e548b6ee2a34138a91997f8bb280d51f74cbd582bf47fb3225283197cac6f5f5f8458e74cf43b7e5d0284dea3ad29cbd5c83e6dc876968f21b9c02c70fdc36cf87441af38bf1b61355934e418ad1bc054ed6c50a5ea6bf6578cd5e85c9931339a7c9785e1566a2bb676d899f484628b2814df1dac2fa83f2fa7b4a2dc167b160a9dc2e4f1609dde988912ef0819b6bb9184c034afee1988458ed93e66379e12f294d4eb5fc8acc1c859b9916516db523e553b5e342211b5dd510f2e2ea11a9f11881f29882f875017f5702d5f368f8c89fe6c603c67893f8902ba815ca234fd0f1a64527e7099e0cc1a3f404e20a8f07bf3425a28a4f8a82cc882cf9512c2c773da337ac33ebdf0e64f18762479f0901c79ae9dac3cf79fd372fcbaf58a645f9e47b7476a8ca2ada31f043d261c17cc45a6b6c27021f045caed3238244bdb28f467bd2c051fd08cdc71265ed978f279180e9d09dfdcc6ac3a7d3fe41c927975c1f8b6ef357ee6d7088817baf587b6715f97140681e6ce358bf7b0bee15e61d27e5e51756a401fd222f306dbb13c4d3e19b925a9b4f294a2112d880d108cefe888d8cad5828bff2e5677ba837b25bec07def9d3ba7b56fca103ba1f19374dba065d1719f7eac6dde4221f6060eca45b8240e7fb1d2b5cdc8afcf8c7d793e5768540baab8d4ee1a2e5bc48a0b6f99714a21526ed0d9fe482c48c4ff56e9d89b6741e3dc65cd3fe6ecc2000b9d900a9e14a41fa72467440021cd6e9de1cda986f932ee113e483d503cbe34901397e62e1909d61aa09b8778563881e6477f20b1d853559718bc46f7c978df67862883288f0fed296bbe77c023e340ae54df455470cd936d7fad21056fb5d275eb1c19f460c28f50e2d3a53209298ba1845754e70605a88e60fabd651b3800c6646c0b2a379abccc19ebf0df419be31f77c9749935b25b685e68d053da0b561190aa2c5d34d5f53970bfee8246ab3c60171cbc59593d15758e8211e12630e8c59685f5f003c534ff1dcf26db8d85f6c4c22c89d05045e6e3712260945651b2be84873fe9e8fd24305aa6ee666fad24f2e0430dac63ef063dbe9976b01085f256647dc52ac9cc7d420087def5c44dd13e3a4eaa99bfacb3393f53ee9418273d8bed285d2600f79f4e4da5c17cd93f68c5ecb5dce33d336e3899113568447067d2347818113ddb95afcfcda4ef24820b9efc98fb4a9c694357ecaa6c68b6730bb6c2cedfd570fa7c3119aca4c0e8e2b29d6b65707982a879c6bb7f7652d5283dc8c7a07f213cbcbc7b0e92eb032ff86a48faa047241eaf57d8c129cc8dbbb2c231f8f0cbedb1444f65483b2f7c8e473b3a2e2313a22f3d9cd46eff96c59adeb2f755aed32db8f0512c077540476d1df1a7a6f4e7d87e5216aa596ddef90e808cc285fe69c7fa197b90a863b712b583d9bfcf11771872c1c7f9b2e6960ccce757a87e15f1ce2a537c31e5640940d04c27e3e9d9496580ab3e1cc0ace5bd37f633d73cf49452cdbe2c751be521b743d7b3bb051b7fc58a1c9248233bcfefc8adb97425863717048f923f02876961b1096fcebc1d038f6311a7fb6d0fa491b1249da92f07271ffebc0067bf20aa9e261500fd846c55c9085f0baa7956fcd17f2d82d6255193897368b32a6242e7dc8b571e7537f85257848243d527558ab48bff5fe0717dc8c623fbc8b39738f9f070fc5127113e554cbb54b1cf1279409f3260bd264648177464be9e7fa80421afef1670375eba85d933618eb226c4da6b7f7de45613a21f2f732b2e30965a4d1094f1a0049bfa97af7a5571da0978b7911e0b957a69eb7ebbee67fb48a9a178dcb809476ec52a7f5afb4fd90ac3f7552f71b901ce69efc94d2ac59a5bdbe78873433ebb0603c6d4e4a8a4a19da77c898818f6864832350568c2ae4cfcef11a22f8ced90a9b723229af60acd40d8894779e7a36fd44c7137cd5be063a8834bf568df8252d7e7c9a0e6bcb1f53fcbadc4b2c553a0ee15d19266b0a7ad59504ac3d600e7e37f9bf244d0cce1a14c4b97bb2c5cf33952ed500980231a221392dc34af46878e5c896cc8653f6753b55e0391b0637cb313f5e113c6372785cb7bb74a3981e4fe289bb6b1aa2cee7549ff2e56f6c81cdf47d7cdebc295ffdc9d4501c7fa53e9b6ef065ad63dcecb03ef6a62d808d3573398f567e848f3c9caca0538e545d85935c3ad7d9dade98b3c6a38406703bb6af0ad1d9858284b4c6bd070144ec24d7360b8c351c837af416ff3c9bae086f3c00130f47d8edefe14454a015e9f3f0be2b65569b95d783a9aa80fd3852e6f16e4861ebfb8e15cfe724cb2b4d1ca17b61f9759ad85d6c87899fd245569092d5f13699fcc7c2c6e94d9370124ed55089a791eb60995a71c7352ffd085102a8c73ca5c08f5c31949506f20a3c3b5096c35bcc1e56ff0ef7ca1db159f13476de5d3e420bd63a07cb7114fdf02e608a1c7c5646a37804bba2c1532d20f127888b95704bb238a2f403512d008e78ce70ae25dd69217303a256054e9c4f3e2dfb643f9b3da285cdf210a39978e9b28545358f5347e44c74aa4939da588dd4355c817a6958f8c0bb4f1f25c87fae46e69e0561a2ba24f6793618b89da0e82955a7fbe3021d9745ae2713b62cd82065e16db758893c49d3b9c1d09247fee4ec2b8ffbd3aa15d2030e8654bd035d341a14c61d6686e435b393f03ec9cc78d00ba1a014bd0c7ee014976d3018e12e5d90beddc4c6c1a196d569160c5133676de8dae656e0f10c150eb1f0e69cab04feee2274fa77a1464132c286e1f542daff93d0b2ef10fa5810e5697ce3b5d158398db08b04d7826bc188704973979168faaa0aabb672b7652801912a26ac3c28c2249d64e99a13a745725cf001d16b42c548f381357d587398f6749ca587a86fd67c0278f0ccb88105395253450618d4cec9eca04b6c5b8587425db00ebcb2360f4948d8f4a0c94ce1b42cd6f1ee0d1c"}, {0x1010, 0x6, 0xd43, "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"}, {0xa8, 0x111, 0x5, "a4c00fefa7498a0e54b47cd105c97fc5b3044c554cf7ce664b911c60652f697082e7f7073263a7171ec8c38a0db7a14f4d403eb8fbfbc653aec844cfac4ddfbb24c172e1a952da9fc303402eab01efb94e3cb9f2fab6dd31ab884f2cc9ca20c1e0cb5a424d55dc288a2ef2e33ef5ae0824de4058c7d14c21f0c5d3aa8d706695ff4a7386f9d1add52184ff585b9784a61b47bc035d"}, {0x110, 0x194, 0x4, "7b36e03cdc7a1ded033fc9a459187c9c5232a64c5a18bab11242a91bcd03d49fbda1f9630e9a777a0d080bdf8022fc85cc382c02e16b6d7e3e9cdf7ab4da9c2250f58b1d9767b9993228db44b5b451de990c91897485baca4bd54a562532f57b45b3e9fe2e6ede0acb54e47897d0df8c7f73244edadfc991e27407eb12746d5b517fb429842d517ea1452fc8a0b583710e564592942b603934cc800d6125ece9ff772562033e5f002162712ded1cb267f0604173276d34537dcafd7fb8a89245b229fd3df231d16d7cf076203fe6633eff433cdfee5843ea2edde46a57d89e87256b5afe3becf0dd18db481aee915ebc132858b987215ceec7"}, {0x1010, 0x1, 0x6, "b45431aa2fd70fed87b44bdf243eef73d2db456c8ba31ddbd9c3b31c2cddda0c2b5cd3009ce050e465a9a493182f90195477f63b49fb29a8177c27824a86bda47dfc735ce72511866a3dfbc41b11f97beceffea34a534d4d6cb1e88f3f7492197ea17fd1ace8908d3a753b4627e9b535442fb8f504f384ad6ff27ac2cd68e931ab8594b5ce4db40ad24cc5a302cc4d4594d5c1f4b64c30d8ccec9c3a869dff7722bf427f5a0b266df8b3146bfeeb6e90582003314a33225a5d157995b25627ff4fe8bcb27b8807fa9b0348386d454aff7e4a34c0981cff9951dc50a857e626f74a6f42957062b2f268f222f828ecc8632456fa01409fa55caaf468cd4d827e8509010c61c120f207557266188a1d0f2d6daf0b0edbdb605e1a517e6ba1040a49b62030229416d20fbe18b8622450bc1b65f22d20218da6238ff2190b29177a049f4d48a4116a8029017313ac2966ce79a8db94b47d31180577a3f4f0bd9648dab7c8691b904d9217f1c6ca642c91a73966d9b93a82bf2a39a807780fe6e58aaf9953ca307012fc908df01477479aa115338df101330cea9485872661c552c2d9632c3c7b8de8740b1c81a1ee1820a991009745fc49a5e071c31ee50ae6449e578e868fe23c158707d3f5e5582131ca4c4e2ac885445efd0fe6ae77b693bec5fe290378853f39612e61f291d319663d6c89df9ba3cfa42e33ffc9170fe22763edc527945a016201168a98111a353de2bff8316f40b43feaf0870d1af85e3d460d6a5fe1dc7c58cbd67f5938e2aaa0484729a578730cc2f4b67a15f057ea49bc171aa0de1efd3968ee3e7d8478c83c3fd3bd266ea592d991478d2a44e17f9de082ced985c48c8d1e9fb9c283192fac0a1ab5fd35f5bfad286cdaa5e2f642079ed29639d9551bd2a390e34d9a903f76fedf278f8e132b99ba140db4725ffd043e1e11a6e9d827459355d2804b4173bfceafc961cf87cfdb35e1bc0411e063ab3a28328068f1e4da321be6fe650df39b7ae387477c94d5c0c3f7f94db8b2c10b6275d1e3df96d3f869cf5bab517a82e1045ad3ebf72ed16f122e1bfe2c187019dd5f2bcb5ff5aef61127e6133416fa51b7bb0ec959df8d24bd5f2b032ec3715c3d32a8b5e3eac8bc3986f3d045883ea83cc4579f2079f97bf11cb2cf028fc8d09793b66b3be8d5bfb45ca89d0e1944b2ade16d15a11fbda39613e3a64bd1fa46c248d4ca8830c585e1e6b9f442cfff8eca4e32d9e7619feceb39f0382e241e39f6c13ae620ca0c91bde78493080747ff2303c4c459fbe2c1f63383fd58c4a8b97b9e2c6f33a07eacc2bc8720609bc5cc7ee6f9a65b670a404a0bf9c77109d8bb9a8578337d5fd461f227a787693e720be5a001ebbaebb00f13db235f0e4bf27e4b13365177eca6d25150e70ec5ff4d62209502c3e513a3be8dee56810c17cc45ba678610678517467b2eafbded45381aaadef670c8a99a8f68d546cc1d1a5b98a946429eab95f4152b9055115c50f43ba98c5d703b2749c5cb20346b86d84703a665c8d02460b35baa530f44a31cf6053c2173510e0a8d04f2b426c0acf141a7a07308016fa281bfb920abf5c1800fdd05ba79430a3d6fb07568f4d4eda00c459c35ae13b563b96bc26b92281ad8c566811f66b2592c8d004737fd75ebf25104163ea4a3e257344baf34b008752100e78d38c59b15c67910f350e6cc02e039a64e4cc07f6ae7f429df04ce7ce0a0b6e3d54f82ad283d0dfdcdcccd8a7dac4610dd7bdada41d5be54a0f728bef04dc2f15d72a2c464a28561e65e045a6ec3048b81323cec9b0d5837145f6fa2c380d79af483c9559736604d273733c19e50f07242dc5e5f61ac83ccaa4fd4abd911b6d57b308dbe328156b80c25de0dc41d5b57b07b6f3d060f20b29527cb86e508ba4b5e7a50bffff6d0c589c6523b5c1435d36568edd246bd019f2cd8c75ad7a642f863af3c61e0fdc73e1ee524dab832dd4c0fae705d2ed3f9a8376838395c2b49490af3d4ce8caedeab88753a94b8e3a85cf9378ba29b2fec425df0d50b8e2fa5ffe5845345c3a0facb5e93dbfcd96f67c23061034dcbdb4b5af6ac45299c016e04f48025a7e00ad4e062d03cfca0fedaada51036a27835cecae4515fd591c5ab6914a23f33d52497b48723f4818299073d9089e2d664e34e481d6e7f65f6338f82727bd89753a64da3420d27e1ac9c3b71206cb647b56c985375cebe9dff105bd61343c8184a12bb97a7cdafe2f7cc8f02e8b28104aad953a708f434a30c11807becb33e5550aaceada1eca9d89db14e75b3e48ab745163c4bf439833f80952edfb25cd8b57ce04c697472a4e575323feb3fa54de8f6d512f3cf73f7802aad6d86d86d1eac857799c5c86bd3be12a32fefaed2c3f92f400989ff97b9ddb0aee9e57e6d899aac2834def683b181fccfd64572ed85c3e8445fb4eb0a889c7ce84d6d7daaa50d8b3a8cc1c2eb8032caa8460b39a294db0b9975974bf4f957d465655bcd0bc28fcf05361601e1c74ac8e3c9c2a7b846228b0a7047e9382c69a2828194765525f89cdef34299043a81452fdaddce33fa427f47cf2da710890882628011c1a31adf84c269651f42583c4945213952ed1e0aee08665c8ecf8b9f2fbabeec748a76e6a7303a3a060d4ea266109d01ae289fda62a9e1e20d108f6d58744c42f87c3922eea664648328fa2290710871bc10bb3a62ffadf7b9491e7ef62c07bb1bcc647f694c8e1f18ad80bb9e85041d0148aa25bba52a2fec94f2b9c7cdee8d69ff91c3ef0006934f51d216f1e5824e4d6c40d057aec760b7bede88273fc839f5af4f66c0af837d9a0fe440ce5a355c1bee07d4e084e3c32afa25dd5d13f150fe0e71208aea45fe0c8689b13a7dc25f9358ad5dbfbc479307d6ed55796de2af46fbfe09c285d6cedac53406d90a45b1f579a3f0d3e838eaeede2ed682b433cf5ef4dbda4d532732fee40c2a075c0f2521f7469314528c4db77e18ea02f4af35dc9221f42f85bdee8083510e3836f74e765761dbc9f57958a8857344d6f5930f7c86c0f280af4d23f035f13b0994e66cafafc3ef8e86f9da3342c5fa33ec471bb58529064d1e9654c5682b164a862eef6d9dd10f58bdf496144d508dcc1e01f1d1409dfbcf8953cb1b956c906b1542a271f4b7d7d92c4cfbccd39053ab20c534ab2621bcb1a4173cd35ca454ba672a08df4297453cd3a352f191900fee3be10dca399a8c4c7a49ac2ffeb838808d03a022c208a16194734495c6633960236240cc1cf35a86f39a3e17b858e9254fb3549dccbee64d2239c1d96261b1ef2677c35b9b872e2b5faafad56f10f87fc9bf6d71f2cfe674c2ea7327f73be18f6cb8dc31e38615984b698e2f7ec9e0cdcbb657ee22b5acfe9fcca626acedf490b9ca6ea49c4ffebabc38125ce306b974b0d3614376c93f3a50ddf4347a3d739e89a5a710ca8f48b1f7eb181d8c7e0e4054259a09d390170fb37a252451075bd00873a37ae483784093f8faa362efb69e691faf19701affa4b16c61dbab03c505b7583b1eab16a57e3e91cf23c7f521c4b3918244666083bb5e9bd086f2da9b80c12246d444c10192caf3bbff724c2e94f359e256745e553276a9364021b780056f1a6ca0b485f7a26827c39568dc551fe372b0ac0ced4a094e5452fcf6418029ed89a803ec337f96d1a0d3d1bea3300b248392b1637067b30e23d4f5fb4d6e0c711abe7be31359d0bac0f7f9b0a9765e51cb4b35df4145d1e0de70651cd4424daf7bfd52ec2b7832d46ea76b5bb2c6fed66bc0e7478c22e7f2a626f18aba896da77f32561e5116926282dbd941a544d0aeaec69e565ea49b3d45a39735768003f08a012c2bc7bf9dcca2faa8755f4092c857e9fadbc04c6eb9eba17f17a7c5ab31799b36d9629baff1d45d96cde60c59eb2408eae29aa52b7718c411e8c2280d0ccf46076e6daea152b26139b2082521aeb090e3a6531abf8661070950ff194c95e42a23f36f2edf8541c5ccadb1229647118c61578c5f24ee63f39626bb8876e5171dd6cec89eef218b27aea14afbe754f669ea9b326f523923916562cd926bec324dcb4bf0bce2fdba52d2ae33cdfc0f123d81838575ee44fe56bd5dea0999c19298682839c8396c1ff629bd06f992010418c911d3799a6b964809cd0ca1ed7599c75c6e76b88291ed7c9602833a532d14f1252604c6d97dd5aad2142234b1888bdfaa256cf7ef04cb75226015444cba477924e1d8c65f6a73c8a6956af0fa5d36fb8649d97a09a6cc488486d01b757f93bc12ff199ceb8ce609d8d3418596ff9234d3792b4c9d1790355090f7027d33a7d91a97857c611c78d6b2400dd92e94512a74671f94adb7810469f8069e826c45fd9a3df314df4ce61d70cf73b7daee82303877fd0a9eb5be86bb8b48803c08675c84375284fc8bf2111a893ccabc0a9acaadac9cc53a46f52304b1906285c5cf88c22aa122338b34fb73892e393d177cb2f1077b27dd150794be9ab30aed0b723fa5557343168dbe1cec6a3d2fe71ca90805fc906a4a3a3f6806acfd18c671074b2accd629c6a565e277e3718fac6dec90d53880d5809974ce5a7c8a81867cd4c0beec6b3ed7ce753092f6a363f4c8b799654f590a9bce11df23595c68c6661e1e42126cc16cb0cdbdd23f0f3dc3f5b1e9da6316abfe6e67bf4a7d18123345c5318b311dc689e2bb286bc711faf20835d304e15723480316204c1181a0a1857e4c0634b38d4d9858001c11beb2cffc077bd7fdd8a206b4aa7dea57dccda2fef76d13d31d2882b77acf6f7db4558d0b4f6fcaf1e5f4d7aeec2bc323ae5d796d9a7e7101c65b4c9b4dfe7403cbddf769f0f37c315981a8745000a925acc4804fa4dd0a7e67a01540099dbb7a232aef0429490e6df46264a1b56dbd36652584dd8593a3376ce3a36ecca4cad43e6905f8bed3961b89b92781f73790aab16d9fbeaa6e145aae6e1a7ff0322c4586244319153de9f8b4a4aaf7c49eee98f03564f9e080ab39c8f47631161bac30fb4add602d7a8db9caef52592c64bf567a636bd8e6d60fdf2aef29d4183ad46db2c99bbe257056f7280cca5558dd89810c5eb43a8159b5dca8b78ebbccbdb6b6027cfdd7800495e0aebd3419e0dd86ec2d343163b9197af09ac42eedbd82502cdc72cc3533cae73e1fba4013edcb606680328934e46907506d47104f859e6bd1fcddf2ca980ee590957412cda0b7f77aa14e493d678a306f4638ce8f91c1d01cdc86b3037fdd5507880656d3c7c42903fb5f325761ad8160f2f0ed56b3cff6f900222f1fa8334040fca6299992d0565b36c42ed58181fe383dbc445b7d6bc1bfe4ee851c719c7590828b832113aecce04f732fb559ba935c3bca326913b0092cc8d7510d01e57d3ba3122fb59a1dc8aa48c1bbe5ab584764e29194b73ba44830e626d05769bb0f90b5ab899da373b65eee38466f7fe35cc13500da4086ead42ce400266cd3e7a90fe643859f9af017121fc9e21cf5c31702a11b6d02d6b31d9629f129e34d947d909c993396ac0800693e0fb89166befc0404a99dfb3b58927261723bbf08e94b5e73b64b276fd2b0ed719d6270179f42991ee30c6bcdbcc8b52d714a51b83f8809114cec780c7c18ace97f84aa7192b072300bbdd0a33642de58896b81c72b9e6755c99fda8176f3a5577990c99d1934069b4842769806d421392e2d1fc8fdb257bae630955b27916d84653d29f97c1add3198cc8cbfce29ef0a3f7858ff672887bfa06ce7d7d1e76e514cb5d7a1a51de9"}, {0xd0, 0x109, 0x5, "7ab94273d01d0a138cefcc4ff99e86e47bc57d16bdfecf2a79d0cfb83c8231525bad68dc1066e0f79fde7483c46248f906ed7f2071035d759bba4720125cfd291096827ce2f1f3749a66960a97f995c910b95c73a880c56d4bd08175b232d9cedd01bcb52411cffef5d9c5d99ed016acbd18bdc5f315027118e42689b26a6f74e375ad7ff15652fced4854a8f6e95fd4036b322f22cd403aaafb5da9f51fb5b4b87558d0d02d711eaa9b049dc211e2bd50ebce7c0bae651824"}], 0x32b8}, 0x84}, {{&(0x7f0000006d00)=@sco={0x1f, {0xffff, 0xfffffffffffff564, 0x8, 0x4, 0x9, 0x763}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000006d80)="9351e9d2254f3c97d90680c81a77adf61fb7cecbe791806b5d0ae1e51a8f48e013ccb1c028cb42233bfbb77bb18c616591f8b18b33e823a256183b0e984981f13e289daf08b0b2e7ab1541c518db984a0b4fe7a04b9cb456fbec6abac38432130fb982f169d318e2d569dde6", 0x6c}, {&(0x7f0000006e00)="abb03faec7f0bdcaed32cbc8ed2853096310bf87df63eb78494dc15e7eeb25ec0f85e0adf1bd9ff68280a4c2cdac369ba10c08fb39a87b4c8b6aa68caf210cc454d3a165ebd2e713422198e9c3ccbc00d6e6b2fbc6e704d7471a76715dd579ca6d5a032e76fe354ca1c639362df0c1fa8d88f629daba8ce5ba5bc81a1cc8ad871ae39ff744af", 0x86}], 0x2, &(0x7f0000006ec0)=[{0x98, 0x116, 0x6, "3f6ed92dec78e2da50b7c2b4aea0570fca93c82aaebabe5e05a4e71de316877796aa732261224909773fe88163d1bf7819a1d2f957f861eb38ae0e3598bdf6c1b8891e0f98264d9cd233193f30150eb10d518db948280be6133dc885b8488021dc3756f298528bf8a00953d90a052e6d74ab8905b78d929b18ddae036987129a7d8e"}, {0x108, 0xff, 0x84, "7d8233e078c362953dd4f6b69d6ee4cc1c8beef96372540699fd6fffc433d009ab375c54280e96a5a55d22ec236ea115815fbb6aabfde567b123fb7e0b914392294ca66727adf9c1d3b449d72c966ea478bf461fdccd4614e209ba84ff2942f2331272ae80dc442a01c92f09480b731ba975623848ed2e0ebcbe3f560455cfbd8027fce0e863f8e3a13157332087ef26cd4bf3146756d90d6c0aa92c81b09683fc3b0064de9af66ca64b218c2109632f79b4ed079b17427cc38e0be4a4a79ebe0d7f4cedfbf6124701e354ec56d6fcc79ca95f9adf76dcf6df011166db584032ae6737efa81ee87204b096d98524e322eb19fa1f35d45547"}, {0xe0, 0x10f, 0x5, "180a4c09c1918a19f85eeebf7acf6ceabcabd1908074157de8e9377bb64a7d1628dbd69aae0f085d95e9daba88b8021dbaf0df4592e1ae877bc600d383e327c1329e6a319cbaaf54e3efc46b34e44df53a0c2e478b98720a2075a75617bb5bb4fd9ff4119a6d3c9663ae7c51ab60de94401b6ee7285891b56b70bcb86a18386f7d16c8241ad44151dd56281ad011d09366d9f8a6d068d02bbba7c990f601b993284e218a658b26ae3243e0597272901184322a3f9826dc2702133ba9eab6ea495d54e44c4afffd50e7623de722ed"}], 0x280}, 0x9}, {{&(0x7f0000007140)=@in={0x2, 0x4e20, @rand_addr=0xfffffffffffffffc}, 0x80, &(0x7f0000007200)=[{&(0x7f00000071c0)="96b43d06b64ef93b57ba26fde263cb800abc0d27d5c20787b5e163339cf22f2c4ea9c7003c", 0x25}], 0x1, &(0x7f0000007580)=ANY=[@ANYBLOB="a80004000000000017010000ff03000007feabe57b9bc9fc5e4ac89c2164fb2700016e92fd3705122d8d4761945535f32d9493bd318a2f9c694a496f412393a4aed6ec6a3a5baf2c1297135cf60794d14a562d62cf291b84f2aa20d64601d613163be3d7e7a2f7026766a10639066373b021b50b15f194437c7dcdfeefd858932b597f99972be7c1c5098286654d5c62ba5e623b1d3ace01a5a0923c857493d45f00000000000000e8000000000000000f01000002000000796e3069b6420a9c64a5a38333b20784c228a6560b5c471c05605fac959cd17b58bbbb903e6792b7df6d42bc70a81fbf0c84bc810f54939e3152e812c0da493d1791a05e698866e47d3792bb8adc7c5a372655dd9949df25360069ce6bceb334abefdcb4aca5e300873477a87dcc8a7d605b9b2ba1216804c5488edb36a8733a40a89d33cad77f40331dfa3527ad3115ff4b112a2fbb1710b67ed72baa6471be922437cf772632e93bbb8345a7b8eea3212c5554f6534b1ac3171e7afaab0566c09ebf2f3952c961b8fa00c37992b1766e0000000000000070000000000000001d010000000000002c5579b6d92b170e8140cb3595195d80b9d7695411c7969eab58752969168c3e129c5cfa1ce9ec1a5a4e7719ce5ac55b0e10d1dfe508ee6a7af8e6bef11bdb5f1678941613c4c65f5475de7675bab7a6bda99912b95937a48773d41bb400000040d563c6c3e43ec3fad8758ebcc5e5ca75a3375e29691943339610805dbeb3b818b232fcd73ff293c7d01b47c5366343f66e098a37cf36502ceda1e4f401ce99b399d0f5e5a4e918d1bb98ee43f83900f1c29ec698e10ac89c949d0d3bec380bd9ef5ae0974b54d912d1485bf9e220e6fe52f7ff3eb2e87759f5ce02e102ba57395338f3b63205d5a61ff8d80253d1160eb28f26555df6a23a241fcd6d790c5a87020378bb9c7a62a8b071ddafdffe255c1ec4017b8290ad14589e330e3324d0f242f16f1c35c0666247173452952aa4768fe97a026d99a85e0551ecaa3e1d45f9eba0c5373ac33a2c22f7f57473b79adfa4aea21c5ab70bc414acd338a99fe50ed19fc362221cba43942f7a2749605f7e1812ef78ec4e37cbddb534c5615f39f76f2df35a8533716e"], 0x200}, 0x7ff}], 0x4, 0xc0) sendmsg$nl_generic(r2, &(0x7f0000007380)={&(0x7f0000007300)={0x10, 0x0, 0x0, 0x40300}, 0xc, &(0x7f0000007340)={&(0x7f00000078c0)={0x390, 0x2a, 0x710, 0x70bd2a, 0x25dfdbfe, {0x19}, [@generic="91eb933676a014cc92d67a8756edeb59b307bb1f44ea2d838d2d1f680dfd81075b13f9b744043df0338d713ebffc014433504cd29d3204d6527077e2db20f67d3bb2c1814bd488d786d894ddcaf2056a01ceab2e65fe6bf8524efd4e773d95ba54d8cbc5fed7bb2a18c14c9f86c52136de95ba7d11967608bd0b1263f254cd17b9a999caa7210fc9bd24c3fa3486eb6d1d277e2bca1473148316b3da5864d7030a534c64b05ff4c8f88bc0b4aed5e5a2ad122cf11b0700466ede29d11a1179b74c570b923b332a56e66e5e4623bbc12b011ded3a91ee569212282772ddaff08f9849371d0f02deb435", @typed={0x8, 0x8b, @u32}, @typed={0xe0, 0x2, @binary="c55bd36f3ba4fd338fe8834484642b5b45fee5639112769ae503e52bb9dbdb9c232e7450cce500ef0849a4efb106f3303c48ca22e752d50a51da570599a7cb7f53ead4a56876218e086dd63180c3624d8fdf11d9108893fcf8db1120c68431b9d0810604dd24a4d53338f579f8983378e416b21ac5c55b224083de8f06982df1959b65dccf13de75e57b727a56ae2245541dfde2f4b53c25f507a2dd8ee173e149c6aaadbb296a42deda71a3fcab6a014c9f0716d1baa04f9b1ddd714c581312fc75ba26780976c9b496120462cfa6e807620085536d18c37f234e1e"}, @generic="c0687edb7387a68aef9f697ce68103fac437a41595f06d96a7f0499f39629cf1ca7acf68754cfd54c1896d270f1bc55fc823e925c2cd7c2ef5e96c005a0fafd67faa724de3b2853e1f68ba98cadc9351768fa60d8b496b15673ce1c5752f3ef0e4c81a37a49976aa15d2723fe7373e9ef0039539d7bda7043a7899596967f663771a21b68b6167757f56abe2cd3f0a6e5f3c5eaf266deb2126dd8e4bee313c9d706917a3235884c15c6773d32b61a4cb31c7e70cdcbeab33d4f2212d33fba182aa1ddaf691bfbfa84190f6d54e0cf3", @generic="9b14a8fc336700fd33b23d69fb83252c646053b6577fc1857ab398ee5eef891bba81cc896b5e44e06e40abce0af0b6b2c587c37f88f403309d4bcc49a14542d5eb948f4ee00a62f3aabcc94b3163ef8d2f2fd64a9f437c4a9d5bcb2a7ea3f211e8ad9247660fcd79d5c532a156f9891f09588408f138ef20eb89ee94a09d2c12bd9b755590342eaf0103d0e7eb95302ac55e84b1c467038242d2f4786ca318c7f4bff79a57ca39b9df8a1181f41a644cd705757bbbdb9423fbdddece9352a8750085489ed7015b833bd79ca91aa7928db0ae7b0b6eda2970817e"]}, 0x390}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000073c0)=""/120) tkill(r1, 0x1000000000016) 09:37:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\bc@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:48 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) signalfd(r1, &(0x7f0000000200), 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) flock(r0, 0x4) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) fallocate(r3, 0x0, 0x0, 0x10000101) pipe2$9p(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl(r2, 0x72, &(0x7f0000000200)) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) lseek(r3, 0x0, 0x3) write$cgroup_type(r1, &(0x7f00000002c0)='threaded\x00', 0x9) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) lseek(r4, 0x0, 0x4) [ 1081.513941] binder: 5918:5923 unknown command 1077961480 [ 1081.517584] audit: type=1400 audit(1549618668.382:59): avc: denied { dyntransition } for pid=5917 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=process permissive=1 [ 1081.575228] binder: 5918:5923 ioctl c0306201 20000440 returned -22 [ 1081.582790] binder: 5918:5933 got reply transaction with no transaction stack 09:37:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @local}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0xfffffffffffffffe) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2c, 0x4, @thr={&(0x7f00000001c0)="b974b533af8e94460090eaeede9a270fa7243e90a068cb0e269cbd30c4648bda2802483e01ec1f8eacf220b4b7136e09601f646005abee31231be080d3982be884d3e2b0ccd43f5b4ef1486b57", &(0x7f0000000240)="35916a361de8306a0bf5ee1953a6e0eea5d7e1bc3e4d7299d3f1a9b0c4002455ec8da413fd1bc3e337cdddf76a151b06b32ffa9137399b3bf8e721d6170a35f6ad3ce50936f4f0d7d4011f43628576a6afac711e27b456734a1b581ab1d59b32baa55bd6093240ba166e8fd3124cff6f56a7409de90e0f070edeee"}}, &(0x7f0000000300)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) 09:37:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffff9c, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=""/99, 0x63, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x10, &(0x7f0000000340)={&(0x7f0000000200)=""/32, 0x20, r2}}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) pipe2$9p(&(0x7f0000000980), 0x80000) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000480)={0x0, 0x2cc, 0x0, 0x1, 0x0, 0x0, 0x8000000000000000}, 0x41) getpeername(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x80) timer_settime(r4, 0x1, &(0x7f00000003c0)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x26fb, {{0xa, 0x4e20, 0xa0, @mcast1, 0x3}}, 0x1, 0x8, [{{0xa, 0x4e23, 0xfe, @local, 0x100000001}}, {{0xa, 0x4e22, 0x4, @empty, 0x5d}}, {{0xa, 0x4e24, 0x1f, @empty, 0x4}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, {{0xa, 0x4e23, 0x4, @loopback, 0x8000}}, {{0xa, 0x4e24, 0x100, @mcast2, 0x10000}}, {{0xa, 0x4e21, 0x7, @local, 0x3}}, {{0xa, 0x4e22, 0x2, @empty, 0x20}}]}, 0x490) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1081.582800] binder: 5918:5933 transaction failed 29201/-71, size 0-0 line 2921 09:37:48 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='tm\xf5-\xa8\xd2\xd6y\xa4\xd5pfn\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getegid() lstat(0x0, &(0x7f00000004c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000011f00000000000002000000b6b2ca19a37d149043b1cd607f864bbcf0055a3dfb605107cc0ceaa03c5af357c5fc046ab7ac7c812937948fa07c990c2771ea53", @ANYRES32=r2, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0) poll(&(0x7f0000000000)=[{r0, 0x402}, {r1, 0x28c}, {r1, 0x400}, {r0, 0xc0}, {r1, 0x1110}, {r1}], 0x6, 0x101) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x2) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, 0x0, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x5, 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x4}, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) recvfrom$unix(r1, &(0x7f0000000100)=""/3, 0x3, 0x21, 0x0, 0x38c) [ 1081.663924] binder_alloc: binder_alloc_mmap_handler: 5918 20001000-20004000 already mapped failed -16 [ 1081.675143] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.683488] binder: 5918:5923 ioctl 40046207 0 returned -16 [ 1081.691311] binder: 5918:5933 unknown command 1077961480 [ 1081.691322] binder: 5918:5933 ioctl c0306201 20000440 returned -22 [ 1081.695320] binder: 5918:5951 got reply transaction with no transaction stack [ 1081.695330] binder: 5918:5951 transaction failed 29201/-71, size 0-0 line 2921 [ 1081.698407] binder: undelivered TRANSACTION_ERROR: 29201 09:37:48 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='tm\xf5-\xa8\xd2\xd6y\xa4\xd5pfn\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getegid() lstat(0x0, &(0x7f00000004c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000011f00000000000002000000b6b2ca19a37d149043b1cd607f864bbcf0055a3dfb605107cc0ceaa03c5af357c5fc046ab7ac7c812937948fa07c990c2771ea53", @ANYRES32=r2, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0) poll(&(0x7f0000000000)=[{r0, 0x402}, {r1, 0x28c}, {r1, 0x400}, {r0, 0xc0}, {r1, 0x1110}, {r1}], 0x6, 0x101) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x2) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, 0x0, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x5, 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x4}, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) recvfrom$unix(r1, &(0x7f0000000100)=""/3, 0x3, 0x21, 0x0, 0x38c) 09:37:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1081.769086] binder: undelivered TRANSACTION_ERROR: 29201 [ 1081.826188] binder_alloc: 5968: binder_alloc_buf, no vma [ 1081.837801] binder: 5968:5970 transaction failed 29189/-3, size 0-0 line 3136 [ 1081.863431] binder: send failed reply for transaction 409 to 5968:5970 [ 1081.885370] binder_alloc: binder_alloc_mmap_handler: 5968 20001000-20004000 already mapped failed -16 [ 1081.895734] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.902033] binder: 5968:5970 ioctl 40046207 0 returned -16 [ 1081.908188] binder_alloc: 5968: binder_alloc_buf, no vma [ 1081.908211] binder: 5968:5975 transaction failed 29189/-3, size 0-0 line 3136 [ 1081.915464] binder: 5968:5977 got reply transaction with no transaction stack [ 1081.915475] binder: 5968:5977 transaction failed 29201/-71, size 0-0 line 2921 [ 1081.915780] binder: undelivered TRANSACTION_ERROR: 29189 [ 1081.915801] binder: undelivered TRANSACTION_ERROR: 29190 [ 1081.915859] binder: undelivered TRANSACTION_COMPLETE [ 1081.915865] binder: undelivered TRANSACTION_ERROR: 29189 [ 1081.966403] binder: undelivered TRANSACTION_ERROR: 29201 09:37:49 executing program 3: socketpair$unix(0x1, 0x10000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000140), 0x9e, 0x10001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 09:37:49 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb9\x00a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x8, 0x10001, 0x2, 0x3f, 0x3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={0x0}) 09:37:49 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) signalfd(r1, &(0x7f0000000200), 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) flock(r0, 0x4) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) fallocate(r3, 0x0, 0x0, 0x10000101) pipe2$9p(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl(r2, 0x72, &(0x7f0000000200)) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) lseek(r3, 0x0, 0x3) write$cgroup_type(r1, &(0x7f00000002c0)='threaded\x00', 0x9) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) lseek(r4, 0x0, 0x4) 09:37:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x8, {{0xa, 0x7fffffff, 0x3ff, @remote, 0x10001}}}, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:49 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000012c0)={'raw\x00'}, &(0x7f0000000040)=0x54) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4480, 0x100) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x21, 0x3}) [ 1082.400333] binder_alloc: 5986: binder_alloc_buf, no vma [ 1082.412128] binder: 5986:5990 transaction failed 29189/-3, size 0-0 line 3136 [ 1082.421753] binder: send failed reply for transaction 414 to 5986:5990 [ 1082.431766] binder_alloc: binder_alloc_mmap_handler: 5986 20001000-20004000 already mapped failed -16 [ 1082.441325] binder: BINDER_SET_CONTEXT_MGR already set 09:37:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:49 executing program 3: r0 = memfd_create(&(0x7f0000000140)='fd/3\x00', 0x0) fchmod(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000180)=""/4096, &(0x7f0000000040)=0x1000) memfd_create(&(0x7f0000000000)='\x00', 0x2) [ 1082.446854] binder: 5986:5990 ioctl 40046207 0 returned -16 [ 1082.452626] binder_alloc: 5986: binder_alloc_buf, no vma [ 1082.461124] binder: 5986:5993 transaction failed 29189/-3, size 0-0 line 3136 [ 1082.468893] binder: 5986:6000 got reply transaction with no transaction stack [ 1082.476189] binder: 5986:6000 transaction failed 29201/-71, size 0-0 line 2921 [ 1082.488760] binder: undelivered TRANSACTION_ERROR: 29189 [ 1082.494247] binder: undelivered TRANSACTION_ERROR: 29190 [ 1082.517174] binder: undelivered TRANSACTION_ERROR: 29201 [ 1082.522827] binder: undelivered TRANSACTION_COMPLETE [ 1082.554341] binder: undelivered TRANSACTION_ERROR: 29189 09:37:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000400)=""/224, &(0x7f00000003c0)=0x1264) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:37:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:51 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0}, 0x20) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='\b'], 0x1) r3 = perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/73, 0x49) ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xffffffffffff0001, 0x10000, 0x63b5, 0x0, 0x0, 0x2, 0x2000, 0x8, 0x9, 0x6, 0x0, 0x8, 0x20, 0x0, 0xffffffffffffffff, 0x80, 0x7fffffff, 0x8, 0x5, 0x0, 0x7fffffff, 0x6, 0x8000, 0x4728, 0xcf, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x10000, 0x8}, 0xffffffffffffffff, 0x0, r3, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2b}, @local}, 0x8) 09:37:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x101, 0x1, 0x3}, 0x13) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000080)="1eff45a158ce05f736853cf03deb4ec6adc09bbab616dc65a20895e9f5320dd1c8f9a80fefa7e243b0fb75a07c081a5d8c20993320a2540d81144988fe7b30e891cdc5ea4143fb1ff10cfb33da128e5414544eebbf18a0a014aa83823c139ab1916e52792c887e359ac03857f9238481ec2b7a4a25603493687c7a8b3183f5cf1dc0c25afdf96ae10a350a1c24eee423774a7ea4b939a37323edaefb2c9d932efcb2d71c887ac8d0ad1d83b08a953ef19030c457642937d58474011e6606fc9e8c"}, 0xffffffffffffff3e) 09:37:51 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000001980), &(0x7f0000001340)=0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) preadv(r2, &(0x7f0000001800)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000001240)=""/212, 0xd4}, {&(0x7f00000014c0)=""/187, 0xbb}, {0x0}, {&(0x7f0000001700)=""/196, 0xc4}, {&(0x7f0000001380)=""/59, 0x3b}], 0x8, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f00000000c0)={0x7, 0x2}) socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="0207000a021600110000000089da0000ce36db5ca20000000000000000027af261b9a3104713f9f9ce03627a1af4d5dba82982f6d34542b96714"], 0x10}}, 0x0) flistxattr(r0, &(0x7f00000018c0)=""/123, 0x7b) 09:37:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RMKNOD(r0, &(0x7f00000004c0)={0x14, 0x13, 0x0, {0x0, 0x3, 0x4}}, 0x14) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) sched_setaffinity(r1, 0xdf41038c, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000001a80)={0xe, 0x4, 0x81, 0x3f, 0xd1, "26fddebd89d98c9de8b8d8768c8dde12c5165b211005891c10fa2e8e7498d963b525a61fa6b7df027b04fd3b32f1c3989dd99a23f606accd2a1c651d880591985484adbf7167b51db64ee8d02116cb894dece4b13a511d3eeeee149133a143c164e0c85fca51dd33d28062efc4a7b5ae7ae65d3ba6e19d97c1cb5c9868318b08f280711a78bd82c4058a989c23641a459f6164e4f0afd2d304ea4f49a47287ccc1ccbff5bc777cea7af6d47b5735d76c8ef37d6f57c058f879351e836c2e24d9221c79711c56fcc560d0e0f16ae03cbb5a"}, 0xdd) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) execveat(r0, &(0x7f0000000580)='./file0//ile0\x00', 0x0, &(0x7f0000000a40)=[&(0x7f0000000880)='%eth0eth0em0trustedwlan1keyring$\xac-mime_type.systemlo\xb1user\x00', &(0x7f00000008c0)='cgroup2\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='cgroup2\x00', &(0x7f0000000980)='cgroup2\x00', &(0x7f00000009c0)='/selinux/commit_pending_bools\x00', &(0x7f0000000a00)='/dev/fuse\x00'], 0x1c00) mount(&(0x7f0000000a80)=ANY=[], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000440)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0//ile0\x00', 0x4) write$FUSE_GETXATTR(r0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x4, {0x4}}, 0x18) r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x1f, 0x7ff, 0x2, 0x0, 0x3, 0x88120, 0x0, 0x9, 0xbd, 0x7, 0x5, 0xffffffffffffc6fd, 0x727767d8, 0x8000, 0xf5, 0x1ff, 0x10000, 0x0, 0x1, 0x0, 0x8, 0x0, 0x2, 0x7fff, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x3ff}, 0x0, 0x4, 0x1, 0x7, 0x0, 0x10000, 0xa7}, r2, 0x5, 0xffffffffffffff9c, 0xa) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) gettid() openat(r0, &(0x7f0000000200)='./file0//ile0\x00', 0x0, 0x0) lgetxattr(&(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000a80)=""/4096, 0x1000) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 09:37:51 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgid(0xffffffffffffffff) sched_getparam(r0, &(0x7f0000000080)) r1 = gettid() socketpair(0x11, 0xa, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) 09:37:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/95}, {&(0x7f0000000140)=""/238}, {&(0x7f0000000240)=""/226}, {&(0x7f0000000340)=""/228}, {&(0x7f0000000440)=""/192}, {&(0x7f0000000080)=""/103}, {&(0x7f0000000500)=""/197}, {&(0x7f0000000600)=""/254}], 0x1a4d3f7f373f44b, 0x10400003) [ 1084.656350] binder_alloc: 6020: binder_alloc_buf, no vma [ 1084.664579] binder: 6020:6031 transaction failed 29189/-3, size 0-0 line 3136 [ 1084.680026] binder: send failed reply for transaction 419 to 6020:6031 09:37:51 executing program 2: r0 = socket(0x2, 0x3, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = geteuid() getgroups(0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002b80)=0x0) fstat(r0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002c40)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000002d40)=0xe8) r9 = gettid() stat(&(0x7f0000001580)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="c6fa88bd2ab2484113d67a98fa92debd1ac3c9112831c6cbc9165b28e930ef1919f2cf478dcf22e82fce392d0823df51f1416ca6d02dcf6afd0b792d051e93", 0x3f}, {&(0x7f0000000100)="8f9c9e125227efd417b43d17a49d782854ea13e73dcefb0e57413aa2dfa3092a64dd627cef6f8df8c45d00e0a5e98251069142f9c160b5959cf673f5618d6c2625099972ae0db8edebf0e2fac4a6b98217417b0417b01ee5d0cdde80d574cc533a7cdf6257574cd7e5eea6717f30c905f2a8cc0182574c5c728513aac6b05bcf55e33170794333aa626e", 0x8a}, {&(0x7f00000001c0)="01ea95a0038e25042d66e98e23bc1f9f74ba12b2b302aaeb5d23da7aff23bb010d42088ce12ae855f6b121c267cbba6405b0af096dd35d5f10f987ef9bd4558abd03944119290d85fff4def01e150f23226ee823499874edb6d1245457893a38bb2503920ca28027e7e43339f0d984a5098986d10d236939f6dbe75efd11a56ce3d45911d5e0c3f978e893b38d280433d5bbe37b221913a7108ba92f75a278e02a814617b402d07954be895c6c28371ae4181dda4cfc6c855cfa4886f00e3910faf8bbf5a642c26b6e254e27694b9a2e8f01c7", 0xd3}], 0x3, &(0x7f0000000380)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x40}, {&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000000440)="ef44c2c3d863", 0x6}, {&(0x7f0000000480)="28e0b0bbaa5fea01d03363b6be04709af7c2eed6aa0de3", 0x17}, {&(0x7f00000004c0)="33c5a37514fb95fd179c7aecf42d9ce845d3d5f1e38598bd5c4a19a7d49979b9337463dec006d9f92de4e31ea18bf9a63961fdd0f0b109befedddc6ed2941e6276c699d9eb28676d35aaf7a36e29e9d054f0cd419b50ffa3e532de5d173b8728050c4e632bae1f06c14e9985f5a453dfdf7027e6d219a69191f91c518da58425b8a823f8b6648f08880b2684", 0x8c}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)}, {&(0x7f00000015c0)="8e6f2edf406e753f7bd58208f5a96702bfd908baddef88bc27a2c423eb3aa14c7d43699321efa6ba2cc63260d856ab6c552ac02a0e7aefb7981af626b8824a1053c132c85ff4f1c55da879a8d150b63d028aa1c2d7fba577d8edec2a9784c434cbdaafb693f46360279963574fd850833936f21f053d531d6c9106650ebb0a8d35c8ac8da6d59d6a241db1b00e3e9521e254ac54aa8429000bb412eb00452d79eceed7fb45cf06c12f92c8c0b230adf407216515595a0432a02e891cad0ffd4ed987ee6c469b17315517627bd2b6dddfaa37cacf7aa43bf38c2c5601c754e59bd5512a2e657002344e0a918c2b577997e829a161c41da4ed5888d482d15bfd09cccdf89df540139ca243977be43ce4edc0509f1913eedb21d9d3859a83dd862ec79e05a4b94efc161d3c72caa1ba0fecf82abb8b31c3b73f6f7d45ffb973ec54b07cc303526fc1ffdabb71cd5c988261212da672d8dc9a0b524b6f77d186edaa594dbda0a44bd14ebd25a4308edd576af5f8b737c600284ad436f75853dd4521809c1da96685bc2791e34aa58553aa41765ccd8bac6720bed521ea84eb1c7f664fbdd9097cd0365040000e39bd8f4e62a3f456f3016ee6ea3aceddba5376205427c325aabbebbec7802496923ee572e47390bad3dfd714214ff6b83072352042a5928a87578767a924bf15f79198819dc7440188d2172597147d15f4faffa9cd36697c066930756c6b2e977adf201ba2f17139420629a94de6c8fc72d3ad07ba5286dd12c21ed8c0515d19c1a0c4066ba0801df771493f2b70d5d9b8f797d2c1ef74d6818507c8ed4a95f9d5f2bd9e1a947ac58cdbfc3f9d7fd95d0a8e6cd510d1500ce7e04d1c16e1d45364213888ad8461079b8f2c08f9f18148906b2f29d5ad5f8cd8266cba54100796cfaeff4a9a4c40c72b23563d544287090227d064fe02a8242c7f9d2c7d664ec9bbd5a15a81f1f17fb10522470f3e2d2aa5be82c41a3d53abe9e864cf0e849e252d93a3f9598a1ae32be70e082a58878aa44d4973a7ad1f1d61a87d41393f01a6c76e0757039651e7350b8087735d37aa163dbe116d8b9e404657d8d85529dd3dc725a7f3b1ee9c7ed5606e63159af44b4589dd6ff52ae0de7fde1d5aff654943cf28b08cb2f21c5558b7fe1264eca75fe115855fdbbccaae8267747d8e360262040f702fbaeb91d59b9f29f421761e18cb31f0c66ae78d18baccee98e2e1165441467259966071691fd5bb6ef5ea676fd742a7674f4b8906c1ea8b432635634bea4b7b1c210068ebbe9cdeab2ad156064f439b54fa160f44199be5551710b355669baa31852ba91afc091aa97fc9d5c69b41c24cb3cfaf9123fcd6700534e35eb98216ecba12f48a71ea10afa3447cf6780ad8c479f6a7c449b1a436990ea22c0ff8f88ae9037aabc9c9c93b175a298692e4ee6ea7c0705b630542d1c8736b7068a58c21b562e19241b53ec312230798913d45fb1a74144639c01f35e33a3186892bfcc2e385e4b3be56f23fa9f51e79b60449f232447ca4acdf1fa83724019ef07a9723261fbe5380998d0b910b4bf65c03b93d652467973fcb14955f500e98f8ec4c92b8db20cf1ee3763c7faade8828ef4e2cac1c3e842c3ead7cbf530328109b481208d06981770a2ab7b3fc0e1c42821d3c0c96d6ea70c564cbf6bfcb2bf90de1b5e875db9c1f16da83d4f16dbee3d370ba02d53790fb4925308b531c3ae8d4ca70d115d74b205005d062867d73c9e8aceb9a1a9fcdb1dea564bfaadb4ba477557211b9bdd2e89feef8792118a554df5cf68d9128a72b67f647a26624e55b343e706098402160854d520ff59e112eeb6aa65e080ecb7aa6844c48b149342b34379f863557402e48c94a8d6ac4d5d4d29ea46f03a2465c3b982c7eab9ce5e8bd5c4c89842bb1b02d6793056ecf17dcaf8b05aec55f04aa5872e2356f49121b03f66a2c02a23cf8ad2e2930549b5322d55b41bd98ba9fae3c3d76a1c8eeadb1d87c001ec972973b2a51126867b3e53e96fa24cfd37eebe9ec87b8edb65e132cb3b1d8289d6c71899aba864214d7965ce9d44b9d758d96690eafbd64eb46af04552c061b743f5765b7b81b1bf2c3f47c8f3b19bb5b1b9835ac942b05c5d267bf4505cdeb03055d6a8f8acf3616b12b8f40cc508920fdd76dcdf506082d767f41fe11e22136ac24b045107510772dc0261e81f13f0f29641e37f65287f254579445d824b853937fb58a552890c4a7c23f03f9b0952df9a1f1d27f63583097d3cecc5d88a7eaaf6c0f2677b086a8312ecad62c030df9df8fb7f2fe2f0771df37bd68d040689057a1bae91c84053c07da5060ff11df4049dcfd17e2126361db257e1e973fc7a24c78f6a17be76bc042a5b2fbcaae449b6d1f765bd288366906a45fd5b921448d26ff8576f719c439acba17e5f117fc8f35ab3d9d301ad650adcf82a97c8c27bd45ab79e04b2e6842746e9f5282d9235af86b961333786f1e1bd38fc5a243e924dc93a35f64482714e215eadd821164c2ed7623ce5b808e0141ab3870f6b4c565bd1ded4850caf776eb5a52b1b914b859c7a76ed6769bc92db11594f08e5206165b4ab5230758d904661e404030723e5821445e5aee15d36c104c3a94760a695300e141e0cbf88471d6ebb32bc2ea19cf91dad3056d1917ab8d8c6208468c9b4d1a3f1404450d25a5830e23280e2f49765bd1473e3564364f70320f8700854736817824c661707d2837aff81dc2074269e8a9b48ecdfa9207a52b620e485432704c1d4cdeeed8f70581e253ebdb67e7a392d058f8582c880e4cc7be0e4f1e199fcc2e596cc7616e71a3cfa4deeb3924e15df3e7b656edf757f025461b52a0a295f23496e7259bdf2204596a8ae971166810c67f2b1852fe86280ec99bb5aaafd0347710dd559d9466989e940cbc932952fb262c9c05b5b53e26f0af7fb8d588f7b02d5e26f1918e8c212ea5d00a49ae22af91f7494f0d1eac6c2563450e1c7544b58bd4e829252b84979f8c06e5ff2b672a6daf36e7d326fbf017eac40de420c5f44220e47b7d91446cb4aae4fa869cc5b239760a57cc007afd1753fb4cc783dcf6105c9c67c628dd11b036093895b240d8734ba429baa114fb057c55a56af1f1d5f8cf2b3f54a2c3366f028f12554d11ff04104a0df64ad63d3f4a242c43f73e444cba747d5e6990e99c28bd1f2e5f637bca453c7e2bc24a9722ed3c1db2db715a5395639ec1ad3afca22111c9973b0fb5688f696f5c05e6c6632e23ab2dff3d67963c7744dd8baa403ff4bab2b239e47c711441f82bed41351a481199e3506ffe740777cb6ef82aacc5423158dc3080624740919f60b0a960b0f34714f46e8bb652f05b91772200c15603e55772de63bad95a3068b8276c2fd00f82baaa65e98517b60000de49115543c9a4d8c53de76d6218977f44aa425a00a53836019cf810675d7e6330d167983d58846d8b1fa420546b4bb13a3339294c44ac13a2e9b2221953169cae2b77ffae303f3fbf3a83cca9fe3c455600304f9878491caea3685114095658339bcde46067595475b953108b8befd9b3add9c2f82429426765e0dba090a7acfb53faf98f40b043601cc41a0ee2625d30c953655fb16965fc08882d01467e41676287c81a4f098a92d1920ebf8e94a4cdebd772fe4d43d8cc510612d5dedca2669d9111daf9334bbdc5ae63e52b5d64c3c5e84ff3e095d2fa7222b4f92e662d7e83b502ca3adcb92a5c7f51367e09ad90fe4a0f8af2b890064213dacbb7afcdfd1ebf0bc4dccc15e4fd6010b1b4bcb5b61d700105c2827960bdee14cb8909290ed0cb71ffd0af82e5234b8907b0ad8b81dc3e8dfb8366a1e3d0d530f53c9570dcbecad8b65229ac3f091320d14f3ae9c2aa1c8fea723e2360852ec5ed8d79b9d69b6ce4fa7c72cfb87355a1c81f602259ad98e5385cb420d751af646c28f2b60190bf89f9025dbef5a83d532644ba624e0f4fff76e4e61b3552f1bcea3a22b600f4ffc368eec3beb30d078c3e4c54748c3d9fc6133f7b4d82d116dec8340bf20d5dd4749bbc6d72372fccd058115c0765b134b4ff1616e6272f2001f848ca1f11fdc18b7104aa2c0d0a278b43629ec23265491831ede60ab868c4158dadc3e6393b3e890345a46bcaeabe84ef0cafdbbb3f53da53d675b06653fbd51728802aade0c93544371a5eaae01f35555d286adab7317c6447e4a3f071da9e79624224ad829e9590e1dad87f478aae8b25a44d9749ee9ae8390dd411288e2ad6d1501933d4005f598e4a036048f291de840dbd6419f56c8932b3736cb083bcff468291f4c045d63dbcc9403f7c7204cfb8d92ce93aba0bcea516ffa7a8ca57a73ce1698ec60ffd30b524a555b81f9bbb267f78b63044983bb10a71611b5f1b9694a587105922002e6c93f006d5e2a26ab70dbea0e720cd99c4ffd4d8180b6d61ffbe585b5fabc3f4af5a7702ec4a2fe45aa6fae96463203dda6aa634963828d2c2a40525b92e64683b7879db4a7684a4225290d210ad3dd7471e71bcd0fd9362ccaf16784d502ed38722337614b7e000748c43ef9630bc15d90915d0cc941964bc8aa7ed8fbafbb641000f006fc2101c8310d322f89129874971e11a922155653bf3a26c5755b377b44ff2d1713840df93870736a3d60521db07aac04e5dbe1ae7ae1b8e308af53d39b49997b8398b6dacd2036e334e4159a35dad1014ad67406528b6ebb413705ef8525508bbc89ca7e226a413ab55f9706fd8842b847e0c2834e0561322153e15ae80c3e5b7bd273bf6b7fe35a93f5a5ce38c6b41b6394fca5d6e0f4f607119d0f683f47c166c32b11b620c68aa5f21a8daca8fc9f4a934690610a7efe927cb0f00981eb43c23767526373043c48041a4e388fb4bf1293eb8b0155feea78449fa44b956a189a155a5bfd314c7ac014f45ea6d49639616af29cb949e41b121a1c1c006171ff757d87b027fbc0c37a8ebe99d4bb877c58550bedf694a0e6182946e2cb43bcbd91711621416afe1c031a989ec64b546cd474f685fbd35e800d91a3c3c3ab18be084b21b435288d3bfacef3c21dda50a7156b3eeb0d080850cc8de23347bddf49bc2388de5b2c000d94efbaa6ccd637e97e69f6ef8fc5a78130aaf87bb7339cc1d165c9036f14470088f9e71c922ec746974bc6ebd88abbf7a7f7c172623cce8b4ba0907a48a574a096c40bfe6f52b9d476d136f9285f0d278a890d7cc802047e88f645ae97fc7d83381637c1972fa391358b90b1aae488a65c4aeae38d38ed02d9393f6c66fb6470f751d0ef919926eadf6025563182f747270f5ff9f616f36adc5fb09d0c67d02a5d25e7b2c663bae5820299a2008a4763a9c102662172702ed492a7310703c5abb9f59dc8d9e710cc86d7add122a8efc31ee0530ac20dacafdad48c4f5a3adcb19bdeff446510b7e1ffae86ea5ea3f178dbb63303c31dd15cd827337fe83f378173550289515967016f1287381871e17558dc5b0f95e9fd5b7d8c532f5ff33fe4f192c8b8f66338829db31433f527f74fafeccd72563baa4aef4e16940c1f6df0dbcd91f75d333e1961cfb6e2f5a750c5d7acb39113cfee666e314f69536999b287118ffb050aba4c5f5b8983b4092e9ed729711fddd58b1f73b93b0c218e3f1c9c020913ba415450a7c5ef164d5be16b829451391ee95a8dbdfa81eb76f81d9d39318d0c92e2b64dfe12f021a77b5662a70e15f144a1b77d1cf9550d2504b68f67c40f3af5d62192c2c02da89705fe3df05999e96e33ffaad", 0x1000}], 0x6, 0x0, 0x0, 0x400d1}, {&(0x7f0000002640)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000026c0)="03d6f876ebed62f776c079a4007cf4a9a29a1d4053a0489155fbaca47cdcd0e1708827533c8a3068de48fe17b215afa56c1c074025f02ae833d76a5668c541f1140cdcf77496c7253f21ea3aeeb4cb6d2bfb62e2923ac04703a7ecdf0d9b53c8cfa3cea9e021f05b4f5a5924370675ba96", 0x71}, {&(0x7f0000002740)="0df2f0afada6d7f9d372e91dc9ba2185ee8a80b09b798ce36134ea51c125b4a951386ed85e7145d746b4088cca001483027bbc1fc883f9e82b09bd8bdd16ee4e3aa3a842f981646ae550ea7614f3433c19", 0x51}, {&(0x7f00000027c0)="e8e88dedfbd20e842ed08bdab0fe1adab12da42b78c73e2e90adc022c8493fb76e58fd1392b72852ecf1b0737653e09b64abf380d3510e2c3037ddb6a8d9d69589304b37aa15360bc923009296f391d8", 0x50}, {&(0x7f0000002840)="a00618a4f797ecc59150c4dda34df45488311a4dddaadd03046667182d9acd4d2fc3d3ef7aa21a65cb35c89df601f0c75e9cbad1bf110ff44a9d5fd5dfb3fa841a761f92e03aae6f99e1162d395e39f714742332c3dec0cc422a683f07b0dc20091d96a54b716e9238460c25effec6d3628939a67146a5eb65c4410af4ab99456409c4ee8fffb6071de9122f4de61b4a654d1ae8e922e6fb82b35df1c87d424e32fa6707a3f1c02ae4e4713d446a6b9a631a36fb8f3c09acdb775914cc3e5b7f9febd82ac07b69643c9dc9e20ba3724d", 0xd0}, {&(0x7f0000002940)="dc83380c0bb1879e085670979d11a5804dd02dcb99ce2be5d4ba6ff7", 0x1c}, {&(0x7f0000002980)="017d720b1266dfd1208e3cc0fa12ab4bf430aedd98b95065e63ffacfae53c44f637abd23c3ee9f1ac023c082538df31e155a488bc8f03db58d59532a1b003dcdb957615b4ff17824c8", 0x49}, {&(0x7f0000002a00)="bd6f7659f92bd4950985e03800564c9f2d9e85976bc8357b58eec33a2aa783340ade74f14504a34c051308cc5bd11e50aff3d31ecd3b116879aeb72871f559c7681c3c28ca2bbb7e239c60fc8c66491595d33419d4311a8b62989a57aa5a33f5d2fb5801a0e3b78cf190dca3a3b84023d667863870229d70f71138d7d420eaea41646dd50453c44a5d8f9b65f70aaf45ca3ee0d3d529ece63012b5740ca1417ce94a94ea6ea9a6834d900d2c43bed0d96980c91a620c2ae71c1ad372d328cd3cd362aa13347891664e4e8060b37077244ee70d7d5a785f7e68736a4f7fc1f02773d9cc", 0xe3}], 0x7, &(0x7f0000002f00)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, 0xffffffffffffffff}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0xa8, 0x8000}], 0x3, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_data=0x0}) [ 1084.697956] binder_alloc: binder_alloc_mmap_handler: 6020 20001000-20004000 already mapped failed -16 [ 1084.713342] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.720129] binder: 6020:6031 ioctl 40046207 0 returned -16 [ 1084.725944] binder_alloc: 6020: binder_alloc_buf, no vma [ 1084.731835] binder: 6020:6041 transaction failed 29189/-3, size 0-0 line 3136 [ 1084.740120] binder: 6020:6041 got reply transaction with no transaction stack 09:37:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x10000000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffce3, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3b6, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1084.751687] binder: 6020:6041 transaction failed 29201/-71, size 0-0 line 2921 [ 1084.760089] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.765996] binder: undelivered TRANSACTION_ERROR: 29201 [ 1084.779940] binder: undelivered TRANSACTION_ERROR: 29190 [ 1084.796932] binder: undelivered TRANSACTION_COMPLETE 09:37:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1084.811558] binder: undelivered TRANSACTION_ERROR: 29189 09:37:51 executing program 4: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2000000000021) ptrace$cont(0x1f, r0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x60}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:37:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4040, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000670363b193daae504aa6b936ffbfadd8b04018bde926b5b5ad93dc25848b818e91ed6d80229e0713c60e1121f0"], 0x0, 0x0, 0x0}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000300)={@loopback, @rand_addr, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)=@newsa={0x210, 0x10, 0x110, 0x70bd27, 0x25dfdbff, {{@in6=@ipv4={[], [], @broadcast}, @in, 0x4e22, 0x1, 0x4e21, 0x5, 0x2, 0x20, 0x80, 0x3e, r3, r4}, {@in=@multicast1, 0x4d4, 0xff}, @in6=@local, {0x8, 0x0, 0x9, 0x400, 0xc5, 0x0, 0xb94c, 0x7}, {0x81, 0x8, 0x1, 0x7}, {0x0, 0x9, 0x5}, 0x70bd2b, 0x34ff, 0x2, 0x3, 0x2a8, 0x1}, [@encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x1f}}}, @coaddr={0x14, 0xe, @in6=@rand_addr="95ab42e92eafd621e6b7bc6e04ef99a1"}, @mark={0xc, 0x15, {0x35075d, 0x80}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@remote, 0x2, 0x20, 0x8}}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0x2}}, @policy={0xac, 0x7, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e24, 0x6, 0x4e24, 0x0, 0x0, 0x80, 0x20, 0x29, 0x0, r5}, {0x8001, 0x7cc1, 0x6, 0x6, 0xcd, 0x2, 0x13fc, 0x100000000}, {0x19b, 0x55b07a86, 0x2}, 0x5, 0x6e6bbf, 0x1, 0x0, 0x1, 0x2}}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1084.834412] binder: 6054:6060 got transaction to context manager from process owning it [ 1084.834426] binder: 6054:6060 transaction failed 29201/-22, size 0-0 line 3004 [ 1084.834527] binder: 6054:6060 unknown command 0 [ 1084.834536] binder: 6054:6060 ioctl c0306201 20000140 returned -22 [ 1084.834667] binder: 6054:6060 got reply transaction with no transaction stack [ 1084.834684] binder: 6054:6060 transaction failed 29201/-71, size 0-0 line 2921 [ 1084.837252] binder_alloc: binder_alloc_mmap_handler: 6054 20001000-20004000 already mapped failed -16 [ 1084.837329] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.837336] binder: 6054:6060 ioctl 40046207 0 returned -16 09:37:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xfffffffffffffffd) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1084.837379] binder_alloc: 6054: binder_alloc_buf, no vma [ 1084.837395] binder: 6054:6065 transaction failed 29189/-3, size 0-0 line 3136 [ 1084.837462] binder: 6054:6060 unknown command 0 [ 1084.837468] binder: 6054:6060 ioctl c0306201 20000140 returned -22 [ 1084.837511] binder: 6054:6065 got reply transaction with no transaction stack [ 1084.837518] binder: 6054:6065 transaction failed 29201/-71, size 0-0 line 2921 [ 1084.874269] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.874279] binder: 6067:6068 ioctl 40046207 0 returned -16 [ 1084.874511] binder_alloc: 6054: binder_alloc_buf, no vma [ 1084.874529] binder: 6067:6068 transaction failed 29189/-3, size 0-0 line 3136 [ 1084.884658] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.884666] binder: 6071:6072 ioctl 40046207 0 returned -16 [ 1084.884755] binder: 6071:6072 unknown command 0 [ 1084.884763] binder: 6071:6072 ioctl c0306201 20000440 returned -22 [ 1084.933503] binder: 6067:6075 got reply transaction with no transaction stack [ 1084.933514] binder: 6067:6075 transaction failed 29201/-71, size 0-0 line 2921 [ 1084.949906] binder: 6071:6077 got reply transaction with no transaction stack [ 1084.949932] binder: 6071:6077 transaction failed 29201/-71, size 0-0 line 2921 [ 1085.073743] binder: undelivered TRANSACTION_ERROR: 29201 [ 1085.079448] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.084922] binder: undelivered TRANSACTION_ERROR: 29201 [ 1085.090422] binder: undelivered TRANSACTION_ERROR: 29201 09:37:52 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x1000, 0x3, 0x800}}) memfd_create(&(0x7f0000000340)='!selfvmnet1[security^&\xcc!esh0wlanth1\x00lan1\x00\x01\x99PR\xb2\xc6\xe7\x85~\x92\xfc\x8a9:\xe6n\xba\xfa#\x8d/\xce\xb2\xe3\xf3\x0e\x19\xcb~\xdc\aP\xcd\xfe}t*\\\x11 2\x93\x8am\x9b\xc9\xa3\x1cf\x82X\x97\f\xee\xf3\xe86\xbex\xdfg\x05\v\xf2{f\x13\xee!\xdd%\xed7\xae\x10\xdd\xf2\x1c/\xe0t\x97ij\x11C\x97\xf7\xb7t`=\x95\xdb\xc7\x9f\x8b:\xf3\xf1L\xc6\xf5\xf5d\xfeu\x10\xe7\xa8U\xc9\x14\xae\xc2ZO1\xc0t\xb8\xea\xd4\xff\x93\xd6\xcc\xbaH\xf1\x1b\xc3\x91\xea\xf2b\x02\xed?\x1fjaR\xa1\xc0\xa3\xc6\xdf\xba\xa2\xda\n=\xae', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003e00)={@rand_addr, @remote}, &(0x7f0000003e40)=0xc) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000300)=""/32) getpeername$packet(0xffffffffffffffff, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003f80)=0x14) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000002c0)) ioctl$TCSETA(r2, 0x5406, &(0x7f00000001c0)={0x8d, 0x7, 0x401, 0x40, 0x15, 0x8, 0x0, 0x40, 0x5, 0x1ff}) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 09:37:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4011fd) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x87a, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080), 0x6) 09:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x16, 0x4) timer_create(0x7, &(0x7f0000000040)={0x0, 0x27, 0x1, @thr={&(0x7f0000000100)="e7293926f44399fd0909205a94617517ff32b77a896441225a61dc7995e92e1fb21f395b0702d245af6e426c7c57ca62e66e2a687b4bb30829fa5bc5fa8b5cc85e2da1d0821c7db6b4fc56a136acc111deb6bae7b3c7b5983b7a72bd4e6ff891e3e35f50a6df2e9529dae166c75f4014286e6a3079015df997b67af65311c22060750639e7fddfb07dc0bc63fd8022df85290d1b0a70dec85f345e14c450b74e4ac8b82f8f3e3977187920de196de778f4d702eb9adebeb2c4399beaeb8c1a6ad646", &(0x7f0000000000)="a5e9e324977260c5e3d8d4af98f535af7d82a55a950467b71b26df2e1cb6a5569082e9888a5570"}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x1, &(0x7f0000000240), &(0x7f0000000280)) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x84}, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000300)={0xa7, 0x2}) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, "1796d5b57adcf97e941ced3e5b9d06b2cfd92d818414ebe408d57d093b3ff9bb81a5fef3b7690f3199036014a22ddc10847a6cb6df0ea6d3969206a7b46ba420a354ea2d139881f336fd7ab2e64183542c61c4fd69b57821cc6be6bacd44a4c4a50da8e1e5bb9b8d2d08c239dd7e59e7734d1fb4c44e8b00e13bc940236bba165a9d35fb4a0ba17e026eb471cf1c40b035a1438de5ded0b5a64a54e28ed9661209f72360ab54f7f9531f5a96b38cdb939e3ef9d55a64a5e9b15033a7cbdb8917c55b15e22d2f5768b1d77d36a4091f2588dcb94fff9066f56b753077f8c1283e28d6a2ce97b8896d0572dda37009e9c5ffbc7f0b57ad893eb261dc33a9e356c6a72ea58827aced46728b397f41c0ac5c997b11e312991cf25cd9e7bf2f014c5807080dd47b6736e7d72bfccf71bc3b22c11ad66d5c63efef775bea894dc82220a9828375d73aa20748ae91395f2ff50862c5ae4c098c2e6b2255b099eb424986267211323fd531d0eb2f5254e535bff077ad37a33cabb626e9f666efdaae00766529011b0a668537c1f31980fa0a1f82cbf2d9b06d075a1177945298d01fc31fdecbcb1e6f4ca530f6ba72c34cbe526870038fdadba2a809bc747fd09cec74d8734fbbb992bd61250b90d55cb5e6e6faf58ebb494142f3a71f002146eed4995d5efff53270ddaad4dde469077ae45b06fcda9adb6a81a316876f49241df3308eaee3e1177db7726c1687117528de93d3484d893a8d8e63096d51b95636e6173dde82049c3982b155b93d812cab137cd55285c3c78effa4233235525a7d83ab4f18db10492ddeca59cf2ff8a85ab6876ea0056e774c53aa7787b1ccd8972ece0d9f387b2929030bc2870f940b37f2f4185f53f396472bba3aa569388e94dff1419675a1ee0d4cdc4f2a490a091cb7be85f0d1e0e129b1391bcac89acdeb9f2bc3d7b620ec49effb900ef14638d95474ef81a3c834d4e86d729bdc753f07f182f87619e47595772fd6117fad5c4ef6d4e726920380081ebd4361d5d0f9c86ffc40972b8a0554e2c1f616d471f0622e85ceffa28ddb104193511e32c6f8e1e1f765fe203b4630617bf635e206fcb0f886cfcda8b93b7b23a124bc4a2edc51b2f5592f5e30b769e5f715e0ea875e5f550ba01997d2032c9f781dcbe9b57aeed452a5acf4545a7f176ca99610d9c2646748aa0c98e767f7b61d7dbbab62a18bb07d2e9c458e96243a9a1d02c1310d98448a6888b01b8dc245f5679c6ecec30d834bfb206d286ffe7d129266a238aa4acf01b25c6ce3fe52fd3b54ab14d358d13fd867077346b81cccb882c95c02f9fce1a88e8886022a79775b1de5be8b327b22da9a6193d5080a05b859a2ee315b75c7e1faa6adbc20204c9e18cc786e880a4f6c3a1028ae0ee68e557f367a55cb04e8f1c83271dbf70daef3388a696c4110254e649acac1fc27b6718a0c91f613b6344a67688dfa17e8d86b386ab4b2a2e924d0fa1e88624bf8dd49acb592a6e3c337acebe8eaa771f95d8c161502307632f9b26aa00eca42e1d774550135f12f5e4ada4e8046d0bedc232df419df34f6b695f6f78eeeb0651f6a233404cc218a801f84c67c26801b248844086ebc1767f4b08168ea8d4c540f739baea41d9b7ad78a599d81e335b76ea2a144c7b8fdb62df61f1a8d6cb510dc1c560b83a3bc2d0f58ad786d75eb930cc6443f3495349928cbef48c604af2c2d8539e22d79cac3256f3b3aee55291d33c4405ec2db7cc53a66087870479cca6cfd9cc862d7818b40c8d45c0bf009d8bf20a92047d048416b30abc97f535e24e7093f0229d1a146968415cf0762ff95e494290d6782d0fd04392cc0804c03908e18af7cb718100198be0bf78c21096a69b620aa81868b6f53c077441672f0fc53ba54a3ea87f393a4b8c8b20d2de9db8375299287c82dd31156afd86fbb8d0120571962d620dce4ef3c64c39f472a2c88c08ee07e33a8733d7579b324acddea001c9d24f2f61a77bd00519b00bc9079f4879166985a97894e292f0692d53eb5cedb4c3754a17b611d76a12cb275d4acc7fa9912b6e54548de8c874abefc0c0fcea7e3470065a3cdddb23378f9e291717122ecd651fc3dd747706b5ca717c5279a4556a601fb85c7953b1865e45346eec8a85247dd353053ca1830dcd051a925a478a2737c4aca442313be344f827dd89b422625c0b4041d69701f7763dd6b099b9deecbfb98dd46c5e634d26e3d6d24dc2c317bf525a11b5005f81c1f3b30f0f8bf355624d65190574589aab6f16afeab47f2de0c57c903b9f21c627cce2a1191f5ff35237ddbe4075bbd186669d376da8b90841788c2c609c037824c02932309d26d437225176caae961629ecb1dd7488d32b326236c4d70706bf1aacaff725168dd939b8a89f6d32977b04d63931ad8fccf6616899731f6146e2f1b63daf316eb2e9eded870c568625203703f17309712af520318cd987d5f1b1e054537a1e50cd191f3ed761462a10eec40ddce33ca3b8a1e5efeb1b3bdb556a6d19a64220b1eb3d5ea9a633fac77919e52bbe4b5ece9b7d609b0e3f210125c8538feaeaa5dd525549f8b77298ca5aa0ecd8cfa9ecedbfcb0a6785e18adce5ea41a0a07d92179f5935377b1e1e42561030d2813f010a2df7d276d17bdc0020e08fd14165107ea491cb0ae9e5f88cfc224c47c630fa6bb0366b8f47be01d331c3e656af9618e8908479d27895b8415b7c4a4556cfcd9297ceec9fe946b2d222e77d48ec871919c311d3b1ab611053822781e94a583e77afb645bc95d9a4c8302e66bda64b472f25fa586f36d866e5bd70e76458f63b4a5cbacd2874bad3be21577b04d29184d3536a1491d8f8a99cefb1cda96bf2b2976736aec8b76c53d92a7a0c17e929c0f1673dfbfda60cf2a5ee1091ca6472c1ca5306abb2fe341cc33c2509a5ecab25cd030b83cac7dc1a5438b5567c9701fcd4aab7650dc62bf9af701522592b395e42581fdab2c3ff353c63343f860f9d08274c0d2c983ca7bf915013155b64eb868b2155bc7f2b13ad17f365e8a7bedb1932e0f09d1b4cb07cfa84625022f86ffad9487ffff953b41c752068a7bd28ed68ec004fd6d3e43da607d31d6ffd44665bc0e7fa1c51b8febb0b6cde4693e8c73b8847a3e75041d7004229a9e4649a53778e7af1ee237ad65f60a9c69503f513e3f0276762e49b97747a5de24100968983521e83ed1eaf3f6979c44b343cd2471a680e95dc5b66b00fa04c0a5e6da08109406090ff475814aeeb542f40355996a99de7d8a68570c57e4988dfd6cf79a5e174a430f422bf44ba31f37328fb28f62c50b2333d00945fb20c061919b9e6b552c9edc9e63c7f0c560a8e44130f3c67dd16e43e0fc5de0fda9aa6d05de5c8204ee3549aa6c2cc376f38bb454ec3a6b3ba11f891f0caae5c24d2d046e5d38254a86b882ae9449de58ad7ab614b2fcce54daa9442d775dade80f26f6209483acaf4f835358741e1f28ffc2813eff12c456089c8ba70eddd84feebfbecbf97f90945e01a12bed1363a63fc7475f1baa584bf37c4d67135e17cb98124801d34aa0dfc7474a149eb8a53e8cfe6a827a7d0642c1b210b23d66552018c61419420b3eb60dd79e24777cc871391c7cdf3a8c5def8a8f6b65d85210cdcef19caecf67090c5cf884037dd6de7bb2bba70442fb5a4e03e3f716968ed92f2db996e780b9cbdc97fbad6d516093deca1bdc3c275ac994cca009c829da8c2d570749a6c0c290d594444e03bb5d2d0a5b8ab389ab25899fa91f9f05da4f6e8faab5db4fb2b7ecc80cd1d8c5cc896b8a06d9826b38cd58f395322fd38af7087950aecddba66691b2795ca7f05ab75101ae4369ee808e532e240f561ddb3e9a193d01f3d6f54eca2c091ef75299c018aacf251d4946e73123c26d0b72e0b81b334e85ed498fa1a905df7a7b4dfd4e9fde1d9e9cc4d461202fa0cc44b752e29206bbbdd46957c0e3c3514154d6cdcc5105d7e5ab7d58cf7ff73b8816132895eccc93d4bbc328dfc4d6d73aad4e9c86b707d76a5aeced20a6490ed36fb34d364e252190e0b70eab939070ec22c9008a8471cc726dd9b5a52b715c80597323bc618ee28ac1c316306b5e9bd6affd3eab257be299fb4cfc5a2c29b411ceb75bc7b411a3e9871f804583a0eaed2fe231cf9b12aee1e86a014219b2d43004a8ce11858c4b686a1d09a423859172d0939a7abd682134f0fecf6de36321bd3ca34e3ab4faab1b49474b039242646ebac2499eb48ea4f255e01061896b4c923d03fd7e8266d7d3947a816c31b8dc441ca0bbbe11c9ae05999f455df584af24a8f2abab36af0514be3148811170b3f325b9d6720a92c83dfcd37b1c17eb5fdce862b4a61c40c595b0a5fde863ddf8dcb403278c3c2b94db34d66e812bb75225a2c1acb4515019206c2d368d006e9059e70d6bf274da238b135a3515ee5443819f5f2f55ab9d37e08bafe5f45b3949faa4d1efeb2d9bab5f69fb507420f6ed073b88504f78f46c7e47cbb40666892239154c8e3a4267cd4bedca1adb948784e203c5700bffc9cb45c96923cd1eb1ae829d560962ef4fa728a49178d338f0259a3afa6e27a814706adab0c05f4378a770c1f8017c4510855ea5f46dd4a23c6203739512b72e5f4480410897fd29963d2458098d6809883f593ecd48da5fc7ea0b18a798c33861777ce14005d7106fe0561502aafcade5f36e033ebf9cb03580091100f7718b4893bc14f2214649200a572f8223cc50eb65e2def78c2e0c254b034e94bc43bf8bb08124c47717870b31cd72a00f4c926fefb6e4418f57bda03bd5113aeffef93098f8f46b1a18d83f9697576d2b815b8283e35ee37f64eb97c15f0ecd67dbb8c16f662392da144af7309b55d70e0856505ec66b34eb5a4f755c92ec6283dc5f64f8ad03fc76ad6c0474a6ab0350f57ccb3b391f7f0e4f3f7b3207f5c0126af1d2da68ebbbc1e331d4c6d59879a693a28bae6cb7d60aed89f88976271cbfb58de9f90d7e253af1758d2992e6a464adc9dc402dea434ab1b0fec641cd271b12f454f0a97748716c5ff139bb9fb222552c5a95687ab0aee93b312c1dfa643d5ef759013cb64e4152df14a33bcb5a9facff303ae99c2553abb195b3475b2d01a63328befa5d6063bde7e86a67a40a53cd0c6d904a216a226d9b372fd9c01d4c46fb9883ade72cc2a0c77093608ee8acfa90c16d95cb6f873204371c7ffa0b1448c1201834885bcbe242e47376633659a3064c9ca43d911405cc9d1cd35c028b60586f70cbf4a1c2ebc9dfce449f5855f7b683ef0b0838116402af861305da59fb92b4acc6e904736a888976d7d8e4ab40069c3244633c30e1da1fdb015ee9c81f870f0af5376bdc7176ac319fc3b556021c5b34e7d79800ce78f9702d5857af647695220a960e1069635e806397d7890b629c7c953bef1ca95c848c74b60dd9ca699cc470193a10f162e3a2ee15fbe0826f7cb8a6302323e48e411817d0de12cd0b44b07bf134237d42efba0b51e8960b2e7281fdc7a53ac285d1f4820e3ccd8b2e84ea728b264132dd7c8d45dc6a1af92bee0686eca7c872d64879a46086593842247e8287edb6d0520e8f4b011ed864332702f62b148ad7088de7c20a1f79192eb7cdc168b5a99b10fe6a8e736b4e1ecf4725550c83f87f8b04b5df7e8f564e284f7be3762351eaa39947dd80315bb47e15970aa968695f014ae985a43fbf6402750255d63e507ad80bba31d96df11e6fe6d6752a22c62ce6d33e1d014692b666150938e44d", 0x1000}, 0x1006) [ 1085.648878] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.657388] binder: undelivered TRANSACTION_ERROR: 29201 [ 1085.678107] binder: 6071:6107 unknown command 0 [ 1085.682795] binder: 6071:6107 ioctl c0306201 20000440 returned -22 [ 1085.689641] binder: 6071:6077 got reply transaction with no transaction stack [ 1085.697032] binder: undelivered TRANSACTION_ERROR: 29201 [ 1085.702718] binder: 6071:6077 transaction failed 29201/-71, size 0-0 line 2921 [ 1085.712660] binder: undelivered TRANSACTION_ERROR: 29201 09:37:54 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') clone(0x10000, &(0x7f0000000280)="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", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="42deec8569c3bdcb086a8a07368ad3bd8af86061fbedff8706bccb59432d54d2428e15f2d28190cce73900edb9017f3554345387679bb3b41438b78004475125d0f7a5b89d197f00e9235e9dab0961d5d803a4067b45ea87fe9aaed33cfa4bce2d90f6cf0363c4ef28f28edb877ee7b7e888af02f43aab029d5c8a8ce3d4bf8d13e97c8f6aeb7ecb4170f87a402ca5a704affb1f6134128dd7ec638e1fa29482443c0e3fcc2b50bc091b1d273346805bff03907bbf047beb8c5d233a31acad6dd5814d6745344c28d10975603cbffac5c2cc2df7777ccf9ef46f925ec10f993b9eea6b92b5e0701a537e591c383fb41bd0743e2471563ea29e151427") sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24100020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x102, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x8) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x18100, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ptrace$cont(0x3f, r3, 0xf3, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000240)) 09:37:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000300)=[{{r3, r4/1000+30000}, 0x7, 0x7ff, 0xfffffffffffffff9}, {{0x77359400}, 0x5, 0x7bc64db8, 0xb05b}, {{r5, r6/1000+10000}, 0x1, 0x7, 0x3}, {{0x0, 0x7530}, 0x1f, 0x0, 0x4}, {{}, 0x1f, 0xfff, 0x5}, {{0x77359400}, 0x15, 0x8000, 0x80}, {{r7, r8/1000+30000}, 0x250449cc7028cdbc, 0x6, 0x200}, {{0x77359400}, 0x17, 0x1, 0x2000200000000}], 0xc0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffff62, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 09:37:54 executing program 2: mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r1, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000200)=0x80) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x800) fchdir(r3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/52) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x67, 0x0, {0x0, 0x3}}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x6) inotify_init() 09:37:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x80, 0x7, 0x8000, 0x7f36, 0x3, 0x8bb18e31eb572534, 0x1000, 0xfb, 0x40, 0x230, 0x9, 0x316, 0x38, 0x2, 0x6, 0x6}, [{0x60000006, 0x6, 0x1ff, 0x100000000, 0x100, 0x1, 0x5, 0x8}, {0x0, 0x4, 0x3f, 0x2, 0x100000001, 0x7, 0x9, 0x9}], "3885703bcaf85c99f6de656d63f5df71f4b28871cb34ac470581774beacbbf958eb084365875bbad8e42c2018f937c31dec5d7337c32c55e146c7f52c7d53a625cc2e788e124b6def7c6d84a7bb5e4f40078b28f1290699612663741ced1f3cf24f18d4a490c621bc512afee3a4f6246a398e417973efb200e21fe26b79e3c05bf652fcf61494755a68fb0e63541d8a697ed87f6c2d348d64d4f34f88a55c8ccf7a7d0b0d5c4e692a98008a20a35f9eee0cf5e2f5898478e77ca3a87", [[], [], [], [], []]}, 0x66c) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x100) 09:37:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = dup(r0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x7, 0x3}, {0x9, 0x400}]}) tkill(r1, 0x1000000000016) 09:37:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mlockall(0x6) r1 = open(&(0x7f0000000800)='./bus\x00', 0x120000000014103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) io_setup(0x1000, &(0x7f0000000100)=0x0) io_destroy(r2) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 1087.700375] binder_alloc: 6117: binder_alloc_buf, no vma [ 1087.706337] binder: 6117:6121 transaction failed 29189/-3, size 0-0 line 3136 [ 1087.714098] binder: send failed reply for transaction 434 to 6117:6121 [ 1087.739662] binder: BINDER_SET_CONTEXT_MGR already set [ 1087.749716] binder: 6117:6125 ioctl 40046207 0 returned -16 [ 1087.772908] binder_alloc: 6117: binder_alloc_buf, no vma [ 1087.772929] binder: 6117:6121 transaction failed 29189/-3, size 0-0 line 3136 [ 1087.773944] binder: 6117:6121 got reply transaction with no transaction stack [ 1087.773953] binder: 6117:6121 transaction failed 29201/-71, size 0-0 line 2921 [ 1087.774406] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.774428] binder: undelivered TRANSACTION_ERROR: 29190 [ 1087.780045] binder: undelivered TRANSACTION_COMPLETE [ 1087.780051] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.834895] binder: undelivered TRANSACTION_ERROR: 29201 09:37:54 executing program 4: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x20000000000401) r2 = epoll_create(0x8) prctl$PR_SVE_GET_VL(0x33, 0x12174) tee(r2, r2, 0x200, 0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup2(r0, r2) 09:37:54 executing program 3: r0 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x40) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2000000007) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000001000000feffffffffffffff010000009ff8ffff0a0000000000000000000000000000f800000100000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000500000000000000000200000000000000000000000000000000000000000000001000000000000000000000000000002000000000000000080000000000000003000000000000000000000000000000000000000000000001030000000000000000000000000000f7ffffffffffffff08000000000000000100000000000000000000000000000000000000000000000a0800000040000000000000000000006d9d000000000000030000000000000040000000000000000000000000000000000000000000000000200000000000000000000000000000ff00000000000000040000000000000019f0ffffffffffff00000000000000000000000000000000041000000000000000000000000000000800000000000000090000000000000004000000000000000000000000000000000000000000000000010000000000000000000000000000030000000000000002000000000000000200000000000000000000000000000000000000000000000008000000000000000000000000000002000000000000007809000000000000ffffffff000000000000000000000000000000000000000080000000000000000000000000000000ffffffffffffffff040000000000000094000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000680)=0x2000000000000077, 0x4) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0xc6d9}, 0x8616) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000006c0)={0x40, 0xf457, 0x8e}) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x2bb, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="5859e9b06b326419ef75ae9652435bb5c37657b89c105042e0aec02cba38b976766df999a0c4f0183769f83b88854a8ab0b617d62ae128f5c33a4f7bf74c9c0bfc89bf20d173df9555d6838ef34cb72d05785fe78e24b35fe6a6def6280b3654816f54505b5612f7b0aaf988adcd7e46bfe90d2e54621236514d1aa87dfd65d1f3c9b98ab040f4eb048d6318f6215ea2b1e30e979213161e688daa16098a1935920658761ddf1d1ad7e266485fb7cf", 0xaf, r3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) rt_sigsuspend(&(0x7f0000000640), 0x8) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0x0, r2, 0x0, 0xc, &(0x7f0000000700)='em0{vmnet1:\x00'}, 0x30) write$P9_RGETLOCK(r0, &(0x7f0000000780)={0x37, 0x37, 0x2, {0x2, 0x80, 0x6, r4, 0x19, 'selinuxvboxnet1^-(eth0!.]'}}, 0x37) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x4000) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:37:54 executing program 2: mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r1, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000200)=0x80) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x800) fchdir(r3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/52) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x67, 0x0, {0x0, 0x3}}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x6) inotify_init() 09:37:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000280)={0xb462, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = dup3(r0, r0, 0x80000) getsockname(r0, &(0x7f0000000000)=@hci={0x1f, 0x0}, &(0x7f0000000100)=0x80) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000003c0)={@rand_addr=0x200, @broadcast, @local}, 0xc) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={r4, @broadcast, @multicast2}, 0xc) tkill(r1, 0x1000000000016) 09:37:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000003, 0x20011, r1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c63f9ffffffffffffff99db3147a1dd27f4ed98dce8431b8a61c9805dd5dffbca6c136a2e8c20c10f2bf32426152231b7ea74aa2f7f8fbfa1"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:54 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0xff, 0x46, 0x3}, 0xc) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) fsync(r0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000006000/0x3000)=nil) 09:37:54 executing program 2: mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r1, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000200)=0x80) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x800) fchdir(r3) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/52) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x67, 0x0, {0x0, 0x3}}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x6) inotify_init() 09:37:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r1, &(0x7f00000001c0)="34059f332b726006f8ae84899c388e0bd35be1f81388e99f90542312cd3e9e19f8ff4fca58db572112a8d30f0ef27d0eefe80691505743b5f603c89ae81a0a71318d166dbdffc16085b495c6b9dd39bdd9e2b54b42fa0869c3c4c92162cb0c8e186b3509cfa865b10b1a5fc1f9ad43d78c7434f04c54392b37ca6b3417127c7e6082f58f86541b8383528282849d91b436be4e0f6c9893c194966dcca66698b6399735c2df55e2643781", 0xaa, 0x40, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000100)) [ 1087.961014] binder_alloc: 6145: binder_alloc_buf, no vma [ 1087.972618] binder: 6145:6151 transaction failed 29189/-3, size 0-0 line 3136 [ 1087.983036] binder: 6145:6151 unknown command -433396 [ 1087.988929] binder: 6145:6151 ioctl c0306201 20000140 returned -22 [ 1087.998864] binder: 6145:6151 got reply transaction with no transaction stack 09:37:54 executing program 4: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4020000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) [ 1088.008495] binder: 6145:6151 transaction failed 29201/-71, size 0-0 line 2921 09:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r1, 0x94d) fsync(r1) fcntl$addseals(r1, 0x409, 0x4) ioctl$TCSETA(r1, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 09:37:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) timer_create(0x1, &(0x7f0000000100)={0x0, 0x29}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, &(0x7f0000000240)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) timer_settime(r4, 0x1, &(0x7f00000003c0), &(0x7f0000000400)) [ 1088.038435] binder: BINDER_SET_CONTEXT_MGR already set [ 1088.047033] binder: 6145:6172 ioctl 40046207 0 returned -16 [ 1088.057786] binder_alloc: 6145: binder_alloc_buf, no vma [ 1088.066144] binder: 6145:6151 transaction failed 29189/-3, size 0-0 line 3136 09:37:54 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') setns(r0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) 09:37:54 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x400, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x440, 0x0) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x20) dup2(0xffffffffffffffff, 0xffffffffffffff9c) dup2(0xffffffffffffffff, 0xffffffffffffff9c) dup2(0xffffffffffffffff, 0xffffffffffffff9c) pipe(&(0x7f0000000380)={0xffffffffffffffff}) fcntl$getownex(r4, 0x10, &(0x7f0000000480)) getpgrp(0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000500)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000540)) fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r1, 0x0, 0xa, &(0x7f0000000780)='/dev/rtc0\x00', 0xffffffffffffffff}, 0x30) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000600)='uid_map\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x80, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$TIOCGSID(r6, 0x5429, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$inet_tcp_buf(r7, 0x6, 0x6a494a2180fe9a10, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) sendto$inet(r8, &(0x7f0000000b40)="762d013abf428f831f537d10987f3f009e134c11cb6b5d479d61fac22b7c399e31904cab65dc1f2efc95ac1348db76ab634cf0fbde36acede0e45438773d28036919fd3c82e3622eb6f09975594f6bda43d29d0021a06e309383d903c1c4fd79f21eb35886e667dbe7", 0x69, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000480), 0x1000000000000076, 0x0, 0xbb}, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140)=0xda8, 0x4) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGIDLE(r8, 0x8010743f, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x19, 0x4) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) ioctl$KDGKBENT(r10, 0x4b46, &(0x7f00000001c0)={0x7, 0xfffffffffffffffd, 0xfffffffffffffff7}) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(r8) ioctl$KDSKBMETA(r10, 0x4b63, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r10) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1088.074298] binder: 6145:6172 unknown command -433396 [ 1088.074308] binder: 6145:6172 ioctl c0306201 20000140 returned -22 [ 1088.074599] binder: undelivered TRANSACTION_ERROR: 29201 [ 1088.074623] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.117233] binder: undelivered TRANSACTION_ERROR: 29189 09:37:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000600)='security.evm\x00', &(0x7f0000000640)=ANY=[], 0x0, 0x2) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="3dc778aa425bd4a1e15ad991ce7189cf0ffc0f1427b0fb73f39f7d7c8182fa3e0202fc1b2598db81519f83b9d93224677c350adea9890e5433492892aa239b7400aae7c489562c1d3081790390c84b1f4262254a20ad0f522390473803dd4a671ff2fde2bc611ead4f8e3b00743d63bb5fada399953dc17d030e70069007aca651e77c5dafdd1124a7bed740397e736f53d01dcb8ab29987"], 0x98) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='/security\x00']) sendfile(0xffffffffffffffff, r1, &(0x7f0000000780), 0x400) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) readv(r0, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/243, 0xf3}, {&(0x7f0000000b80)=""/146, 0x92}, {&(0x7f0000000c40)=""/216, 0xd8}, {&(0x7f0000000d40)=""/14, 0xe}, {&(0x7f0000000d80)=""/201, 0xc9}, {&(0x7f0000000ec0)=""/33, 0x21}], 0x6) fsetxattr(r0, &(0x7f0000000580)=@known='trusted.overlay.impure\x00', &(0x7f00000005c0)='/dev/loop#\x00', 0xb, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000380)=""/249, 0xf9) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000840)={'veth1\x00', {0x2, 0x4e21, @multicast2}}) open(&(0x7f0000000240)='./file0\x00', 0x400000, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_SET_ENDIAN(0x14, 0x2) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(0xffffffffffffffff) getsockopt$sock_buf(r3, 0x1, 0x800000000023, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x442) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="3209000065ffff152049ac4d8c28ee0100000000000000000008003950323030302e75"], 0x23) 09:37:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0xa8010, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xffffffffffffff93, 0x0, &(0x7f00000002c0)=[@enter_looper, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x0, 0x0, 0x3b}], &(0x7f00000001c0)=[0x28, 0x40, 0x20, 0x38, 0x40, 0x78, 0x0]}}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x28, 0x28, 0x78, 0x38, 0x0]}, 0x2}}, @decrefs={0x40046307, 0x4}, @exit_looper], 0xbe, 0x0, 0x0}) 09:37:55 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x10) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x20) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000300)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) r1 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000100)=""/68) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x1000002ac) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8084, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000400)) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000004c0)) accept$unix(r5, 0x0, &(0x7f00000000c0)) 09:37:55 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="2c6e187b8b4f3e77fe5a534328be9949eca05ecdff97301bbb8663988b4c6ac54c6a7f4c4ee466d7d20917bdec19c2c1a6cfc7c42214799169405c095f83467e1a71ad64a02129199935fe46661decbc2690555b8db067655c953a46f3293719fd57734164fcf30f9f968360e525188a09dbc41b0f3d27445938e50a0deef1fd44f31b3790a8e4e2662815a150315e0ef69c436dc314f38ce17df78ceb4c2ff81b2430849e7dc160f86dd3b68808639e731d47d674e9f36917b322ff3a663e6d736bc117308780a0c1721e29cdfa851e68b7df891534768b8c6c345d2cb70b54dc6f5dd60c74328f6f03db0232", 0xed}], 0x1, 0x0, 0x0, 0x24000000}, {&(0x7f0000000940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="6d0ef0771505ea4105fc9fee4db81920f0213d117825f1545312422770797a9482fdd78146cc3eab40ccd975d7a172450197e1894d35674aedcd2bcb2b47e74d94fe1bb454af0bd6460a6cba722f5cb00d7254c38964e59f739ffa2479415ac4483dc89e56d86f838cc0bcd187ad2ed44ee87b418f6168722e8a842aa01bca83beff52ed6eb3e74b2ef6cd92ca59394186392bb4f9cdd6a67ed2fc62a0a2f57c7b0184c2ad4bb41e2e2dceadf2b4bed142cb612dfda610f252cc119d0782c14950b4f6b832db47179f345c9f8d858336691fadc51b6db26dfeb07bec4930baf01c0bd75d95d671479b02581be4269b3ab2a44d854f337e", 0xf7}], 0x1}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="4d997279d3b5722506ac4c1a195635c3c13828777dfb1de7e7c74d93e30a1ffce0795f772c9b383bdad834e54506ea01cd77fccdc99911043b99dea122b26c2ad675be45c060e96b283667fa4263363bcf97b0dccddcbfe70c4483e380a4f3bc9d3eda117e947d8d441a96b366ad6cab96", 0x71}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001ac0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003080)="dc3121f9a367d72af74328cab238c3b2603dc961568f4f426461649fb19c1c47f056806996d506c03796c780de833a3b669722b8149fd58bd5a5f864a7aaec797314d28e7752a00575a789b9e1676d98ad188345f406ce00625a692c9f6aaf3fbb42601a534f7673d22eab7a1a7b59ecde4fe5", 0x73}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000036c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="b8ebd6993e716e27febef7f2edb4c680944248b61ffdb05338e042afee419c44850a9ff68e30585fd3eda91401aa1b0dc390f029999a17e7437f9a5d48dd84b88c7cc14070beb8a5513682f48bfdf07ba345ccce357946dcf63b47158eb31a13fb82a78df32df1ca1da4a5dfe50d8233808bfca303611eb2ef923acd33295723cfb64185a006d1b23f693fa21b856f2ae93567957084bdbe455859005b0274dc518ea913972119e299d4b04b29367195171ab3780def69e392305db407ca1e8dfec964722b50e286f64aa781d1deb53f52f4e72ba78bdb", 0xd7}], 0x1, 0x0, 0x0, 0x4000044}], 0x5, 0x10) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r7, &(0x7f0000000140)=@can, &(0x7f0000000280)=0x80) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) 09:37:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1088.779440] binder: 6205:6208 ioctl c0306201 20000400 returned -14 [ 1088.798315] binder_alloc: binder_alloc_mmap_handler: 6205 20001000-20004000 already mapped failed -16 09:37:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x2, 0x3, 0xff, 0xc, 0x7, 0x4}, 0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1088.837611] binder: BINDER_SET_CONTEXT_MGR already set [ 1088.842926] binder: 6205:6213 ioctl 40046207 0 returned -16 [ 1088.853744] binder_alloc: 6205: binder_alloc_buf, no vma [ 1088.853761] binder: 6205:6208 transaction failed 29189/-3, size 0-0 line 3136 [ 1088.854081] binder: 6205:6211 ioctl c0306201 20000400 returned -14 [ 1088.854350] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.854395] binder: release 6205:6208 transaction 443 out, still active 09:37:55 executing program 1: socketpair$unix(0x1, 0x40000000000005, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000240)=0x0) r3 = dup2(r1, r0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/178) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x14) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000140), 0x7}]) socket$inet_udplite(0x2, 0x2, 0x88) 09:37:55 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="2c6e187b8b4f3e77fe5a534328be9949eca05ecdff97301bbb8663988b4c6ac54c6a7f4c4ee466d7d20917bdec19c2c1a6cfc7c42214799169405c095f83467e1a71ad64a02129199935fe46661decbc2690555b8db067655c953a46f3293719fd57734164fcf30f9f968360e525188a09dbc41b0f3d27445938e50a0deef1fd44f31b3790a8e4e2662815a150315e0ef69c436dc314f38ce17df78ceb4c2ff81b2430849e7dc160f86dd3b68808639e731d47d674e9f36917b322ff3a663e6d736bc117308780a0c1721e29cdfa851e68b7df891534768b8c6c345d2cb70b54dc6f5dd60c74328f6f03db0232", 0xed}], 0x1, 0x0, 0x0, 0x24000000}, {&(0x7f0000000940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="6d0ef0771505ea4105fc9fee4db81920f0213d117825f1545312422770797a9482fdd78146cc3eab40ccd975d7a172450197e1894d35674aedcd2bcb2b47e74d94fe1bb454af0bd6460a6cba722f5cb00d7254c38964e59f739ffa2479415ac4483dc89e56d86f838cc0bcd187ad2ed44ee87b418f6168722e8a842aa01bca83beff52ed6eb3e74b2ef6cd92ca59394186392bb4f9cdd6a67ed2fc62a0a2f57c7b0184c2ad4bb41e2e2dceadf2b4bed142cb612dfda610f252cc119d0782c14950b4f6b832db47179f345c9f8d858336691fadc51b6db26dfeb07bec4930baf01c0bd75d95d671479b02581be4269b3ab2a44d854f337e", 0xf7}], 0x1}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="4d997279d3b5722506ac4c1a195635c3c13828777dfb1de7e7c74d93e30a1ffce0795f772c9b383bdad834e54506ea01cd77fccdc99911043b99dea122b26c2ad675be45c060e96b283667fa4263363bcf97b0dccddcbfe70c4483e380a4f3bc9d3eda117e947d8d441a96b366ad6cab96", 0x71}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001ac0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003080)="dc3121f9a367d72af74328cab238c3b2603dc961568f4f426461649fb19c1c47f056806996d506c03796c780de833a3b669722b8149fd58bd5a5f864a7aaec797314d28e7752a00575a789b9e1676d98ad188345f406ce00625a692c9f6aaf3fbb42601a534f7673d22eab7a1a7b59ecde4fe5", 0x73}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000036c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="b8ebd6993e716e27febef7f2edb4c680944248b61ffdb05338e042afee419c44850a9ff68e30585fd3eda91401aa1b0dc390f029999a17e7437f9a5d48dd84b88c7cc14070beb8a5513682f48bfdf07ba345ccce357946dcf63b47158eb31a13fb82a78df32df1ca1da4a5dfe50d8233808bfca303611eb2ef923acd33295723cfb64185a006d1b23f693fa21b856f2ae93567957084bdbe455859005b0274dc518ea913972119e299d4b04b29367195171ab3780def69e392305db407ca1e8dfec964722b50e286f64aa781d1deb53f52f4e72ba78bdb", 0xd7}], 0x1, 0x0, 0x0, 0x4000044}], 0x5, 0x10) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r7, &(0x7f0000000140)=@can, &(0x7f0000000280)=0x80) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) 09:37:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$getown(r1, 0x9) [ 1088.854398] binder: undelivered TRANSACTION_COMPLETE [ 1088.959235] binder: release 6205:6208 transaction 443 in, still active [ 1088.969131] binder: send failed reply for transaction 443, target dead 09:37:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) getsockname(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@remote, 0x4f, r3}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) tkill(r1, 0x1000000000016) [ 1089.027341] binder_alloc: 6234: binder_alloc_buf, no vma [ 1089.032908] binder: 6234:6241 transaction failed 29189/-3, size 0-0 line 3136 [ 1089.053062] binder: send failed reply for transaction 446 to 6234:6241 [ 1089.062750] binder_alloc: binder_alloc_mmap_handler: 6234 20001000-20004000 already mapped failed -16 [ 1089.072359] binder: BINDER_SET_CONTEXT_MGR already set 09:37:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000600)='security.evm\x00', &(0x7f0000000640)=ANY=[], 0x0, 0x2) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="3dc778aa425bd4a1e15ad991ce7189cf0ffc0f1427b0fb73f39f7d7c8182fa3e0202fc1b2598db81519f83b9d93224677c350adea9890e5433492892aa239b7400aae7c489562c1d3081790390c84b1f4262254a20ad0f522390473803dd4a671ff2fde2bc611ead4f8e3b00743d63bb5fada399953dc17d030e70069007aca651e77c5dafdd1124a7bed740397e736f53d01dcb8ab29987"], 0x98) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='/security\x00']) sendfile(0xffffffffffffffff, r1, &(0x7f0000000780), 0x400) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) readv(r0, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/243, 0xf3}, {&(0x7f0000000b80)=""/146, 0x92}, {&(0x7f0000000c40)=""/216, 0xd8}, {&(0x7f0000000d40)=""/14, 0xe}, {&(0x7f0000000d80)=""/201, 0xc9}, {&(0x7f0000000ec0)=""/33, 0x21}], 0x6) fsetxattr(r0, &(0x7f0000000580)=@known='trusted.overlay.impure\x00', &(0x7f00000005c0)='/dev/loop#\x00', 0xb, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000380)=""/249, 0xf9) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000840)={'veth1\x00', {0x2, 0x4e21, @multicast2}}) open(&(0x7f0000000240)='./file0\x00', 0x400000, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_SET_ENDIAN(0x14, 0x2) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(0xffffffffffffffff) getsockopt$sock_buf(r3, 0x1, 0x800000000023, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x442) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="3209000065ffff152049ac4d8c28ee0100000000000000000008003950323030302e75"], 0x23) [ 1089.083624] binder: 6234:6241 ioctl 40046207 0 returned -16 [ 1089.090552] binder_alloc: 6234: binder_alloc_buf, no vma [ 1089.090569] binder: 6234:6247 transaction failed 29189/-3, size 0-0 line 3136 09:37:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1089.100693] binder: 6234:6247 got reply transaction with no transaction stack [ 1089.100701] binder: 6234:6247 transaction failed 29201/-71, size 0-0 line 2921 [ 1089.101044] binder: undelivered TRANSACTION_ERROR: 29189 09:37:56 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet(0x10, 0x0, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40004, 0x80) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "e5a26a38e2da476be9a86f1e2bf96ce9"}, 0x11, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xd, &(0x7f0000000240)='security.evm\x00', 0xffffffffffffffff}, 0x30) socket$netlink(0x10, 0x3, 0xc) fcntl$setown(r0, 0x8, r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgid(0x0) wait4(r3, &(0x7f0000000040), 0x80000000, &(0x7f00000000c0)) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cdc5fc6141f9d5ed403e5454915140511d44cf2e860ceadd2f2a39ebc4b5e41fb2c2f64629f0a3246b146f5015ff34451d548e55370327f46dbf0b18a56c80a121d49ca4fbfdc59a5b63c87f09e038aee871c573bf497d7a4bfeb5066a1230265df99675617c445f8a50dc7463395291fdac4db10f48067212ec7a4"], 0x5) flock(r0, 0x8) prctl$PR_SET_UNALIGN(0x6, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 09:37:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fchdir(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x109000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000000c0)={0xc, 0x5, {0x0, 0xffff, 0x5e, {0x2880, 0x3}, {0xfff, 0x100000000}, @cond=[{0x80, 0x2, 0x5, 0x3, 0x732d, 0xfffffffffffffff7}, {0x3, 0x59e6, 0x80000000, 0x400, 0x3ff, 0x1}]}, {0x57, 0xd876, 0x7, {0x5bd}, {0x1, 0x55}, @period={0x5c, 0xfdaa, 0x9, 0x9, 0x0, {0xfff, 0x5, 0xf10, 0x8}, 0x9, &(0x7f0000000040)=[0x8000, 0x7, 0x40, 0x7, 0x1, 0x401, 0x8, 0x9, 0x7]}}}) write$UHID_INPUT2(r2, &(0x7f0000000180)={0xc, 0x14, "9e83fddb9abb276303c91be3d9307d3a2c5d1f1f"}, 0x1a) [ 1089.101065] binder: undelivered TRANSACTION_ERROR: 29190 [ 1089.101131] binder: undelivered TRANSACTION_COMPLETE [ 1089.101137] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.237974] binder: undelivered TRANSACTION_ERROR: 29201 [ 1089.274518] binder_alloc: 6266: binder_alloc_buf, no vma [ 1089.295899] binder: 6266:6267 transaction failed 29189/-3, size 0-0 line 3136 [ 1089.305841] binder: send failed reply for transaction 451 to 6266:6267 [ 1089.316283] binder_alloc: binder_alloc_mmap_handler: 6266 20001000-20004000 already mapped failed -16 [ 1089.340527] binder: BINDER_SET_CONTEXT_MGR already set [ 1089.340535] binder: 6266:6273 ioctl 40046207 0 returned -16 [ 1089.365234] binder_alloc: 6266: binder_alloc_buf, no vma [ 1089.370852] binder: 6266:6276 transaction failed 29189/-3, size 0-0 line 3136 [ 1089.378880] binder: 6266:6273 got reply transaction with no transaction stack [ 1089.386183] binder: 6266:6273 transaction failed 29201/-71, size 0-0 line 2921 [ 1089.396829] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.402312] binder: undelivered TRANSACTION_ERROR: 29201 [ 1089.415455] binder: undelivered TRANSACTION_COMPLETE [ 1089.421415] binder: undelivered TRANSACTION_ERROR: 29189 09:37:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf5c8, @loopback}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:56 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet(0x10, 0x0, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40004, 0x80) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "e5a26a38e2da476be9a86f1e2bf96ce9"}, 0x11, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xd, &(0x7f0000000240)='security.evm\x00', 0xffffffffffffffff}, 0x30) socket$netlink(0x10, 0x3, 0xc) fcntl$setown(r0, 0x8, r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgid(0x0) wait4(r3, &(0x7f0000000040), 0x80000000, &(0x7f00000000c0)) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cdc5fc6141f9d5ed403e5454915140511d44cf2e860ceadd2f2a39ebc4b5e41fb2c2f64629f0a3246b146f5015ff34451d548e55370327f46dbf0b18a56c80a121d49ca4fbfdc59a5b63c87f09e038aee871c573bf497d7a4bfeb5066a1230265df99675617c445f8a50dc7463395291fdac4db10f48067212ec7a4"], 0x5) flock(r0, 0x8) prctl$PR_SET_UNALIGN(0x6, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 09:37:56 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="2c6e187b8b4f3e77fe5a534328be9949eca05ecdff97301bbb8663988b4c6ac54c6a7f4c4ee466d7d20917bdec19c2c1a6cfc7c42214799169405c095f83467e1a71ad64a02129199935fe46661decbc2690555b8db067655c953a46f3293719fd57734164fcf30f9f968360e525188a09dbc41b0f3d27445938e50a0deef1fd44f31b3790a8e4e2662815a150315e0ef69c436dc314f38ce17df78ceb4c2ff81b2430849e7dc160f86dd3b68808639e731d47d674e9f36917b322ff3a663e6d736bc117308780a0c1721e29cdfa851e68b7df891534768b8c6c345d2cb70b54dc6f5dd60c74328f6f03db0232", 0xed}], 0x1, 0x0, 0x0, 0x24000000}, {&(0x7f0000000940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="6d0ef0771505ea4105fc9fee4db81920f0213d117825f1545312422770797a9482fdd78146cc3eab40ccd975d7a172450197e1894d35674aedcd2bcb2b47e74d94fe1bb454af0bd6460a6cba722f5cb00d7254c38964e59f739ffa2479415ac4483dc89e56d86f838cc0bcd187ad2ed44ee87b418f6168722e8a842aa01bca83beff52ed6eb3e74b2ef6cd92ca59394186392bb4f9cdd6a67ed2fc62a0a2f57c7b0184c2ad4bb41e2e2dceadf2b4bed142cb612dfda610f252cc119d0782c14950b4f6b832db47179f345c9f8d858336691fadc51b6db26dfeb07bec4930baf01c0bd75d95d671479b02581be4269b3ab2a44d854f337e", 0xf7}], 0x1}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="4d997279d3b5722506ac4c1a195635c3c13828777dfb1de7e7c74d93e30a1ffce0795f772c9b383bdad834e54506ea01cd77fccdc99911043b99dea122b26c2ad675be45c060e96b283667fa4263363bcf97b0dccddcbfe70c4483e380a4f3bc9d3eda117e947d8d441a96b366ad6cab96", 0x71}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001ac0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003080)="dc3121f9a367d72af74328cab238c3b2603dc961568f4f426461649fb19c1c47f056806996d506c03796c780de833a3b669722b8149fd58bd5a5f864a7aaec797314d28e7752a00575a789b9e1676d98ad188345f406ce00625a692c9f6aaf3fbb42601a534f7673d22eab7a1a7b59ecde4fe5", 0x73}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000036c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="b8ebd6993e716e27febef7f2edb4c680944248b61ffdb05338e042afee419c44850a9ff68e30585fd3eda91401aa1b0dc390f029999a17e7437f9a5d48dd84b88c7cc14070beb8a5513682f48bfdf07ba345ccce357946dcf63b47158eb31a13fb82a78df32df1ca1da4a5dfe50d8233808bfca303611eb2ef923acd33295723cfb64185a006d1b23f693fa21b856f2ae93567957084bdbe455859005b0274dc518ea913972119e299d4b04b29367195171ab3780def69e392305db407ca1e8dfec964722b50e286f64aa781d1deb53f52f4e72ba78bdb", 0xd7}], 0x1, 0x0, 0x0, 0x4000044}], 0x5, 0x10) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r7, &(0x7f0000000140)=@can, &(0x7f0000000280)=0x80) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) 09:37:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000100)={0x2, 0x3, 0x4, 0x4, 0x2, 0x94}) getsockopt$inet_buf(r0, 0x0, 0x80000029, &(0x7f00000001c0)=""/145, &(0x7f0000000280)=0xfffffffffffffec5) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/25) 09:37:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00360440549f21ecfc36b9ed107042d4d7d99326c36f55edc5bfb271"], 0x0, 0x0, 0x0}) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:system_map_t:s0\x00', 0x22, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$getown(r1, 0x9) 09:37:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x16}, r1}, 0x14) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400000000, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a2) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000100)) 09:37:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1089.681920] binder_alloc: 6283: binder_alloc_buf, no vma [ 1089.690383] binder: 6283:6285 transaction failed 29189/-3, size 0-0 line 3136 [ 1089.699219] binder: BINDER_SET_CONTEXT_MGR already set 09:37:56 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ipv6_route\x00') socketpair(0x11, 0x0, 0x8, &(0x7f0000000680)) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000004c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x1, 0x80101, 0x2, 0xffffffff, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000004a5310837bb25162a0000000100000000000000be0000000000000002000000000400000000"], 0x2a) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(&(0x7f00000008c0)=@md0='/dev/md0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000740)='bdev\x00', 0x2000023, &(0x7f0000000900)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') mount(&(0x7f0000000940)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e061019df973b2f53d859e769464fe2a2410d59da45d13169add1c5529ce3628e6153ceb2e151b4c4a2bdac535d60eb398d4d6952a19e3d52a29749828eb1caff4558ca709d9c13c28a2da129717e838eb618c9886828e09a944bc03f33827c69c3fbb70d4b5fba995326c48ced38769a4d61db50c0ec11260778f607660f2b85e3cd0d67bc0cccd8dfba547fe5e36524ef742126514000d7cf7126e2536307a8290af7f78189fa963bfaf8cf0dee8d84a76599366358414b18f32d01f7a3d0b4802a4d706109f9138e41508afeea"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="3040abf7d58436d7496072d88d9fb924bf91f65251c2210ce6c33f5cf63ee466a17a37b30eb2325bbc9556b9ba20d4df40a9cb69d15d3308712819f3d2f27695155ef2b723bc4fcb5d38c46f71f14089eea8a3bb9dfa1e774fccee35dc618d63aa608e8d3f0421aabde758c08399866dd6f0c9c72140b221ecf2e98b2b85bb8df6694a"], 0x0, 0x0, 0x80000, 0x0) r4 = dup2(r0, r0) ioctl$TCSBRKP(r3, 0x5425, 0x8e9) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x0, 0x2) listen(r4, 0x0) ioctl$int_out(r3, 0xfffffffffffffffe, &(0x7f00000002c0)) link(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f00000007c0)) 09:37:56 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001400)='/dev/keychord\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000001440)={0x3, 0x7, 0x4, 0x1}, 0x10) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\\)proc\x94!wlan1\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r2, 0x101, 0x5, r3) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001240)='/selinux/checkreqprot\x00', 0x200800, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000001280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x800, 0x0, 0xca}) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) read(r5, &(0x7f0000000240)=""/4096, 0x1000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0xa) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001300)='NET_DM\x00') ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000001480)) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, r7, 0x230, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44) [ 1089.699227] binder: 6287:6291 ioctl 40046207 0 returned -16 [ 1089.699320] binder: 6287:6291 unknown command 1074017792 [ 1089.699328] binder: 6287:6291 ioctl c0306201 20000440 returned -22 09:37:56 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast2}, 0x4e21, 0x6, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x84, 0x0, r1}, {0x5e3b, 0x54ea, 0x4, 0x4, 0x0, 0x8, 0xb23f, 0x1}, {0x401, 0x400, 0x80000000, 0x10001}, 0x364c8798, 0x6e6bb4, 0x2, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x1d}, 0x4d6}, 0x2, @in=@empty, 0x3502, 0x3, 0x0, 0x0, 0x6, 0x4000000, 0x200}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1089.699721] audit: type=1400 audit(1549618676.572:60): avc: denied { associate } for pid=6287 comm="syz-executor5" name="binder0" dev="devtmpfs" ino=4760 scontext=system_u:object_r:system_map_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 1089.700101] binder: 6287:6291 got reply transaction with no transaction stack [ 1089.700109] binder: 6287:6291 transaction failed 29201/-71, size 0-0 line 2921 [ 1089.701748] binder_alloc: binder_alloc_mmap_handler: 6287 20001000-20004000 already mapped failed -16 [ 1089.701825] binder: BINDER_SET_CONTEXT_MGR already set [ 1089.701831] binder: 6287:6291 ioctl 40046207 0 returned -16 [ 1089.702262] binder: 6287:6294 unknown command 1074017792 [ 1089.702270] binder: 6287:6294 ioctl c0306201 20000440 returned -22 [ 1089.702677] binder: undelivered TRANSACTION_ERROR: 29201 [ 1089.773314] binder: BINDER_SET_CONTEXT_MGR already set [ 1089.773329] binder: 6299:6308 ioctl 40046207 0 returned -16 [ 1089.825024] binder: 6299:6317 got reply transaction with no transaction stack [ 1089.825034] binder: 6299:6317 transaction failed 29201/-71, size 0-0 line 2921 09:37:56 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="2c6e187b8b4f3e77fe5a534328be9949eca05ecdff97301bbb8663988b4c6ac54c6a7f4c4ee466d7d20917bdec19c2c1a6cfc7c42214799169405c095f83467e1a71ad64a02129199935fe46661decbc2690555b8db067655c953a46f3293719fd57734164fcf30f9f968360e525188a09dbc41b0f3d27445938e50a0deef1fd44f31b3790a8e4e2662815a150315e0ef69c436dc314f38ce17df78ceb4c2ff81b2430849e7dc160f86dd3b68808639e731d47d674e9f36917b322ff3a663e6d736bc117308780a0c1721e29cdfa851e68b7df891534768b8c6c345d2cb70b54dc6f5dd60c74328f6f03db0232", 0xed}], 0x1, 0x0, 0x0, 0x24000000}, {&(0x7f0000000940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="6d0ef0771505ea4105fc9fee4db81920f0213d117825f1545312422770797a9482fdd78146cc3eab40ccd975d7a172450197e1894d35674aedcd2bcb2b47e74d94fe1bb454af0bd6460a6cba722f5cb00d7254c38964e59f739ffa2479415ac4483dc89e56d86f838cc0bcd187ad2ed44ee87b418f6168722e8a842aa01bca83beff52ed6eb3e74b2ef6cd92ca59394186392bb4f9cdd6a67ed2fc62a0a2f57c7b0184c2ad4bb41e2e2dceadf2b4bed142cb612dfda610f252cc119d0782c14950b4f6b832db47179f345c9f8d858336691fadc51b6db26dfeb07bec4930baf01c0bd75d95d671479b02581be4269b3ab2a44d854f337e", 0xf7}], 0x1}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="4d997279d3b5722506ac4c1a195635c3c13828777dfb1de7e7c74d93e30a1ffce0795f772c9b383bdad834e54506ea01cd77fccdc99911043b99dea122b26c2ad675be45c060e96b283667fa4263363bcf97b0dccddcbfe70c4483e380a4f3bc9d3eda117e947d8d441a96b366ad6cab96", 0x71}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001ac0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003080)="dc3121f9a367d72af74328cab238c3b2603dc961568f4f426461649fb19c1c47f056806996d506c03796c780de833a3b669722b8149fd58bd5a5f864a7aaec797314d28e7752a00575a789b9e1676d98ad188345f406ce00625a692c9f6aaf3fbb42601a534f7673d22eab7a1a7b59ecde4fe5", 0x73}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000036c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="b8ebd6993e716e27febef7f2edb4c680944248b61ffdb05338e042afee419c44850a9ff68e30585fd3eda91401aa1b0dc390f029999a17e7437f9a5d48dd84b88c7cc14070beb8a5513682f48bfdf07ba345ccce357946dcf63b47158eb31a13fb82a78df32df1ca1da4a5dfe50d8233808bfca303611eb2ef923acd33295723cfb64185a006d1b23f693fa21b856f2ae93567957084bdbe455859005b0274dc518ea913972119e299d4b04b29367195171ab3780def69e392305db407ca1e8dfec964722b50e286f64aa781d1deb53f52f4e72ba78bdb", 0xd7}], 0x1, 0x0, 0x0, 0x4000044}], 0x5, 0x10) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r7, &(0x7f0000000140)=@can, &(0x7f0000000280)=0x80) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) 09:37:56 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ipv6_route\x00') socketpair(0x11, 0x0, 0x8, &(0x7f0000000680)) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000004c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x1, 0x80101, 0x2, 0xffffffff, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000004a5310837bb25162a0000000100000000000000be0000000000000002000000000400000000"], 0x2a) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(&(0x7f00000008c0)=@md0='/dev/md0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000740)='bdev\x00', 0x2000023, &(0x7f0000000900)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') mount(&(0x7f0000000940)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e061019df973b2f53d859e769464fe2a2410d59da45d13169add1c5529ce3628e6153ceb2e151b4c4a2bdac535d60eb398d4d6952a19e3d52a29749828eb1caff4558ca709d9c13c28a2da129717e838eb618c9886828e09a944bc03f33827c69c3fbb70d4b5fba995326c48ced38769a4d61db50c0ec11260778f607660f2b85e3cd0d67bc0cccd8dfba547fe5e36524ef742126514000d7cf7126e2536307a8290af7f78189fa963bfaf8cf0dee8d84a76599366358414b18f32d01f7a3d0b4802a4d706109f9138e41508afeea"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="3040abf7d58436d7496072d88d9fb924bf91f65251c2210ce6c33f5cf63ee466a17a37b30eb2325bbc9556b9ba20d4df40a9cb69d15d3308712819f3d2f27695155ef2b723bc4fcb5d38c46f71f14089eea8a3bb9dfa1e774fccee35dc618d63aa608e8d3f0421aabde758c08399866dd6f0c9c72140b221ecf2e98b2b85bb8df6694a"], 0x0, 0x0, 0x80000, 0x0) r4 = dup2(r0, r0) ioctl$TCSBRKP(r3, 0x5425, 0x8e9) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x0, 0x2) listen(r4, 0x0) ioctl$int_out(r3, 0xfffffffffffffffe, &(0x7f00000002c0)) link(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f00000007c0)) 09:37:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0xa0140100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) wait4(0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) ioctl$TIOCEXCL(r0, 0x540c) open(0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) syz_open_procfs(r1, &(0x7f0000000100)='net/icmp6\x00') 09:37:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0x6, 0x5}, {0x325, 0x5}], r1}, 0x18, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfffffffffffffffe, @remote, 0x7}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e20, @empty}, 0x60, 0x0, 0x0, 0x0, 0x4e4150b2, &(0x7f0000000100)='vcan0\x00', 0x2, 0x7, 0x7}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1089.927514] binder: send failed reply for transaction 456 to 6283:6285 [ 1089.946725] binder: undelivered TRANSACTION_COMPLETE [ 1089.952776] tmpfs: No value for mount option 'ŠuU{-4-«ÀËn×6*5ì2cŸÏ¸¶všAK•Ôdx#ø ñSÄÂ^æbªl)eb' 09:37:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0xa010, 0x0) 09:37:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote, 0x7}, 0x1c) r1 = gettid() r2 = dup(r0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x7f}, 0xb) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x10, 0x0, @thr={&(0x7f0000000280)="1d598d423b57e9db657a8bc222c50355b298f35cfe048382b2b8b620060fe40d46c21b75b08bea8553124c621b5e0134347e692062eb3739cc5a04047e5435c57fe2e28b8e9ee493296e5d0db1d6cec9b1e86d09fc578bfeaebb7bca916c", &(0x7f0000000300)="8924fc367a9fad520679b14d0f0c65b5d85d97f7fb2793bde4c06965a6181793796f45165ba1c104363c175114e2a25351b60b2ff942042aa74fc4cbd41730faf9ae90a27752a1e6548f48efb8b2824d84"}}, &(0x7f0000000100)) ptrace$cont(0x7, r3, 0x0, 0x7) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = dup3(r0, r2, 0x80000) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00000001c0)="5424ef5d49dbc758ab73b6cd5e229648b64a11a2c88f3385d7511b10686fccffc50857a3bfa40cfbf6aa55c4867e2889a8034df6ca0f6c179b971508a28de42bfee74332503e2f3e83ae2e098d189bbd81df251f0b12b552b142cbd95c3bf57805e7907cda43de569d1ca593ea60d5d99c5d14cdea35ed9c4b98d17b6830dd8ae15c6484a5cce8a6ded4") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000500600008005000038030000480200003803000038030000800500008005000080050000800500008005000006000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x6b0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) tkill(r1, 0x1000000000016) 09:37:56 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000080)="cd8075fcb0b06deeef69dc00d9c4017d50ee8adc64d16e6e92000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x45b6fe55, 0x9, 0x1, 0x0, 0x0, [{r0, 0x0, 0x4}]}) [ 1090.000771] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.040707] binder: undelivered TRANSACTION_ERROR: 29190 09:37:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$getenv(0x4201, r1, 0x8, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket(0x10, 0x5, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x4, 0xab, [], 0x2, &(0x7f0000000280)=[{}, {}], &(0x7f00000002c0)=""/171}, &(0x7f0000000400)=0x78) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r3, 0x7, &(0x7f0000000000)=0xb47) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1090.084226] binder: send failed reply for transaction 459 to 6299:6308 09:37:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000d80)=0x2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe0, r6, 0xe08, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0b3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x280000000000}]}, @TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd0d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9115}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20048884}, 0x800) write$P9_RSTATu(r2, &(0x7f0000000b80)={0x5c, 0x7d, 0x1, {{0x0, 0x42, 0xf000000000000000, 0x0, {0x42, 0x0, 0x5}, 0x1000000, 0x238, 0xfffffffffffff475, 0x2, 0x0, '', 0x6, '$GPL/+', 0x8, 'RATEEST\x00', 0x1, '.'}, 0x5, 'time\x00', r3, r4, r5}}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x490, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f0000000100), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x19, 0x4b, 0x64, 'rose0\x00', 'gre0\x00', 'eql\x00', 'ip6gretap0\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xf0, 0x128}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6c70793b, 'syz0\x00', 0x6b}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}}}, {{{0x11, 0x10, 0x8917, 'syz_tun\x00', 'ip6erspan0\x00', 'veth1_to_hsr\x00', 'irlan0\x00', @dev={[], 0x21}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @random="1fbb169446da", [0xff, 0xff, 0x0, 0xff], 0x70, 0xc0, 0xf0}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00', 0x6dae}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x10, 0x88df, 'veth1_to_team\x00', 'ip6tnl0\x00', 'bcsh0\x00', 'veth0_to_bridge\x00', @random="d60bb2d13003", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xf8, 0x1b8, 0x1e8, [@time={'time\x00', 0x18, {{0xffffffff00000000, 0x6, 0x9e19, 0x7e28, 0x5300000000000000, 0xb27, 0x1}}}, @limit={'limit\x00', 0x20, {{0x6, 0x3f, 0x2, 0x3f, 0x80000001, 0xff}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x7f, 0x5480, 0x1000, 0x1, 0x0, "53a20ddb506d13c5f350ec24bce6f493362916f71a0133d086ee02b8c8254901b03b546dd1352f662ad6e11c1bc043d7fcad9a5ef36c699e248891427ac5c2c8"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x4, 0x1, 0x49d}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x101}}}}]}]}, 0x508) 09:37:57 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880)='/dev/zero\x00', 0x10000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000008c0)="07adf1f5e3eb90babd61c0c48a900db6", 0x10) keyctl$session_to_parent(0x12) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) fremovexattr(r1, &(0x7f0000000040)=@random={'os2.', 'mime_type\x00'}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) fremovexattr(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[]) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x24000, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x2, 0x12) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x17, 0xd6, &(0x7f0000000380)="7f8affa99a6e4fa7582a830e3936f073d860be765cd0cf9d44b968075e9c14e7ebefe0bc51d4b2ec25b1cc73ab0d10b32beb2c52076a62a3954f05dd0238c769ae5aed0bd92aff5bec32ffb67be6a0f0114f680c286661c5516727bd663adbff761fbb0e6066a661bac71f10234393f31b2582a5c93cfdb3089775d8461f08f40a71769a2b962f53e8e14df09ba5789ce36d3a35bbd52faf3492d47d9ea0144fb3f5ef24c396861f0880da9e87a7ca8d910d9b205209db75a638bc7c3c623835bb4b68df7ce55a1d70391295635451bbd27a6baf57a6"}) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x44) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c0000001000000014", 0x5e, 0x1400}], 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:37:57 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="2c6e187b8b4f3e77fe5a534328be9949eca05ecdff97301bbb8663988b4c6ac54c6a7f4c4ee466d7d20917bdec19c2c1a6cfc7c42214799169405c095f83467e1a71ad64a02129199935fe46661decbc2690555b8db067655c953a46f3293719fd57734164fcf30f9f968360e525188a09dbc41b0f3d27445938e50a0deef1fd44f31b3790a8e4e2662815a150315e0ef69c436dc314f38ce17df78ceb4c2ff81b2430849e7dc160f86dd3b68808639e731d47d674e9f36917b322ff3a663e6d736bc117308780a0c1721e29cdfa851e68b7df891534768b8c6c345d2cb70b54dc6f5dd60c74328f6f03db0232", 0xed}], 0x1, 0x0, 0x0, 0x24000000}, {&(0x7f0000000940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="6d0ef0771505ea4105fc9fee4db81920f0213d117825f1545312422770797a9482fdd78146cc3eab40ccd975d7a172450197e1894d35674aedcd2bcb2b47e74d94fe1bb454af0bd6460a6cba722f5cb00d7254c38964e59f739ffa2479415ac4483dc89e56d86f838cc0bcd187ad2ed44ee87b418f6168722e8a842aa01bca83beff52ed6eb3e74b2ef6cd92ca59394186392bb4f9cdd6a67ed2fc62a0a2f57c7b0184c2ad4bb41e2e2dceadf2b4bed142cb612dfda610f252cc119d0782c14950b4f6b832db47179f345c9f8d858336691fadc51b6db26dfeb07bec4930baf01c0bd75d95d671479b02581be4269b3ab2a44d854f337e", 0xf7}], 0x1}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="4d997279d3b5722506ac4c1a195635c3c13828777dfb1de7e7c74d93e30a1ffce0795f772c9b383bdad834e54506ea01cd77fccdc99911043b99dea122b26c2ad675be45c060e96b283667fa4263363bcf97b0dccddcbfe70c4483e380a4f3bc9d3eda117e947d8d441a96b366ad6cab96", 0x71}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001ac0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003080)="dc3121f9a367d72af74328cab238c3b2603dc961568f4f426461649fb19c1c47f056806996d506c03796c780de833a3b669722b8149fd58bd5a5f864a7aaec797314d28e7752a00575a789b9e1676d98ad188345f406ce00625a692c9f6aaf3fbb42601a534f7673d22eab7a1a7b59ecde4fe5", 0x73}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000036c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="b8ebd6993e716e27febef7f2edb4c680944248b61ffdb05338e042afee419c44850a9ff68e30585fd3eda91401aa1b0dc390f029999a17e7437f9a5d48dd84b88c7cc14070beb8a5513682f48bfdf07ba345ccce357946dcf63b47158eb31a13fb82a78df32df1ca1da4a5dfe50d8233808bfca303611eb2ef923acd33295723cfb64185a006d1b23f693fa21b856f2ae93567957084bdbe455859005b0274dc518ea913972119e299d4b04b29367195171ab3780def69e392305db407ca1e8dfec964722b50e286f64aa781d1deb53f52f4e72ba78bdb", 0xd7}], 0x1, 0x0, 0x0, 0x4000044}], 0x5, 0x10) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r7, &(0x7f0000000140)=@can, &(0x7f0000000280)=0x80) [ 1090.554860] binder_alloc: binder_alloc_mmap_handler: 6299 20001000-20004000 already mapped failed -16 [ 1090.564827] binder_alloc: 6299: binder_alloc_buf, no vma [ 1090.570419] binder: 6299:6373 transaction failed 29189/-3, size 0-0 line 3136 [ 1090.578331] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.583887] binder: undelivered TRANSACTION_ERROR: 29201 [ 1090.593752] binder: undelivered TRANSACTION_COMPLETE 09:37:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="020500030c000000000000200000000002000900400000000000bc0000000000030006000000000002000000e0000054d8145818d57ab9000200010000001d000000fe0100044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 09:37:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_open_pts(r1, 0x400000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1090.608483] binder: undelivered TRANSACTION_ERROR: 29189 09:37:57 executing program 2: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000080)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40440, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0xb9, 0x0, &(0x7f00000000c0)="705bd3133fec634e60bf10058ceaa00a5b8bfe50c555db08a6b01783daeb146375f96b3f12d0523b841d954293b8a0c2390a2e24dc1377136b5a01f936537fe25fc226347d98b111270c2875420fd5703a705699b53135546ca922e5138d8508886d969ccef598af7cab83686aaee7a693d363303d21d7e5ae6ee02df7e209a9dd19116d2c159345ac47010f0b5f715ca2abe63e2259232b9cdf308e41851995f0cc1e57cdcef68d2dae22f22a5b1935bce2438d092cd3bc69"}) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) [ 1090.659086] binder_alloc: 6376: binder_alloc_buf, no vma [ 1090.664712] binder: 6376:6383 transaction failed 29189/-3, size 0-0 line 3136 [ 1090.684069] binder: send failed reply for transaction 464 to 6376:6383 09:37:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x5, 0x7, 0x9, 0x2b, 0x0, 0x7, 0x10, 0x3, 0xcc5, 0x43, 0x401, 0x81, 0x9, 0x3, 0x4, 0xfffffffffffffff8, 0x80000000, 0x9, 0x3, 0x6, 0x101, 0x91, 0x6906, 0x401, 0x2, 0x920f, 0x9, 0x9, 0x91, 0x80000001, 0x7f, 0x8, 0x7, 0x6, 0x3ff, 0x10000, 0x0, 0x8, 0x4, @perf_config_ext={0x3c, 0x7}, 0x10, 0xe08b, 0xbb, 0x5, 0x4, 0xfffffffffffffffd, 0x7}, r1, 0x1, r2, 0x2) tkill(r1, 0x1000000000016) 09:37:57 executing program 1: r0 = gettid() waitid(0x1, r0, &(0x7f0000000000), 0x8, 0x0) setpgid(0x0, 0xffffffffffffffff) waitid(0x2, r0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) 09:37:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffffffffffffffd}]}) timer_create(0x3, 0x0, &(0x7f0000000000)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6}]}) timer_delete(0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) eventfd2(0xfffffffffffffffc, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) ioprio_get$uid(0x3, r4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14103f, 0x40000000000000) ftruncate(r5, 0x7fff) sendfile(r3, r5, 0x0, 0x8000fffffffe) 09:37:57 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="2c6e187b8b4f3e77fe5a534328be9949eca05ecdff97301bbb8663988b4c6ac54c6a7f4c4ee466d7d20917bdec19c2c1a6cfc7c42214799169405c095f83467e1a71ad64a02129199935fe46661decbc2690555b8db067655c953a46f3293719fd57734164fcf30f9f968360e525188a09dbc41b0f3d27445938e50a0deef1fd44f31b3790a8e4e2662815a150315e0ef69c436dc314f38ce17df78ceb4c2ff81b2430849e7dc160f86dd3b68808639e731d47d674e9f36917b322ff3a663e6d736bc117308780a0c1721e29cdfa851e68b7df891534768b8c6c345d2cb70b54dc6f5dd60c74328f6f03db0232", 0xed}], 0x1, 0x0, 0x0, 0x24000000}, {&(0x7f0000000940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="6d0ef0771505ea4105fc9fee4db81920f0213d117825f1545312422770797a9482fdd78146cc3eab40ccd975d7a172450197e1894d35674aedcd2bcb2b47e74d94fe1bb454af0bd6460a6cba722f5cb00d7254c38964e59f739ffa2479415ac4483dc89e56d86f838cc0bcd187ad2ed44ee87b418f6168722e8a842aa01bca83beff52ed6eb3e74b2ef6cd92ca59394186392bb4f9cdd6a67ed2fc62a0a2f57c7b0184c2ad4bb41e2e2dceadf2b4bed142cb612dfda610f252cc119d0782c14950b4f6b832db47179f345c9f8d858336691fadc51b6db26dfeb07bec4930baf01c0bd75d95d671479b02581be4269b3ab2a44d854f337e", 0xf7}], 0x1}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="4d997279d3b5722506ac4c1a195635c3c13828777dfb1de7e7c74d93e30a1ffce0795f772c9b383bdad834e54506ea01cd77fccdc99911043b99dea122b26c2ad675be45c060e96b283667fa4263363bcf97b0dccddcbfe70c4483e380a4f3bc9d3eda117e947d8d441a96b366ad6cab96", 0x71}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001ac0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003080)="dc3121f9a367d72af74328cab238c3b2603dc961568f4f426461649fb19c1c47f056806996d506c03796c780de833a3b669722b8149fd58bd5a5f864a7aaec797314d28e7752a00575a789b9e1676d98ad188345f406ce00625a692c9f6aaf3fbb42601a534f7673d22eab7a1a7b59ecde4fe5", 0x73}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000036c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="b8ebd6993e716e27febef7f2edb4c680944248b61ffdb05338e042afee419c44850a9ff68e30585fd3eda91401aa1b0dc390f029999a17e7437f9a5d48dd84b88c7cc14070beb8a5513682f48bfdf07ba345ccce357946dcf63b47158eb31a13fb82a78df32df1ca1da4a5dfe50d8233808bfca303611eb2ef923acd33295723cfb64185a006d1b23f693fa21b856f2ae93567957084bdbe455859005b0274dc518ea913972119e299d4b04b29367195171ab3780def69e392305db407ca1e8dfec964722b50e286f64aa781d1deb53f52f4e72ba78bdb", 0xd7}], 0x1, 0x0, 0x0, 0x4000044}], 0x5, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1090.704776] binder_alloc: binder_alloc_mmap_handler: 6376 20001000-20004000 already mapped failed -16 [ 1090.725320] binder: BINDER_SET_CONTEXT_MGR already set [ 1090.732937] binder: 6376:6383 ioctl 40046207 0 returned -16 [ 1090.732956] binder_alloc: 6376: binder_alloc_buf, no vma [ 1090.732974] binder: 6376:6394 transaction failed 29189/-3, size 0-0 line 3136 [ 1090.733109] binder: 6376:6394 got reply transaction with no transaction stack [ 1090.733116] binder: 6376:6394 transaction failed 29201/-71, size 0-0 line 2921 [ 1090.733643] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.733666] binder: undelivered TRANSACTION_ERROR: 29190 [ 1090.739358] binder: undelivered TRANSACTION_COMPLETE [ 1090.739365] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.766118] audit: type=1400 audit(1549618677.632:61): avc: denied { setopt } for pid=6400 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1090.920842] binder: undelivered TRANSACTION_ERROR: 29201 09:37:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000d80)=0x2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe0, r6, 0xe08, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0b3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x280000000000}]}, @TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd0d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9115}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20048884}, 0x800) write$P9_RSTATu(r2, &(0x7f0000000b80)={0x5c, 0x7d, 0x1, {{0x0, 0x42, 0xf000000000000000, 0x0, {0x42, 0x0, 0x5}, 0x1000000, 0x238, 0xfffffffffffff475, 0x2, 0x0, '', 0x6, '$GPL/+', 0x8, 'RATEEST\x00', 0x1, '.'}, 0x5, 'time\x00', r3, r4, r5}}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x490, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f0000000100), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x19, 0x4b, 0x64, 'rose0\x00', 'gre0\x00', 'eql\x00', 'ip6gretap0\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xf0, 0x128}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6c70793b, 'syz0\x00', 0x6b}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}}}, {{{0x11, 0x10, 0x8917, 'syz_tun\x00', 'ip6erspan0\x00', 'veth1_to_hsr\x00', 'irlan0\x00', @dev={[], 0x21}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @random="1fbb169446da", [0xff, 0xff, 0x0, 0xff], 0x70, 0xc0, 0xf0}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00', 0x6dae}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x10, 0x88df, 'veth1_to_team\x00', 'ip6tnl0\x00', 'bcsh0\x00', 'veth0_to_bridge\x00', @random="d60bb2d13003", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xf8, 0x1b8, 0x1e8, [@time={'time\x00', 0x18, {{0xffffffff00000000, 0x6, 0x9e19, 0x7e28, 0x5300000000000000, 0xb27, 0x1}}}, @limit={'limit\x00', 0x20, {{0x6, 0x3f, 0x2, 0x3f, 0x80000001, 0xff}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x7f, 0x5480, 0x1000, 0x1, 0x0, "53a20ddb506d13c5f350ec24bce6f493362916f71a0133d086ee02b8c8254901b03b546dd1352f662ad6e11c1bc043d7fcad9a5ef36c699e248891427ac5c2c8"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x4, 0x1, 0x49d}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x101}}}}]}]}, 0x508) 09:37:57 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x10000, 0x10000) r0 = socket$packet(0x11, 0x400000000000002, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000180)={0x6, 0x1ff, 0xfff, 0x7fffffff}) socket$unix(0x1, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9cf2, 0xb611, 0x1000, 0x400, 0x1, 0x1441, 0x1}, 0x759e073273491a88) pipe(&(0x7f0000000300)) unshare(0x400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 09:37:57 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="2c6e187b8b4f3e77fe5a534328be9949eca05ecdff97301bbb8663988b4c6ac54c6a7f4c4ee466d7d20917bdec19c2c1a6cfc7c42214799169405c095f83467e1a71ad64a02129199935fe46661decbc2690555b8db067655c953a46f3293719fd57734164fcf30f9f968360e525188a09dbc41b0f3d27445938e50a0deef1fd44f31b3790a8e4e2662815a150315e0ef69c436dc314f38ce17df78ceb4c2ff81b2430849e7dc160f86dd3b68808639e731d47d674e9f36917b322ff3a663e6d736bc117308780a0c1721e29cdfa851e68b7df891534768b8c6c345d2cb70b54dc6f5dd60c74328f6f03db0232", 0xed}], 0x1, 0x0, 0x0, 0x24000000}, {&(0x7f0000000940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="6d0ef0771505ea4105fc9fee4db81920f0213d117825f1545312422770797a9482fdd78146cc3eab40ccd975d7a172450197e1894d35674aedcd2bcb2b47e74d94fe1bb454af0bd6460a6cba722f5cb00d7254c38964e59f739ffa2479415ac4483dc89e56d86f838cc0bcd187ad2ed44ee87b418f6168722e8a842aa01bca83beff52ed6eb3e74b2ef6cd92ca59394186392bb4f9cdd6a67ed2fc62a0a2f57c7b0184c2ad4bb41e2e2dceadf2b4bed142cb612dfda610f252cc119d0782c14950b4f6b832db47179f345c9f8d858336691fadc51b6db26dfeb07bec4930baf01c0bd75d95d671479b02581be4269b3ab2a44d854f337e", 0xf7}], 0x1}, {&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="4d997279d3b5722506ac4c1a195635c3c13828777dfb1de7e7c74d93e30a1ffce0795f772c9b383bdad834e54506ea01cd77fccdc99911043b99dea122b26c2ad675be45c060e96b283667fa4263363bcf97b0dccddcbfe70c4483e380a4f3bc9d3eda117e947d8d441a96b366ad6cab96", 0x71}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001ac0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003080)="dc3121f9a367d72af74328cab238c3b2603dc961568f4f426461649fb19c1c47f056806996d506c03796c780de833a3b669722b8149fd58bd5a5f864a7aaec797314d28e7752a00575a789b9e1676d98ad188345f406ce00625a692c9f6aaf3fbb42601a534f7673d22eab7a1a7b59ecde4fe5", 0x73}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000036c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="b8ebd6993e716e27febef7f2edb4c680944248b61ffdb05338e042afee419c44850a9ff68e30585fd3eda91401aa1b0dc390f029999a17e7437f9a5d48dd84b88c7cc14070beb8a5513682f48bfdf07ba345ccce357946dcf63b47158eb31a13fb82a78df32df1ca1da4a5dfe50d8233808bfca303611eb2ef923acd33295723cfb64185a006d1b23f693fa21b856f2ae93567957084bdbe455859005b0274dc518ea913972119e299d4b04b29367195171ab3780def69e392305db407ca1e8dfec964722b50e286f64aa781d1deb53f52f4e72ba78bdb", 0xd7}], 0x1, 0x0, 0x0, 0x4000044}], 0x5, 0x10) 09:37:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1091.023758] binder_alloc: 6427: binder_alloc_buf, no vma [ 1091.029876] binder: 6421:6426 transaction failed 29189/-3, size 0-0 line 3136 [ 1091.038301] binder: send failed reply for transaction 470 to 6427:6430 [ 1091.050715] binder: release 6421:6426 transaction 471 out, still active [ 1091.059914] binder: undelivered TRANSACTION_COMPLETE 09:37:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) unshare(0x2000400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000600)=""/207, 0xfed1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) 09:37:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x78, @loopback, 0x800}, 0xfffffe94) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5f, 0x0}, 0x800000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:58 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) [ 1091.068178] binder: 6427:6434 got reply transaction with no transaction stack [ 1091.068189] binder: 6427:6434 transaction failed 29201/-71, size 0-0 line 2921 [ 1091.099294] binder: undelivered TRANSACTION_ERROR: 29190 [ 1091.109522] binder: send failed reply for transaction 471, target dead 09:37:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)={0x6, 0x2, 0x4, 0x7, 0x2, [{0x8, 0x7, 0x0, 0x0, 0x0, 0x100}, {0x7, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0x1d0b}]}) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0xffffffffffff38e3, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000008fc5362c906c00000000000000000000000000000000"], 0x3c) 09:37:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4ad7e323", @ANYRES16=r2, @ANYBLOB="00082bbd7000ffdbdf250300000008000400ffffffff0c0002000800050004000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000094) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000240)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000003c0)={'irlan0\x00', 0x100000001}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1, 0x0) 09:37:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4ad7e323", @ANYRES16=r2, @ANYBLOB="00082bbd7000ffdbdf250300000008000400ffffffff0c0002000800050004000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000094) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000240)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000003c0)={'irlan0\x00', 0x100000001}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1, 0x0) 09:37:58 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) 09:37:58 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) [ 1091.813999] binder_alloc: binder_alloc_mmap_handler: 6427 20001000-20004000 already mapped failed -16 [ 1091.823900] binder: BINDER_SET_CONTEXT_MGR already set [ 1091.823906] binder: 6427:6474 ioctl 40046207 0 returned -16 [ 1091.824003] binder: 6427:6474 transaction failed 29189/-22, size 0-0 line 3013 [ 1091.844410] binder: undelivered TRANSACTION_ERROR: 29189 [ 1091.850289] binder: undelivered TRANSACTION_ERROR: 29201 [ 1091.855837] binder: undelivered TRANSACTION_COMPLETE [ 1091.861857] binder: undelivered TRANSACTION_ERROR: 29189 09:37:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='system_u:object_r:faillog_t:s0 ject_r:restorecond_var_run_t:s0000000000128 /usr/sbin/cups-browsed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x76) ioctl$KIOCSOUND(r2, 0x4b2f, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4020, 0x6}, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, r2, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'ip6_vti0\x00', 0x9}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x8000000b1, 0x0, 0x0, 0xffffffffffefffff}, {0x6}]}, 0xffffffffffffffe2) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, 0x0}}], 0x300, 0x0) 09:37:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff, @remote, 0x5}, 0xffffffffffffffe2) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:37:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fstat(r0, &(0x7f0000000040)) r1 = dup3(r0, r0, 0x80000) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x9) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000000)) 09:37:58 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) 09:37:58 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) 09:37:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x80) 09:37:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x34) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='ip_vti0\x00') r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) flistxattr(r2, &(0x7f0000001040)=""/4096, 0x1000) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r2, 0x40047440, &(0x7f0000000bc0)=""/174) clock_getres(0x100007, &(0x7f00000002c0)) socket$inet6(0xa, 0x80003, 0x800000000000006) socket(0x0, 0x1, 0x100000001) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/hash_stats\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200)) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') gettid() ptrace$setopts(0x4206, 0x0, 0x100000000, 0x78) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00'}, 0x10) 09:37:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) tkill(r1, 0x1000000000016) [ 1091.976257] binder_alloc: 6487: binder_alloc_buf, no vma [ 1091.993802] binder: 6487:6490 transaction failed 29189/-3, size 0-0 line 3136 [ 1092.015285] binder: send failed reply for transaction 476 to 6487:6490 09:37:58 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6f73eca47fe79c0600ebcd6c6c00"], &(0x7f0000000400)='/dev/keychord\x00', 0xe, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x400000008, 0x0, &(0x7f0000000000)) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x3, 0x102000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0) accept$inet6(r0, &(0x7f0000000140), &(0x7f0000000480)=0x1c) openat$keychord(0xffffffffffffff9c, &(0x7f0000000340)='/dev/keychord\x00', 0x2002, 0x0) getpeername$netlink(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01634040010000000000000000000000000000000000000010000000000000000000000030000000000000001000000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="852a6c66e80000e900", @ANYRES32=r2, @ANYBLOB="000000000200000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000400000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0463044001000000"], 0xc1, 0x0, &(0x7f0000000200)="23944e709ec39b85ab976ae11884051595715c35cfb75ed4499cd51297b1020a4e02f1df441cc7cf73754c2edb2f1114fbe5ce222805b62591cffb88b94877224debf792c85340e9f053eecc1af804c30f3ee6b6a4a87720fd7ff5ec2317f0d24bf2ced170d352379298b79fc312dd7ec7f019ccd914d62fb3f6079a31541ad29600178ad846908dd74000a21a20efaaaeb44d7db03ff1ba44ee74da11df9b57873a29acfa8856fe42693e8ce136290176da9826f5180795c52ad93c2db0c6b41f"}) [ 1092.037070] binder_alloc: binder_alloc_mmap_handler: 6487 20001000-20004000 already mapped failed -16 [ 1092.055880] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.062078] binder: 6487:6490 ioctl 40046207 0 returned -16 [ 1092.068290] binder_alloc: 6487: binder_alloc_buf, no vma 09:37:59 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) 09:37:59 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) [ 1092.068311] binder: 6487:6499 transaction failed 29189/-3, size 0-0 line 3136 [ 1092.069367] binder: 6487:6507 got reply transaction with no transaction stack [ 1092.069375] binder: 6487:6507 transaction failed 29201/-71, size 0-0 line 2921 [ 1092.069708] binder: undelivered TRANSACTION_ERROR: 29190 [ 1092.069772] binder: undelivered TRANSACTION_COMPLETE [ 1092.069778] binder: undelivered TRANSACTION_ERROR: 29189 09:37:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000300)='/dev/keychord\x00', 0x400000, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000006c0)=0x80000000e8, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) getgroups(0x4, &(0x7f0000000540)=[0xee00, 0x0, 0x0, 0x0]) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="d7010000000000000500000000000000000000000000000003000000000000000100000000000000ff0f00000000000001000000ffffffff000000000000000000090000000000000400000000000000c560ea350000000000000000000000001f00000000000000030000000600000003000000010000001c000000c5", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="f50b00007f00000000000000020000000000000000000000000000000000000001000000010000000000000001000000000000000888fe4500000000020000000000010c000000000000000004d8fcf2840187950b000000000000000400000000000000ff0000000000000001040000000000000400000000000000ff06ad86f5b20000000300000000800000040200", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="f3760000010400665a3300000000000200000d0000000000020000000000000100000000"], 0x140) readahead(r0, 0x2, 0x7861abae) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f0000000100)='team0\x00', 0xffffffffffffffff}, 0x30) r7 = getpgrp(0xffffffffffffffff) setpgid(r6, r7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) fallocate(r0, 0x10, 0x0, 0x1f) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', r8}) tkill(r6, 0x8c1) [ 1092.106522] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.178090] binder: undelivered TRANSACTION_ERROR: 29201 09:37:59 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) 09:37:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80040, 0x0) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000000c0)='/dev/binder#\x00', &(0x7f0000000100)='\xa8%-+(wlan1\\em1GPLvboxnet1$/\x00', &(0x7f0000000180)='/dev/binder#\x00', &(0x7f00000001c0)='/dev/binder#\x00'], &(0x7f0000000580)=[&(0x7f0000000240)='{-]mime_type\x00', &(0x7f00000002c0)='/dev/binder#\x00', &(0x7f0000000300)='/dev/binder#\x00', &(0x7f0000000340)='+!cpuset{@vmnet1\x00', &(0x7f0000000400)='/-\x00', &(0x7f0000000500)='/dev/binder#\x00', &(0x7f0000000540)='`\x00'], 0x1400) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:37:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x80) 09:37:59 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) 09:37:59 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) 09:37:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x80) 09:37:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x80) [ 1092.852120] binder_alloc: 6536: binder_alloc_buf, no vma [ 1092.859823] binder: 6536:6537 transaction failed 29189/-3, size 0-0 line 3136 [ 1092.888349] binder: send failed reply for transaction 481 to 6536:6537 09:37:59 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) [ 1092.897629] binder_alloc: binder_alloc_mmap_handler: 6536 20001000-20004000 already mapped failed -16 [ 1092.912038] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.917590] binder: 6536:6537 ioctl 40046207 0 returned -16 [ 1092.923452] binder_alloc: 6536: binder_alloc_buf, no vma [ 1092.923467] binder: 6536:6548 transaction failed 29189/-3, size 0-0 line 3136 09:37:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='>@('], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1092.938609] binder: 6536:6551 got reply transaction with no transaction stack [ 1092.938618] binder: 6536:6551 transaction failed 29201/-71, size 0-0 line 2921 [ 1092.938912] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.938970] binder: undelivered TRANSACTION_ERROR: 29190 [ 1092.939031] binder: undelivered TRANSACTION_COMPLETE [ 1092.939036] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.992310] binder: undelivered TRANSACTION_ERROR: 29201 09:37:59 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x16a913, r0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) 09:37:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x5}, @mss={0x2, 0x3b}, @sack_perm, @sack_perm, @window={0x3, 0x3f, 0x6}, @window={0x3, 0x40}], 0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1093.028121] binder: 6561:6562 unknown command 2637886 [ 1093.039039] binder: 6561:6562 ioctl c0306201 20000440 returned -22 09:37:59 executing program 1: socket(0x0, 0x20000000080003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) link(0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00') sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020700000200dfffffff000001000000"], 0x10}}, 0x0) 09:37:59 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) 09:37:59 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) 09:37:59 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) 09:38:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x1, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1093.126623] binder: 6561:6571 got reply transaction with no transaction stack [ 1093.145774] binder: 6561:6571 transaction failed 29201/-71, size 0-0 line 2921 09:38:00 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() 09:38:00 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) 09:38:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x4e21, @remote}}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$KDSKBLED(r1, 0x4b65, 0x100000000) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ftruncate(r2, 0xc5) tkill(r3, 0x1000000000016) 09:38:00 executing program 1: socket(0x0, 0x20000000080003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) link(0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00') sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020700000200dfffffff000001000000"], 0x10}}, 0x0) [ 1093.826259] binder_alloc: binder_alloc_mmap_handler: 6561 20002000-20006000 already mapped failed -16 [ 1093.835920] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.836899] binder: 6561:6618 unknown command 2637886 [ 1093.836907] binder: 6561:6618 ioctl c0306201 20000440 returned -22 [ 1093.837229] binder: 6561:6619 got reply transaction with no transaction stack [ 1093.837240] binder: 6561:6619 transaction failed 29201/-71, size 0-0 line 2921 [ 1093.867338] binder: 6561:6571 ioctl 40046207 0 returned -16 09:38:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0x7, 0x806, 0x7) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0xc8, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x46b7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x839}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x810}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x4) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000000c0)={{0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'lc\x00', 0xf, 0xa061, 0x26}, {@local, 0x4e21, 0x3, 0x5, 0x41bd9a1c, 0x7}}, 0x44) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:00 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) 09:38:00 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) 09:38:00 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) 09:38:00 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) 09:38:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40094) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) tkill(r3, 0x3f) fremovexattr(r1, &(0x7f0000000280)=@known='trusted.overlay.origin\x00') [ 1093.867386] binder: undelivered TRANSACTION_ERROR: 29201 [ 1093.878534] binder: undelivered TRANSACTION_ERROR: 29201 09:38:00 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) 09:38:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "a9042121aac4c8a670b2e09caed9b98d"}, 0x11, 0x3) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x4}, &(0x7f0000000180)) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0xa040, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1006) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'ip6_vti0\x00', {0x2, 0x4e24, @remote}}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1093.952114] binder_alloc: 6628: binder_alloc_buf, no vma [ 1093.958351] binder: 6628:6632 transaction failed 29189/-3, size 0-0 line 3136 [ 1093.969379] binder: send failed reply for transaction 489 to 6628:6632 [ 1093.989769] binder_alloc: binder_alloc_mmap_handler: 6628 20001000-20004000 already mapped failed -16 [ 1093.999736] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.999744] binder: 6628:6643 ioctl 40046207 0 returned -16 [ 1093.999862] binder_alloc: 6628: binder_alloc_buf, no vma [ 1093.999878] binder: 6628:6643 transaction failed 29189/-3, size 0-0 line 3136 [ 1094.050863] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.056343] binder: undelivered TRANSACTION_ERROR: 29190 09:38:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = syz_open_pts(0xffffffffffffffff, 0x404003) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:00 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) accept$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004b40)=0x6) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b80)={{{@in=@remote, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000004c80)=0xe8) [ 1094.068857] binder: undelivered TRANSACTION_COMPLETE [ 1094.086062] binder: undelivered TRANSACTION_ERROR: 29189 09:38:01 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x11) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:01 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) lstat(&(0x7f0000003500)='./bus\x00', &(0x7f0000003540)) [ 1094.102006] binder_alloc: 6652: binder_alloc_buf, no vma [ 1094.102020] binder: 6652:6653 transaction failed 29189/-3, size 0-0 line 3136 [ 1094.102027] binder: send failed reply for transaction 493 to 6652:6653 [ 1094.112554] binder_alloc: binder_alloc_mmap_handler: 6652 20001000-20004000 already mapped failed -16 09:38:01 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) 09:38:01 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) 09:38:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6000, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) [ 1094.117397] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.117405] binder: 6652:6653 ioctl 40046207 0 returned -16 [ 1094.118237] binder_alloc: 6652: binder_alloc_buf, no vma [ 1094.118252] binder: 6652:6654 transaction failed 29189/-3, size 0-0 line 3136 [ 1094.126300] binder: 6652:6654 got reply transaction with no transaction stack [ 1094.126308] binder: 6652:6654 transaction failed 29201/-71, size 0-0 line 2921 [ 1094.206422] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.206446] binder: 6659:6660 ioctl 40046207 0 returned -16 [ 1094.206578] binder_alloc: 6652: binder_alloc_buf, no vma 09:38:01 executing program 1: socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000440)="15700000fcffffff000000") socket$inet(0x10, 0x200000000, 0xb7) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc\x00', 0x400000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000001c0)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) ioctl(r0, 0x208914, &(0x7f00000006c0)="0a5f92715056000000000096f9f869355360c7940e3e9a60100ed0059549f4cd5b1902000000000000008e406048d4d53cf7ad25a285b9043a675ecc729b5acfa18f5fc22c6861cf091a8c64fb6fcc6ccc853b824a99cf370e195fe638b800000000000000000000000000000000000000000000000000000000000000000000000000") syz_extract_tcp_res(&(0x7f0000000040), 0xfffffffffffffff8, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x801, 0x0) write$selinux_create(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="73070000000063745f72040000000000bbe7c6977cc93db924d865635f743a17c95f821485ed8304d85ba16d7b87b16a347064203135003fd5347b6dacb13dd1a967f0f2d1d95b40c5f39034655c1568f993228ba7e4a348c598f75c0233314b076ba557c15fff7eff16e6fb70d31c6bba14b67ba3a433d60781d272c7713f0254e7c32a49bb39607c4436e32e2552f320ad2774c9411b410ae901fc8441040aae8678f00bb08be79623e0627e653618e4c3a93972f5d8ea90dc5440546d3661d1cd15dbfab77a5bc1614c3aa6b9f7ccf819ed2ba8fac6a41274b67a2e2a51c0f4816a9963d86201599c46bfef9c4a3c1174fb7fa51888a568eff7dba046b6b27a78ec38d4202b78aa195dab70bbadfdac846534ea944e61de163820de39644d756436b188ba7101d0e67849a3752dc1a171de976e1a1a012a09584af5410683ce2574b8312b8b389857b729dcdc5c11c25baef9ce8e6e00000000000000000022a2110821bf941a2d18dd0d7c39e8479e3a757e16fe36070a85c02c176d0568d64da19f2bd6e9c07d773680211ecc4e9d882bd605884bc872967e0d5cbb84e5a4a45a63ce9ddc23e553640e2686eeffe263692c379956f6202ebfcc68af69fb9d65cb1f985a74f153b737a2aa93d96fd89c085d6420d4fb3ec6e4ef239681cf0e4c5ac5a571d951bd28805b9cdc93ae601c1fe368c7def6c65c4d3cb1f55010d8af2574588d27f17daac9e773d35a6aa7d7976abf79ec17082d43b4a90bf6c94cf4553361a454d2214c791e3201955b6947abc09c390ebf545bf605e74253e5d8f3a25388878dbd73eeec2ff1e49786cc61201c33c890609aebe5e490b08bb54cfa28ea58fe50d6cd6fbc5eab833dd741b9f7417abdc27d5ce0393d7d868a9700c2ac331d5596fd0e2ef2bd97eaa3f2a3bc4de46dc271e9d29fdd0c859d4e5c73b48ca11c4a3ac1af9ab66060c52cf71b690bac33fffe90f102d8e27acb29777d57ee34771a6e21211a84db399d763f09e9b88222df89190f2fc3f862fa1a742ac111a1aba9b4965b81564736b0f76147c2503d34155dd6ae4f68e03a4257d5288b608e38ac53ec387e6808ab15ea85a3a167a6a13fd5700e1fac1321afbcf02b642c0ce0dc15e8ff57d80a069fbca8e46ee764fd67eb34db3afeb8c8634f9bd06e82f2143be5040d9dca4353587a3be5cc809931d9117ac679bdfc9dee10832996efff998d2d893ff03483ee152b9d2d24911f4053ef92cd786bd4834e5d723ae2daf83e24aa7dbb93b59a20facf79c8243fb952065bcfc736e89dfe7636d3514397405d801d60fe811e903b22465b4798ea50e5f6023000000000000083885c61b2ba2a1bb6672c3115eeea6ddbf73d282873d39e0f6ed2cad637b6af4c2e29a8b5d3bd784630c35a40d629a495d91ea62ef9606e0dd0b3c7855014b14c0b8fa1dbf6b10f716e7da54e28408833f786a547ee9c79d20cbdace5950ff9965cf98b88a9281622f58a234127a07b55f783b460b6454104477c1f5e9665e1dd6c78ca4f37f6618770c1de286cb56509e161feb4a29ab18f9d4e1e572360d16a8b5573fe390c8f54cf8bf5523283f066f8f976320dbb2e0c3de59fa3c913b2669a35d9a06692b759bdd3e61d09d1394a5be3ea909f941e7a24d637f107b123022590f0d3f3268fce14ba5ee28b155d3f1a52e1237309884e1b36fe80ff020954477459ae507d6b1ccfe3101dddcea05e189b5b26057876566477a68497c25156ec9b5ac5aeb3e69ddfc6f376fb28a5f3aa59c3e2241dfcf6533dc8b066012c8805c482adab695a92f8463ac2c9b24075c10000000000"], 0x508) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) r5 = socket$inet(0x2, 0x1, 0x10001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000240)=0xffffffffffffff3b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000400)={0x0, @aes256, 0x3, "547be30a5c95ae55"}) fdatasync(r4) setresuid(0x0, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000000340)=0xffffffffffffff40, 0x211) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000240), 0x0, 0x20000802, 0x0, 0xe0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000600)={0x8000001, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x648, 0x7fff, 0x1, 0x0, &(0x7f0000000480)='sit0\x00', 0x6, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x8000, {0x2, 0x4e20}, {0x2, 0x4e21, @dev}, {0x2, 0x4e23, @broadcast}, 0x0, 0x90a9, 0x0, 0x40, 0x0, 0x0, 0x4, 0x7fffffff}) [ 1094.206595] binder: 6659:6660 transaction failed 29189/-3, size 0-0 line 3136 [ 1094.253154] binder: 6659:6674 got reply transaction with no transaction stack [ 1094.253163] binder: 6659:6674 transaction failed 29201/-71, size 0-0 line 2921 [ 1094.331138] binder: undelivered TRANSACTION_ERROR: 29201 09:38:01 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() 09:38:01 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() 09:38:01 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r5, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r4, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() fstat(r3, &(0x7f0000003480)) [ 1094.336966] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.342863] binder: undelivered TRANSACTION_COMPLETE [ 1094.348322] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.354111] binder: undelivered TRANSACTION_ERROR: 29190 [ 1094.968311] binder_alloc: binder_alloc_mmap_handler: 6659 20001000-20004000 already mapped failed -16 [ 1094.977849] binder_alloc: 6659: binder_alloc_buf, no vma [ 1094.983301] binder: 6659:6699 transaction failed 29189/-3, size 0-0 line 3136 [ 1094.990756] binder: 6659:6699 got reply transaction with no transaction stack [ 1094.998138] binder: 6659:6699 transaction failed 29201/-71, size 0-0 line 2921 [ 1095.005925] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.011436] binder: undelivered TRANSACTION_ERROR: 29201 [ 1095.016946] binder: undelivered TRANSACTION_ERROR: 29189 09:38:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1]) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80040, 0x44) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000480)={0x2dd, 0x1, 0x8}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000100)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) tkill(0x0, 0x1000000000016) getresgid(&(0x7f0000000040)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000700)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r5, 0x220, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000880) write$FUSE_ENTRY(r3, &(0x7f0000000540)={0x90, 0x0, 0x8, {0x5, 0x3, 0x7, 0x6, 0x100000000, 0x7, {0x3, 0x5b000, 0x0, 0x5ff87115, 0x800, 0xbc7, 0x1, 0x1000, 0x9, 0x4, 0x87ac, r1, r4, 0xdd, 0x5}}}, 0x90) 09:38:03 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x3, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x10}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 09:38:03 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) gettid() 09:38:03 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) 09:38:03 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) 09:38:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fu\x00\x00'], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:03 executing program 1: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x12) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'batadv0\x00', 0x6}) sendmmsg(r0, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[{0xc}], 0xc}}], 0x1, 0x0) r1 = dup2(r0, r0) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x4, {0x2}}, 0x18) [ 1097.039694] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.047524] binder: 6704:6710 ioctl 40046207 0 returned -16 [ 1097.062319] binder: 6704:6710 got transaction to context manager from process owning it [ 1097.071545] binder: 6704:6710 transaction failed 29201/-22, size 0-0 line 3004 [ 1097.080478] binder: 6704:6710 unknown command 29964 09:38:03 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x920, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x200000023d, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/135, 0x87}], 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000240)=0x800000001ff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'caif0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000800)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@loopback, @in6=@loopback, 0x4e23, 0xfffffffffffffeff, 0x4e21, 0x2, 0x2, 0x80, 0xa0, 0x3a, r4, r5}, {0x0, 0x0, 0xfffffffffffffffb, 0x8001, 0x1f, 0x6, 0x9}, {0x420b, 0x4230, 0x7ff, 0xfff}, 0x1, 0x6e6bbb, 0x0, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d4, 0x2b}, 0x2, @in=@multicast2, 0x3500, 0x4, 0x2, 0x1, 0x273c, 0x5, 0x1}}, 0xe8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000004c0)=0x7, 0x4) listen(r3, 0xffffffffffc00000) fcntl$addseals(r1, 0x409, 0x5) socket$packet(0x11, 0x3, 0x300) fcntl$getownex(r0, 0x10, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$nbd(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="67446698010000000100008c5712727e61ccae5209006e74f58bb2f91fa45b54c5e18c9358192d42cc9340be6130701044ca83132dab8e2ee18d9c2a4b67c12c056e724ecad7aa8f24d46301bc8bce79096efdaef5832c01d2cceba2b4237cac3ebd6276dc0d6a6b98a5f4bc133f00000000a5001ab1767e1248c16f32d75317135b8184c0d7c510c78ea084a51ac06096d2d22e9cc1697480e2a5b627af899ced8d051b2bb5ea172aeb40e3298e387d4ca7f752f1f42d8da82212960104125c90f52d18f2f26072cb58a5f045e451bcf622a064b53f68b48134bffcf668f2b5239eea67cda30575816bd506c8b97129abc8fdab8c9ebfb757216e5f3b10de3911b322659c3066aaa25ee093c8330a6f3b562e7a335eb492e3bfaf4d7fe79e2a182df1bb05b71600a023a0ea0aaaf1e3d35a1b55a7703038fddc1188b99044fc055a0502882e3365adcceac593d20f69f8e3729fe47e6f586d8b2072efb06e000000000000e08677bee616e9a82eadfa4073283b36167035f7e3419c04c8ab8834714ab068e9421274aa154400ca9657fcfbeef5f9f3905c03ec81bc4e172504cd00c0c91c209708d914774543d35a60741e36b9e7f0b57068a38cf5615e98f80d23809e15acc1249d7e61af82dfcafe50dbd2960a2da8ada96d6596f4a741451f138f18461d7fd15390f1c4a4f0e9aedbe52a3d4a7dbec435aceb864ddb2f7699520274482a00d8e47d61e2df10cc041d193d28ed7272f4cb4c26009fdf00a1460d869cc3a7c91ad43bb2baba9ddb8b67525a70f4bfe2fbcfe5207174a9c3441886ce7134f594abff90d3a611ad15e88e5645705063e7fdf3e252b9f6e33e55c4000000c7425d10050fb3e85d5891dcc03e6f71c6811e99e6b7872971ee42bb337795b0b6961fb6def2cc755aea0ff8133291cd7beaf3e34eb51794bd8f42e8f1ea1dff938a047d82f3983bb0bd39b3f92fec383edb28ce661f72dfed19a158c0"], 0x1) sendto$inet6(r6, &(0x7f0000000040), 0x0, 0x20000006, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000480)={0x4}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) [ 1097.085642] binder: 6704:6710 ioctl c0306201 20000140 returned -22 [ 1097.094500] binder: 6704:6710 got reply transaction with no transaction stack [ 1097.102028] binder: 6704:6710 transaction failed 29201/-71, size 0-0 line 2921 [ 1097.146161] binder_alloc: binder_alloc_mmap_handler: 6704 20001000-20004000 already mapped failed -16 [ 1097.159645] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.165179] binder: 6704:6710 ioctl 40046207 0 returned -16 [ 1097.171335] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.171343] binder: 6704:6725 ioctl 40046207 0 returned -16 [ 1097.171653] binder_alloc: 6704: binder_alloc_buf, no vma 09:38:04 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) 09:38:04 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) 09:38:04 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) [ 1097.171672] binder: 6704:6725 transaction failed 29189/-3, size 0-0 line 3136 [ 1097.171728] binder: 6704:6728 unknown command 29964 09:38:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x801) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000000c0)=""/10, &(0x7f0000000100)=0xa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x20, 0x2, 0x7}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1097.171738] binder: 6704:6728 ioctl c0306201 20000140 returned -22 [ 1097.172001] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.172038] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.317277] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.353065] binder_alloc: 6747: binder_alloc_buf, no vma [ 1097.359005] binder: 6747:6748 transaction failed 29189/-3, size 0-0 line 3136 [ 1097.366500] binder: send failed reply for transaction 507 to 6747:6748 [ 1097.382771] binder_alloc: binder_alloc_mmap_handler: 6747 20001000-20004000 already mapped failed -16 [ 1097.392610] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.398255] binder: 6747:6748 ioctl 40046207 0 returned -16 [ 1097.404632] binder_alloc: 6747: binder_alloc_buf, no vma [ 1097.404651] binder: 6747:6752 transaction failed 29189/-3, size 0-0 line 3136 [ 1097.404961] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.404983] binder: undelivered TRANSACTION_ERROR: 29190 [ 1097.405058] binder: undelivered TRANSACTION_COMPLETE [ 1097.405064] binder: undelivered TRANSACTION_ERROR: 29189 09:38:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_GET_SECUREBITS(0x1b) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x1c9000, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffce1, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:38:04 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0x0, 0x2, 0x4, 0xffffffffffff0001, 0x0, 0xa0, 0x48000, 0x8, 0xb4, 0xffffffffffffff7f, 0x7fff, 0x5, 0xffffffffffffffc1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x9, 0x100000001, 0x8, 0x9, 0x2, 0x3, 0x800, 0x1, 0x3, 0x2, 0x1, 0xffffffff, 0x7, 0x7d, 0x6, 0x1ac8, 0x4, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x800, 0x8}, 0x1100, 0x7, 0x4, 0x3, 0x44, 0x1, 0x100000001}, r1, 0x4, r2, 0x0) 09:38:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d70313251153e94873c1f34a5656a1ce69a4d71f93aaa2cef42e47907550d6de230badb2e3a1d4ebde1b3c5b96d9fbf28346741d85ae5c6e8833053389160de31b8e5807a8a588d4a4ce79d46778f22deb8a271986051309d7c968d281974af386f1bd0534ddc73ea1b2278b07187ce20442825f4eb9f7d951258c673a5a9c6caf7dc86fc3366d19881c8042301cfbf0439f54907e2a1d9565b3365bf84f3b30d91b1bc5d7e550dff0aae4ce6f6e2e4f3eef034cd345dcea673813a952a937ee5027045103f0e291919ad1ac656cd84d86038401252d356b65d9cdcf28babf1d34c90b2bd96a718925641e1aaf7727b0835256b1544ada626d755908ada100798f311be5e9d5b09f47bc9eaef427f353500d41510ecc5874909a2d2927aba37cb6edc1b00d8ad81937e961e293fd6a"], 0x0, 0x0, 0x0}) sched_rr_get_interval(0x0, &(0x7f0000000040)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000900)={0x1e, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) prctl$PR_SVE_GET_VL(0x33, 0xcfc1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4000000030, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x4}, @free_buffer={0x40086303, r3}], 0x55, 0x0, &(0x7f0000000180)="8633c728a51e1c894aac5465624575273dba0403d120a25eb633c1032c932e22742ffb0da82dc6fdd92deb41f2762c475ea7475bca3b62b13f3e719cd16b79a785da29a0b98021da87256ef0d94194fedc39d4faa2"}) utimensat(r2, &(0x7f0000000500)='./file0\x00', &(0x7f0000000a40)={{}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x14c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x20]}, 0x2}}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x20, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x3, 0x8}, @fda={0x66646185, 0x2, 0x3, 0x3d}], &(0x7f0000000300)=[0x0, 0x38, 0x30, 0x48]}}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000340)=[@flat={0x77682a85, 0x0, r3, 0x4}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000400)=[0x60, 0x38, 0x58, 0x58, 0x58]}}, @request_death={0x400c630e, 0x2, 0x1}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000500), &(0x7f0000000540)=[0x28, 0x0, 0x0]}, 0x49b5b68f}}, @exit_looper, @request_death={0x400c630e, 0x0, 0x2}], 0x8, 0x0, &(0x7f0000000580)="8cde8f4e603902f5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000"], 0x0, 0x0, 0x0}) 09:38:04 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() 09:38:04 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) 09:38:04 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) 09:38:04 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) [ 1097.921960] binder: 6764:6773 unknown command 622003159 [ 1097.933556] binder: 6764:6773 ioctl c0306201 20000440 returned -22 09:38:04 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) [ 1097.992977] binder: 6764:6781 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 1098.005378] binder: 6764:6781 BC_FREE_BUFFER u0000000000000000 no match [ 1098.013722] binder: 6764:6781 got transaction to invalid handle [ 1098.020913] binder: 6764:6781 transaction failed 29201/-22, size 0-8 line 3013 09:38:04 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() 09:38:04 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) 09:38:04 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) 09:38:05 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getpid() getresuid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) fstat(0xffffffffffffffff, &(0x7f0000003400)) [ 1098.720305] binder_alloc: binder_alloc_mmap_handler: 6764 20001000-20004000 already mapped failed -16 [ 1098.729856] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.730919] binder: 6764:6808 unknown command 622003159 [ 1098.730928] binder: 6764:6808 ioctl c0306201 20000440 returned -22 [ 1098.731485] binder: 6764:6808 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 1098.731495] binder: 6764:6808 BC_FREE_BUFFER u0000000000000000 no match [ 1098.731762] binder: 6764:6809 got transaction to invalid handle 09:38:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001380)=ANY=[@ANYBLOB="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"]) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x39) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x5) fcntl$dupfd(r2, 0x406, r2) tkill(r1, 0x1000000000016) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00000001c0)=""/4096, &(0x7f0000000040)=0x1000) ioctl$TCSBRKP(r2, 0x5425, 0x2) 09:38:05 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0xffffffffffffff24) 09:38:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:05 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) 09:38:05 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) 09:38:05 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) 09:38:05 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x800) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000440)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000340)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') ptrace$setopts(0x4206, r0, 0xfffffffffffffffd, 0x4) utime(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)={0x88, 0x100000001}) tkill(r0, 0xa) umount2(&(0x7f0000000200)='./file0\x00', 0x3) [ 1098.731771] binder: 6764:6809 transaction failed 29201/-22, size 0-8 line 3013 [ 1098.731853] binder: 6764:6810 got reply transaction with no transaction stack [ 1098.731862] binder: 6764:6810 transaction failed 29201/-71, size 0-0 line 2921 [ 1098.793048] binder: 6764:6781 ioctl 40046207 0 returned -16 [ 1098.793099] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.804399] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.809887] binder: undelivered TRANSACTION_ERROR: 29201 09:38:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d70313251153e94873c1f34a5656a1ce69a4d71f93aaa2cef42e47907550d6de230badb2e3a1d4ebde1b3c5b96d9fbf28346741d85ae5c6e8833053389160de31b8e5807a8a588d4a4ce79d46778f22deb8a271986051309d7c968d281974af386f1bd0534ddc73ea1b2278b07187ce20442825f4eb9f7d951258c673a5a9c6caf7dc86fc3366d19881c8042301cfbf0439f54907e2a1d9565b3365bf84f3b30d91b1bc5d7e550dff0aae4ce6f6e2e4f3eef034cd345dcea673813a952a937ee5027045103f0e291919ad1ac656cd84d86038401252d356b65d9cdcf28babf1d34c90b2bd96a718925641e1aaf7727b0835256b1544ada626d755908ada100798f311be5e9d5b09f47bc9eaef427f353500d41510ecc5874909a2d2927aba37cb6edc1b00d8ad81937e961e293fd6a"], 0x0, 0x0, 0x0}) sched_rr_get_interval(0x0, &(0x7f0000000040)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000900)={0x1e, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) prctl$PR_SVE_GET_VL(0x33, 0xcfc1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4000000030, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x4}, @free_buffer={0x40086303, r3}], 0x55, 0x0, &(0x7f0000000180)="8633c728a51e1c894aac5465624575273dba0403d120a25eb633c1032c932e22742ffb0da82dc6fdd92deb41f2762c475ea7475bca3b62b13f3e719cd16b79a785da29a0b98021da87256ef0d94194fedc39d4faa2"}) utimensat(r2, &(0x7f0000000500)='./file0\x00', &(0x7f0000000a40)={{}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x14c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x20]}, 0x2}}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x20, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x3, 0x8}, @fda={0x66646185, 0x2, 0x3, 0x3d}], &(0x7f0000000300)=[0x0, 0x38, 0x30, 0x48]}}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000340)=[@flat={0x77682a85, 0x0, r3, 0x4}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000400)=[0x60, 0x38, 0x58, 0x58, 0x58]}}, @request_death={0x400c630e, 0x2, 0x1}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000500), &(0x7f0000000540)=[0x28, 0x0, 0x0]}, 0x49b5b68f}}, @exit_looper, @request_death={0x400c630e, 0x0, 0x2}], 0x8, 0x0, &(0x7f0000000580)="8cde8f4e603902f5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000"], 0x0, 0x0, 0x0}) [ 1098.840919] devpts: called with bogus options [ 1098.856499] binder: 6826:6830 got transaction to context manager from process owning it [ 1098.866358] binder: 6826:6830 transaction failed 29201/-22, size 0-0 line 3004 [ 1098.875256] binder: 6826:6830 got reply transaction with no transaction stack [ 1098.882695] binder: 6826:6830 transaction failed 29201/-71, size 0-0 line 2921 09:38:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) sched_rr_get_interval(0x0, &(0x7f0000000040)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000900)={0x1e, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) prctl$PR_SVE_GET_VL(0x33, 0xcfc1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4000000030, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x4}, @free_buffer={0x40086303, r3}], 0x55, 0x0, &(0x7f0000000180)="8633c728a51e1c894aac5465624575273dba0403d120a25eb633c1032c932e22742ffb0da82dc6fdd92deb41f2762c475ea7475bca3b62b13f3e719cd16b79a785da29a0b98021da87256ef0d94194fedc39d4faa2"}) utimensat(r2, &(0x7f0000000500)='./file0\x00', &(0x7f0000000a40)={{}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x14c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x20]}, 0x2}}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x20, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x3, 0x8}, @fda={0x66646185, 0x2, 0x3, 0x3d}], &(0x7f0000000300)=[0x0, 0x38, 0x30, 0x48]}}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000340)=[@flat={0x77682a85, 0x0, r3, 0x4}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000400)=[0x60, 0x38, 0x58, 0x58, 0x58]}}, @request_death={0x400c630e, 0x2, 0x1}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000500), &(0x7f0000000540)=[0x28, 0x0, 0x0]}, 0x49b5b68f}}, @exit_looper, @request_death={0x400c630e, 0x0, 0x2}], 0x8, 0x0, &(0x7f0000000580)="8cde8f4e603902f5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000"], 0x0, 0x0, 0x0}) [ 1098.901572] binder_alloc: binder_alloc_mmap_handler: 6826 20001000-20004000 already mapped failed -16 [ 1098.912107] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.917984] binder: 6826:6830 ioctl 40046207 0 returned -16 09:38:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000140)={0x0, 0x64, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) fcntl$setstatus(r2, 0x4, 0x40000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) tkill(r1, 0x1000000000016) 09:38:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) sched_rr_get_interval(0x0, &(0x7f0000000040)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000900)={0x1e, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) prctl$PR_SVE_GET_VL(0x33, 0xcfc1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4000000030, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x4}, @free_buffer={0x40086303, r3}], 0x55, 0x0, &(0x7f0000000180)="8633c728a51e1c894aac5465624575273dba0403d120a25eb633c1032c932e22742ffb0da82dc6fdd92deb41f2762c475ea7475bca3b62b13f3e719cd16b79a785da29a0b98021da87256ef0d94194fedc39d4faa2"}) utimensat(r2, &(0x7f0000000500)='./file0\x00', &(0x7f0000000a40)={{}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x14c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x20]}, 0x2}}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x20, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x3, 0x8}, @fda={0x66646185, 0x2, 0x3, 0x3d}], &(0x7f0000000300)=[0x0, 0x38, 0x30, 0x48]}}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000340)=[@flat={0x77682a85, 0x0, r3, 0x4}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000400)=[0x60, 0x38, 0x58, 0x58, 0x58]}}, @request_death={0x400c630e, 0x2, 0x1}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000500), &(0x7f0000000540)=[0x28, 0x0, 0x0]}, 0x49b5b68f}}, @exit_looper, @request_death={0x400c630e, 0x0, 0x2}], 0x8, 0x0, &(0x7f0000000580)="8cde8f4e603902f5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000"], 0x0, 0x0, 0x0}) [ 1098.924352] binder_alloc: 6826: binder_alloc_buf, no vma [ 1098.924376] binder: 6826:6834 transaction failed 29189/-3, size 0-0 line 3136 09:38:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e20, 0x2, 'rr\x00', 0xc, 0x1, 0x1f}, 0x2c) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @multicast2}, {0x0, @random="cc7e74ce9b12"}, 0x14, {0x2, 0x0, @local}, 'ipddp0\x00'}) 09:38:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280bd, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x0, 0x1f, 0xffffffffffff9fd9}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) keyctl$session_to_parent(0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 09:38:05 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) [ 1098.933363] binder: 6826:6838 got reply transaction with no transaction stack [ 1098.933373] binder: 6826:6838 transaction failed 29201/-71, size 0-0 line 2921 [ 1098.938509] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.938547] binder: undelivered TRANSACTION_ERROR: 29201 09:38:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 09:38:05 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./bus\x00', &(0x7f0000003240)) 09:38:05 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) [ 1098.938582] binder: undelivered TRANSACTION_ERROR: 29201 [ 1099.080472] binder: undelivered TRANSACTION_ERROR: 29189 09:38:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1099.131645] binder_alloc: 6863: binder_alloc_buf, no vma [ 1099.151120] binder: 6863:6866 transaction failed 29189/-3, size 0-0 line 3136 [ 1099.160789] binder: send failed reply for transaction 520 to 6863:6866 [ 1099.170039] binder_alloc: binder_alloc_mmap_handler: 6863 20001000-20004000 already mapped failed -16 [ 1099.179954] binder: BINDER_SET_CONTEXT_MGR already set [ 1099.185413] binder: 6863:6866 ioctl 40046207 0 returned -16 [ 1099.191534] binder_alloc: 6863: binder_alloc_buf, no vma [ 1099.191566] binder: 6863:6872 transaction failed 29189/-3, size 0-0 line 3136 [ 1099.191887] binder: 6863:6873 got reply transaction with no transaction stack [ 1099.191896] binder: 6863:6873 transaction failed 29201/-71, size 0-0 line 2921 09:38:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x44000, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @local, 0x1ff800000000}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1099.192234] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.192254] binder: undelivered TRANSACTION_ERROR: 29190 [ 1099.192377] binder: undelivered TRANSACTION_COMPLETE [ 1099.192382] binder: undelivered TRANSACTION_ERROR: 29189 09:38:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x2, 0x70, 0xfffffffffffffffb, 0x1aa, 0x80, 0x9, 0x0, 0x0, 0x1488, 0x4, 0x0, 0xff, 0x0, 0x6, 0xfffffffffffffffa, 0x9, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1000, 0xcd26, 0x1000, 0x8, 0x9, 0x4, 0x3, 0x9, 0x4, 0x7ef, 0x6, 0x2, 0x24, 0x7, 0x3, 0x200, 0x80, 0x0, 0x43, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x4, 0x4a965517, 0x6924, 0x0, 0x0, 0x7, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1099.278517] binder: undelivered TRANSACTION_ERROR: 29201 09:38:06 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:06 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) 09:38:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000040)={&(0x7f00000001c0)="52ff8aab48d6c41e21ed7639e0698687d46946f6089d642e53a571418399145b01f7b282c17ff540705c5674acf73b66e12f77afb236bb2c97cf9e882a168e78650ed65bba2226b4846aa1a6daf867686ce34d61b98c28", 0x57}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) 09:38:06 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) [ 1099.409992] binder: 6883:6890 got reply transaction with no transaction stack [ 1099.443402] binder: 6883:6890 transaction failed 29201/-71, size 0-0 line 2921 09:38:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280bd, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x0, 0x1f, 0xffffffffffff9fd9}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) keyctl$session_to_parent(0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 09:38:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x20, 0x4, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:38:06 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) 09:38:06 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() 09:38:06 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) 09:38:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) r2 = dup3(r0, r0, 0x80000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) 09:38:06 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) 09:38:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000002c0)=""/174) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x248283, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000180)=""/186) 09:38:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) fchown(r0, r2, r3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:38:07 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) 09:38:07 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) 09:38:07 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) [ 1100.117738] binder_alloc: binder_alloc_mmap_handler: 6883 20001000-20004000 already mapped failed -16 [ 1100.127476] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.128951] binder: 6883:6942 got reply transaction with no transaction stack [ 1100.128961] binder: 6883:6942 transaction failed 29201/-71, size 0-0 line 2921 [ 1100.147459] binder: 6883:6890 ioctl 40046207 0 returned -16 [ 1100.147474] binder: undelivered TRANSACTION_ERROR: 29201 [ 1100.158715] binder: undelivered TRANSACTION_ERROR: 29201 09:38:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4a96) r2 = gettid() fcntl$lock(r0, 0x27, &(0x7f0000000040)={0x2, 0x3, 0x100, 0x1, r2}) r3 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000000)={0x7, 0xef0, 0x1ff}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1100.205640] binder_alloc: 6952: binder_alloc_buf, no vma [ 1100.211605] binder: 6952:6955 transaction failed 29189/-3, size 0-0 line 3136 [ 1100.221016] binder: send failed reply for transaction 528 to 6952:6955 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) [ 1100.269443] binder_alloc: binder_alloc_mmap_handler: 6952 20001000-20004000 already mapped failed -16 [ 1100.295778] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.301767] binder: 6952:6955 ioctl 40046207 0 returned -16 [ 1100.308223] binder_alloc: 6952: binder_alloc_buf, no vma [ 1100.308243] binder: 6952:6963 transaction failed 29189/-3, size 0-0 line 3136 [ 1100.308646] binder: 6952:6967 got reply transaction with no transaction stack [ 1100.308655] binder: 6952:6967 transaction failed 29201/-71, size 0-0 line 2921 [ 1100.309776] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.309799] binder: undelivered TRANSACTION_ERROR: 29190 [ 1100.309868] binder: undelivered TRANSACTION_COMPLETE 09:38:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x80000000}}, 0x18) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) getpgrp(0xffffffffffffffff) [ 1100.309874] binder: undelivered TRANSACTION_ERROR: 29189 09:38:07 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x801, 0x0) [ 1100.394801] binder: undelivered TRANSACTION_ERROR: 29201 09:38:07 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) 09:38:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$selinux_user(r1, &(0x7f0000000040)={'system_u:object_r:klogd_var_run_t:s0', 0x20, 'sysadm_u\x00'}, 0x2e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x8, 0x3}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:38:07 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() [ 1100.473906] binder_alloc: 6978: binder_alloc_buf, no vma [ 1100.502584] binder: 6978:6980 transaction failed 29189/-3, size 0-0 line 3136 [ 1100.513814] binder: send failed reply for transaction 533 to 6978:6980 09:38:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000002c0)=""/174) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x248283, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000180)=""/186) 09:38:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000002c0)=""/174) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x248283, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000180)=""/186) [ 1100.524213] binder_alloc: binder_alloc_mmap_handler: 6978 20001000-20004000 already mapped failed -16 [ 1100.543435] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.549466] binder: 6978:6980 ioctl 40046207 0 returned -16 [ 1100.555513] binder_alloc: 6978: binder_alloc_buf, no vma 09:38:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000002c0)=""/174) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x248283, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000180)=""/186) 09:38:07 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x3, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e25, 0x4, @dev={0xfe, 0x80, [], 0x2b}, 0x80}, 0xfffffffffffffee0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x102) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x28040, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00'}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1100.555533] binder: 6978:6990 transaction failed 29189/-3, size 0-0 line 3136 [ 1100.555860] binder: 6978:6995 got reply transaction with no transaction stack 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) [ 1100.555868] binder: 6978:6995 transaction failed 29201/-71, size 0-0 line 2921 [ 1100.556507] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.556530] binder: undelivered TRANSACTION_ERROR: 29190 [ 1100.556607] binder: undelivered TRANSACTION_COMPLETE 09:38:07 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:07 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) 09:38:07 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() [ 1100.556613] binder: undelivered TRANSACTION_ERROR: 29189 09:38:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1100.723239] binder: undelivered TRANSACTION_ERROR: 29201 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) 09:38:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = gettid() msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e23, 0xfffffffffffffbff, @rand_addr="a6d7a43912989cb42ed2bee31135b29a", 0x8}, {0xa, 0x4e23, 0x9, @mcast2, 0x10001}, 0x3, [0x3, 0x4, 0x800, 0xfffffffffffffffd, 0xa0, 0xffff, 0x5, 0x5]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x2, {{0xa, 0x4e21, 0x3b96, @mcast2, 0x58517091}}}, 0x88) tkill(r2, 0x1000000000016) [ 1100.767911] binder: 7021:7023 BC_FREE_BUFFER u0000000000000000 no match 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) getpgrp(0xffffffffffffffff) [ 1100.829136] binder: 7021:7033 got reply transaction with no transaction stack [ 1100.836917] binder: 7021:7033 transaction failed 29201/-71, size 0-0 line 2921 09:38:07 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() 09:38:07 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) 09:38:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r3 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='[@,eth0\x00', 0xfffffffffffffff9) keyctl$link(0x8, r2, r3) tkill(r1, 0x1000000000016) 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:07 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) 09:38:07 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:07 executing program 0: fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) r2 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000640)=0xe8) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() getgroups(0x2, &(0x7f0000000740)=[0xee00, 0xffffffffffffffff]) r10 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010003000000000002000000", @ANYRES32=r0, @ANYBLOB="02000600", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="040002000000000008000600", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="08000200446e23424670074039b8c5050febb032959993b95b69686a9f8e1930470657665226c8a637fea245695a409a7f2db33f4f1d18aaa991c6fb969a91adc77037277336beb140cab7ad758cf85f7895175ad0bb481a23ef81b30e837622c4631f45185048a127f9e5a5", @ANYRES32=r10, @ANYBLOB="10000100000000002000010000000000"], 0x74, 0x1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000780)={@mcast2, r5}, 0x14) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r12 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r12, 0x1000000000016) r13 = dup3(r11, r11, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) 09:38:07 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) [ 1101.561190] binder_alloc: binder_alloc_mmap_handler: 7021 20001000-20004000 already mapped failed -16 [ 1101.570715] binder: BINDER_SET_CONTEXT_MGR already set [ 1101.576001] binder: 7021:7033 ioctl 40046207 0 returned -16 [ 1101.576084] binder_alloc: 7021: binder_alloc_buf, no vma [ 1101.576104] binder: 7021:7080 transaction failed 29189/-3, size 0-0 line 3136 [ 1101.576486] binder: 7021:7081 BC_FREE_BUFFER u0000000000000000 no match [ 1101.576776] binder: undelivered TRANSACTION_ERROR: 29189 09:38:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x3000000000001010, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff4e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:08 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:08 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() 09:38:08 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() 09:38:08 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) 09:38:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() readahead(r0, 0x273ac3c9, 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1101.576807] binder: undelivered TRANSACTION_ERROR: 29201 [ 1101.576825] binder: send failed reply for transaction 538 to 7021:7023 [ 1101.582048] binder: undelivered TRANSACTION_COMPLETE [ 1101.582055] binder: undelivered TRANSACTION_ERROR: 29189 09:38:08 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x3, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e25, 0x4, @dev={0xfe, 0x80, [], 0x2b}, 0x80}, 0xfffffffffffffee0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x102) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x28040, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00'}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1101.668861] binder: 7092:7094 unknown command 0 [ 1101.673767] binder: 7092:7094 ioctl c0306201 200000c0 returned -22 09:38:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x17) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x5, @mcast1, 0x6}, {0xa, 0x4e24, 0x574de0d7, @ipv4={[], [], @multicast2}, 0x4e}, 0x41b, [0xf1, 0x367ea945, 0xfffffffffffffc12, 0x2, 0x368c000000, 0x8, 0x101, 0x1]}, 0x5c) 09:38:08 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) 09:38:08 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) [ 1101.729162] binder: 7092:7100 got reply transaction with no transaction stack [ 1101.755140] binder: 7092:7100 transaction failed 29201/-71, size 0-0 line 2921 09:38:08 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) 09:38:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x801, 0x0) 09:38:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xf, 0x20011, r1, 0x8000000000000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80900, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xa8, r3, 0x110, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x77}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x22}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x400c891) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="016340400086000000000000000000000000000000000002000084b3885c21000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 09:38:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x801, 0x0) 09:38:09 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) 09:38:09 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) 09:38:09 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) [ 1102.462885] binder: BINDER_SET_CONTEXT_MGR already set [ 1102.463407] binder: 7092:7131 unknown command 0 [ 1102.463416] binder: 7092:7131 ioctl c0306201 200000c0 returned -22 [ 1102.463732] binder: 7092:7132 got reply transaction with no transaction stack [ 1102.463742] binder: 7092:7132 transaction failed 29201/-71, size 0-0 line 2921 [ 1102.493910] binder: 7092:7100 ioctl 40046207 0 returned -16 [ 1102.493968] binder: undelivered TRANSACTION_ERROR: 29201 [ 1102.505167] binder: undelivered TRANSACTION_ERROR: 29201 09:38:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x801, 0x0) 09:38:09 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) dup(r0) [ 1102.577998] binder_alloc: 7139: binder_alloc_buf, no vma [ 1102.583720] binder: 7139:7141 transaction failed 29189/-3, size 0-0 line 3136 09:38:09 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:09 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) [ 1102.660261] binder: 7139:7158 got reply transaction with no transaction stack 09:38:09 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000001280), &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)) getuid() fstat(r3, &(0x7f0000001340)) 09:38:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000200)=[0x81, 0x3]) timer_settime(r2, 0x1, &(0x7f000006b000)={{r3, r4+10000000}, {0x0, 0x9}}, 0x0) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) tkill(r1, 0x1000000000016) [ 1102.709278] binder: 7139:7158 transaction failed 29201/-71, size 0-0 line 2921 [ 1103.339225] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.344539] binder: 7139:7179 ioctl 40046207 0 returned -16 [ 1103.350472] binder_alloc: 7139: binder_alloc_buf, no vma [ 1103.355963] binder: 7139:7158 transaction failed 29189/-3, size 0-0 line 3136 09:38:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006a0f634040"], 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x141800, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0163404000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x12c, 0x0, &(0x7f0000000640)=[@acquire={0x40046305, 0x3}, @register_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x28, 0x30, &(0x7f0000000100)=[@ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x3, 0x3e}], &(0x7f0000000180)=[0x40, 0x0, 0x38, 0x30, 0x28, 0x58]}, 0x100}}, @reply_sg={0x40486312, {{0x2, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000240)=[@flat={0x736a2a85, 0xb, r4, 0x3}, @flat={0x77682a85, 0x100, r5}], &(0x7f0000000280)=[0x38, 0x58, 0x40, 0x58, 0x30]}, 0x7}}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x28, 0x28, &(0x7f0000000300)=[@ptr={0x70742a85, 0x0, &(0x7f00000002c0), 0x1, 0x0, 0x3b}], &(0x7f0000000340)=[0x28, 0x38, 0x78, 0x18, 0x0]}}, @transaction={0x40406300, {0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x40, 0x50, &(0x7f0000000500)=[@ptr={0x70742a85, 0x0, &(0x7f0000000400), 0x1, 0x4, 0x36}, @fd={0x66642a85, 0x0, r1}], &(0x7f0000000540)=[0x78, 0x68, 0x78, 0x18, 0x78, 0x38, 0x30, 0x38, 0x68, 0x38]}}], 0x7a, 0x0, &(0x7f0000000780)="c510ffc4d8e85beee012cbb36570f7da4d1890c117e098cabb87d2295f1a1e37230cbea44b643cc4c286d2fb80839a3dc4f7aff4a03a70f7cb1c91d5be83462a883e034e38d9935be53b01243aa1ec9242025c509df6553fe9c403e3bdf7b3dd331d3ae6bf7e5435ead4f2fbb595b088950bf5d6fdfe11b3018b"}) 09:38:10 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) getgroups(0x2, &(0x7f0000001180)=[0x0, 0x0]) 09:38:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x02\x00', 0x4}, 0x68) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x181001) ioctl$KDMKTONE(r1, 0x4b30, 0x10001) 09:38:10 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) 09:38:10 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) 09:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="2a25e8e4f0dfc34ec06b07c60775479bd5ca983c8fb45b17ec3c827a933e2d01280ecb2d3220b478440a2a194955b2b7fc55bf6889") connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) fcntl$setown(r0, 0x8, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1103.395775] binder: 7139:7158 got reply transaction with no transaction stack [ 1103.395965] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.395991] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.396293] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.419759] binder: 7139:7158 transaction failed 29201/-71, size 0-0 line 2921 [ 1103.427184] binder: undelivered TRANSACTION_ERROR: 29201 09:38:10 executing program 1: socket(0x3, 0x0, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) link(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x2, 0x11, r3, 0x800000000000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020700000200f94d875d86fc0f09a67cd74b27041aeeb0e797d08f1e0000f4ffffff000000"], 0x10}}, 0x0) [ 1103.460121] binder: 7182:7188 unknown command 1661954560 09:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = getuid() setsockopt$packet_buf(r2, 0x107, 0x17, &(0x7f0000000300)="146743a808b232016ae9db0d4e1853e2aa5d31dae7287c3bea92415a872d24b687289e594bf2bac78f6b016320f78d529b843c1fcaad64ffed20082cd144e11d1218576dc7cb7fa6a7cc7d744bfb3a6a1a1a5a0c99afae5523afff5464ea3e53d048ec493084ee2520620ddd2aa3ca13331f5306710f41918615624aa17cf28148", 0x81) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000003c0)={'mangle\x00'}, &(0x7f0000000040)=0x54) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x8, {0x1, 0x3, 0x5}, 0x5406f8142ae11344, r3, r4, 0x0, 0x5, 0x7fffffff, 0x40, 0xfffffffffffffffc, 0x810, 0x5, 0x7, 0x10000, 0x2, 0x5, 0x90, 0x1949, 0x0, 0x10000000}}, 0xa0) tkill(r1, 0x37) [ 1103.502865] binder: 7182:7188 ioctl c0306201 20000440 returned -22 [ 1103.520269] binder: 7182:7201 got reply transaction with no transaction stack [ 1103.520278] binder: 7182:7201 transaction failed 29201/-71, size 0-0 line 2921 [ 1103.552249] binder: 7182:7209 unknown command 1661954560 [ 1103.558512] binder: 7182:7209 ioctl c0306201 20000440 returned -22 [ 1103.565511] binder: 7182:7201 got reply transaction with no transaction stack [ 1103.574309] binder: 7182:7209 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1103.574315] binder: 7182:7209 ERROR: BC_REGISTER_LOOPER called without request [ 1103.574323] binder: 7182:7209 got transaction to invalid handle 09:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x40080, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000400)=0x4, 0x4) r2 = gettid() clone(0x2000, &(0x7f00000001c0)="b78aff53db7c13efa5902b612add8786584d91b62b7151cb0d5cb50033d1316e7d21eeb65a2d2469fcff37f51e1ad0f96627ee67ba74cbee1bf065888d46199736bf90d13f562788eec687ed6c2f5795b3a391f78d14dc828fb2520c9a780862a80c5ec18e97e149fef6c1268f2a399737b6e9e77a805e352efa52ad4b44390be50cd5a9c0f022302b4750fad2a32d147d95903ff0a3", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000280)="244491a875bf5166b4221bcddc9b4c0449d59e25114d381152bb55bbb6e51c2a5da1224c3707075531c64efabed25b54df67a84bc4d4d6efa012294bc1bb742a05ffa582f586b9a391cf5172313ac403c4c6187b8e9572e0ee0c60d67470f43ef1ffd8b86b8b3e7c1757e68b2775dae020ae36988c27beef92ce0039f815faa5d8b81df36f4a7d656a847cc2fa4c16ca7a7167708b16d2e3f1a3464dbf61dfddf9ee67e39ea8b1e57eaf49b25f992f5ee1dfb9bfe53c0c18956a64e83c8625b1") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x204000, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r2) tkill(r2, 0x1000000000016) 09:38:10 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') prctl$PR_GET_FP_MODE(0x2e) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0xb20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 09:38:10 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) [ 1103.574331] binder: 7182:7209 transaction failed 29201/-22, size 40-48 line 3013 [ 1103.635700] binder: 7182:7201 transaction failed 29201/-71, size 0-0 line 2921 09:38:10 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) stat(&(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)) 09:38:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f00000002c0)="5ead6d67f1958f5de088fac918b4ba2fc34a8adb13970a2aaff19fb067b8c40ebd2d85aadcd9120d0a09149f0c6b7495525b325dadeafd96c7b8086cc368f21c3cf4cbb268be3febbfe5a03623ac263e2e34e37a9d49dc66b345a47b2d9918a93ace01ea7984399a627d72ef36fef2d3df699df2932e1d065b156ddcfc01e0d9319551cc2ac595486fa1e74d9a6aa3c171cbbdad3e7ca6a877a237cdd77ed6c7ea71a97ee357db60", 0xa8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000040)="18213aec866c4b12d5eaf27fcea5a307553fe6d511f5e8d97f9ed403f8", &(0x7f0000000180)=""/241}, 0x18) ftruncate(r3, 0x8) 09:38:10 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) 09:38:10 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@caif=@rfm, &(0x7f00000000c0)=0x80, 0x800) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x19010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) bind$netlink(r2, &(0x7f0000000000), 0xc) [ 1103.687513] binder: undelivered TRANSACTION_ERROR: 29201 09:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1103.759754] binder_alloc: binder_alloc_mmap_handler: 7232 20001000-20004000 already mapped failed -16 [ 1103.771428] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.777666] binder: 7232:7236 ioctl 40046207 0 returned -16 [ 1103.784380] binder_alloc: 7232: binder_alloc_buf, no vma [ 1103.791553] binder: 7232:7241 transaction failed 29189/-3, size 0-0 line 3136 09:38:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000006) fchdir(r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xd10, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000026980000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 09:38:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$TIOCCONS(r2, 0x541d) [ 1103.827308] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.839556] binder: release 7232:7236 transaction 555 in, still active 09:38:10 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) [ 1103.874500] binder: send failed reply for transaction 555 to 7232:7236 09:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x80}, 0x2bf) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:38:10 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) [ 1103.918074] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=7262 comm=syz-executor1 09:38:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0xffffffffffffff96, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c6300691314e84acfbfefa5dbd16284315eca5cf06d39945b1ed735cb7a681c861c60e9da754d"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:10 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) [ 1103.955497] binder: 7256:7259 transaction failed 29189/-22, size 0-0 line 3013 [ 1103.956272] binder_alloc: 7256: binder_alloc_buf, no vma [ 1103.956290] binder: 7256:7267 transaction failed 29189/-3, size 0-0 line 3136 [ 1103.956386] binder: 7256:7267 got reply transaction with no transaction stack 09:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x2, 0x2, 0x7, 0x2, 0x5}, 0x1, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x7ff, 0x6, 0x100000000, 0x4}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) fsetxattr(r1, &(0x7f0000000340)=@random={'osx.', '/selinux/status\x00'}, &(0x7f0000000380)='\x9b\x00', 0x2, 0x2) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1000000000, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00') r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000001c0)=""/79) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 09:38:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03040000"], 0x48, 0x0, &(0x7f0000000000)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c0300045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1103.956393] binder: 7256:7267 transaction failed 29201/-71, size 0-0 line 2921 [ 1103.956454] binder: undelivered TRANSACTION_COMPLETE [ 1103.956461] binder: undelivered TRANSACTION_ERROR: 29189 09:38:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063565b4b25de049e92cf0e4040"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x599, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffee1, 0x0, 0x0}) [ 1103.959931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 1103.965220] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.965239] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.965405] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.030023] binder: 7274:7275 ioctl c0306201 20000440 returned -14 [ 1104.030765] binder: 7274:7275 unknown command 1761633036 [ 1104.030773] binder: 7274:7275 ioctl c0306201 20000140 returned -22 [ 1104.030888] binder: 7274:7275 got reply transaction with no transaction stack [ 1104.030896] binder: 7274:7275 transaction failed 29201/-71, size 0-0 line 2921 [ 1104.040591] binder_alloc: binder_alloc_mmap_handler: 7274 20001000-20004000 already mapped failed -16 09:38:11 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) [ 1104.040682] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.040689] binder: 7274:7275 ioctl 40046207 0 returned -16 [ 1104.040970] binder_alloc: 7274: binder_alloc_buf, no vma [ 1104.040987] binder: 7274:7281 transaction failed 29189/-3, size 0-0 line 3136 [ 1104.041001] binder: 7274:7281 ioctl c0306201 20000440 returned -14 09:38:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) futex(&(0x7f0000000000)=0x1, 0x83, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000100)=0x1, 0x1) [ 1104.041484] binder: 7274:7281 unknown command 1761633036 [ 1104.041491] binder: 7274:7281 ioctl c0306201 20000140 returned -22 [ 1104.041882] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.041899] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.041918] binder: send failed reply for transaction 562 to 7274:7275 [ 1104.048577] binder: undelivered TRANSACTION_COMPLETE [ 1104.048583] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.104640] binder: 7287:7290 unknown command 1027 [ 1104.104649] binder: 7287:7290 ioctl c0306201 20000140 returned -22 [ 1104.104725] binder: 7287:7290 got reply transaction with no transaction stack [ 1104.104734] binder: 7287:7290 transaction failed 29201/-71, size 0-0 line 2921 [ 1104.106803] binder_alloc: binder_alloc_mmap_handler: 7287 20001000-20004000 already mapped failed -16 [ 1104.106887] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.106895] binder: 7287:7290 ioctl 40046207 0 returned -16 [ 1104.106945] binder_alloc: 7287: binder_alloc_buf, no vma [ 1104.106962] binder: 7287:7291 transaction failed 29189/-3, size 0-0 line 3136 [ 1104.107031] binder: 7287:7290 unknown command 1027 [ 1104.107037] binder: 7287:7290 ioctl c0306201 20000140 returned -22 [ 1104.107068] binder: 7287:7291 got reply transaction with no transaction stack [ 1104.107075] binder: 7287:7291 transaction failed 29201/-71, size 0-0 line 2921 [ 1104.107323] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.107344] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.107361] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.107379] binder: send failed reply for transaction 566 to 7287:7290 [ 1104.107431] binder: undelivered TRANSACTION_COMPLETE [ 1104.107437] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.157048] binder: 7293:7295 unknown command 1532388096 [ 1104.157057] binder: 7293:7295 ioctl c0306201 20000440 returned -22 [ 1104.162670] binder_alloc: binder_alloc_mmap_handler: 7293 20ff9000-20ffd000 already mapped failed -16 [ 1104.243829] binder: 7293:7297 got reply transaction with no transaction stack [ 1104.243839] binder: 7293:7297 transaction failed 29201/-71, size 0-0 line 2921 [ 1104.243858] binder: 7293:7297 ioctl c0306201 20000000 returned -14 09:38:11 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) 09:38:11 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) 09:38:11 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) 09:38:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x84040, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000280)={0x7, 0x21, 0x2}, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getresgid(&(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f00000001c0)) getgroups(0x1, &(0x7f0000000200)=[0xffffffffffffffff]) setregid(r2, r3) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r4 = gettid() sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2b6c25af29bebcbf2691941cbf17a9fb", 0x10) tkill(r4, 0x1000000000016) 09:38:11 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) [ 1104.502024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=7252 comm=syz-executor1 [ 1104.505211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 09:38:11 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) 09:38:11 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) 09:38:11 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) 09:38:11 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) [ 1104.938221] binder_alloc: binder_alloc_mmap_handler: 7293 20001000-20004000 already mapped failed -16 [ 1104.947745] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.953014] binder: 7293:7348 ioctl 40046207 0 returned -16 [ 1104.958822] binder: 7293:7348 unknown command 1532388096 [ 1104.964283] binder: 7293:7348 ioctl c0306201 20000440 returned -22 09:38:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340402d29946d4c40487b419d586c42713dcf4af259c0302dc40edf19634759e10d5911c2c7c737ed9f9c8f7a8b8ebedd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:11 executing program 1: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000f40)) lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000001080)) 09:38:11 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) 09:38:11 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) 09:38:11 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000001480)) [ 1105.016865] binder: 7293:7297 got reply transaction with no transaction stack [ 1105.017452] binder: undelivered TRANSACTION_ERROR: 29201 [ 1105.029655] binder: 7293:7297 transaction failed 29201/-71, size 0-0 line 2921 [ 1105.037065] binder: 7293:7297 ioctl c0306201 20000000 returned -14 [ 1105.045885] binder: undelivered TRANSACTION_ERROR: 29201 [ 1105.078613] binder: 7354:7358 got transaction to invalid handle [ 1105.084909] binder: 7354:7358 transaction failed 29201/-22, size -7160744058665057775-243810505030287 line 3013 09:38:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063565b4b25de049e92cf0e4040"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x599, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffee1, 0x0, 0x0}) [ 1105.147643] binder: 7354:7363 got reply transaction with no transaction stack [ 1105.179787] binder: 7354:7363 transaction failed 29201/-71, size 0-0 line 2921 [ 1105.870694] binder_alloc: binder_alloc_mmap_handler: 7354 20001000-20004000 already mapped failed -16 [ 1105.880362] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.880626] binder: 7354:7370 got transaction to invalid handle [ 1105.880638] binder: 7354:7370 transaction failed 29201/-22, size -7160744058665057775-243810505030287 line 3013 [ 1105.902049] binder: 7354:7363 ioctl 40046207 0 returned -16 [ 1105.902059] binder: undelivered TRANSACTION_ERROR: 29201 [ 1105.902090] binder: undelivered TRANSACTION_ERROR: 29201 [ 1105.902133] binder: undelivered TRANSACTION_ERROR: 29201 09:38:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(r2, 0x2, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:38:14 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) 09:38:14 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000880)) 09:38:14 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) 09:38:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063565b4b25de049e92cf0e4040"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x599, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffee1, 0x0, 0x0}) 09:38:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) 09:38:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063565b4b25de049e92cf0e4040"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x599, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffee1, 0x0, 0x0}) 09:38:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340402d29946d4c40487b419d586c42713dcf4af259c0302dc40edf19634759e10d5911c2c7c737ed9f9c8f7a8b8ebedd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1107.598365] binder_alloc: 7382: binder_alloc_buf, no vma [ 1107.622936] binder: 7382:7385 transaction failed 29189/-3, size 0-0 line 3136 09:38:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340402d29946d4c40487b419d586c42713dcf4af259c0302dc40edf19634759e10d5911c2c7c737ed9f9c8f7a8b8ebedd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1107.656593] binder: send failed reply for transaction 578 to 7382:7385 [ 1107.690302] binder_alloc: binder_alloc_mmap_handler: 7382 20001000-20004000 already mapped failed -16 [ 1107.709983] binder: BINDER_SET_CONTEXT_MGR already set 09:38:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340402d29946d4c40487b419d586c42713dcf4af259c0302dc40edf19634759e10d5911c2c7c737ed9f9c8f7a8b8ebedd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:14 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) [ 1107.734153] binder: 7382:7385 ioctl 40046207 0 returned -16 09:38:14 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) [ 1107.745274] binder_alloc: 7382: binder_alloc_buf, no vma [ 1107.745293] binder: 7382:7391 transaction failed 29189/-3, size 0-0 line 3136 [ 1107.756052] binder: 7382:7399 got reply transaction with no transaction stack [ 1107.756061] binder: 7382:7399 transaction failed 29201/-71, size 0-0 line 2921 [ 1107.757465] binder: undelivered TRANSACTION_ERROR: 29189 [ 1107.757489] binder: undelivered TRANSACTION_ERROR: 29190 [ 1107.757571] binder: undelivered TRANSACTION_COMPLETE [ 1107.757577] binder: undelivered TRANSACTION_ERROR: 29189 [ 1107.958188] binder: undelivered TRANSACTION_ERROR: 29201 09:38:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xfffffed8) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="000020000000000000c5af7409f6037be68e8395f38dba"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @broadcast}, 0x282, 0x0, 0x0, 0x46a, 0x8, 0x0, 0x1000, 0x0, 0x3}) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r2, 0x0, r1) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000028c0)={0xffffffffffffffff}) r8 = creat(&(0x7f0000002900)='.\x00', 0x82) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002940)='/selinux/checkreqprot\x00', 0x400000, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000002980)='/dev/null\x00', 0x0, 0x0) r11 = accept(r0, &(0x7f00000029c0)=@xdp, &(0x7f0000002a40)=0x80) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000002b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002a80)={0x9c, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8, 0x1, r9}, {0x8, 0x1, r1}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r11}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x7e52d207fa2b3f55}, 0x40000) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[]}}, 0x40000) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) socketpair(0x7, 0x800, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r13, 0x5429, &(0x7f0000000540)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000800)=ANY=[], 0x0) sched_setaffinity(r4, 0xfffffffffffffee2, &(0x7f0000000680)=0x10002) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x41, &(0x7f0000000740)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000700)) 09:38:17 executing program 2: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) 09:38:17 executing program 3: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)) 09:38:17 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r2, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00004e8000), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000640)) getpgid(0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getpgrp(0xffffffffffffffff) 09:38:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000002c0)) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000100)={0x16ed, 0x800}) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "fde8700a567884c15aaaaab1fda84197d6378fdfff2df12c65b9cb1cbda2eb8ff96bbadf0b8a1f6cf01a38e7f2eebe3355466ed042c61b8f5584c575db626c77899343b77cd60bd46467c81af6c7507696c0819ac01c362573c63989801bc01a6621e8c72e8294a9b4f151f23d6f25751970d93185c660b217f91b5c4758041085146e764e590e81901c12faf3e8f64bfce9f8704d3a7d6dd6776f2cfef397792118059ed0d8a826ba50ad9535f4f33099e00f3f1c0f292ace43d40346389eb2ddd6b1d1441a39472872ae79b4d466df527de37870bd20c77b99ce2e61326d61ef59"}, 0xe6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x7f, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6300006657558f46826e3956932828132f3b07ec82fa7f4c77c21be62a588a4888d7c83c126031260a72962184e1b574eafd7dfb14a24b7f13587723430727008bdd93fe1bd5ae7e9f13d19d134c914fa10ffb2f82de62c958918f6f998a69f5bc95aaaec0a5f5ef91c190999b15e2bbc1c8238bf2a37d3dfe7f7af771e8"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:38:17 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x6500, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1110.572820] binder_alloc: 7421: binder_alloc_buf, no vma [ 1110.584996] binder: 7421:7427 transaction failed 29189/-3, size 0-0 line 3136 [ 1110.608811] binder: 7421:7427 got reply transaction with no transaction stack 09:38:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100) r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) syz_read_part_table(0x7, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000140)="4a542b2ac26c1363301ae454b17ff7ab11e85e49e1a6e69161fe7a27d13927f11d830d818a206ed4ce31dffd3536aca60dc70346c558c4c23b097cc8f47fd5dd7302b488156ff2c28d2d19c40aea8fbc6db8075e9b913c132c4a7e924eb59afe96aab46bee77e9c8271ed64a255eaf8df389781cbe94faea1e5dae9c823f4c2158cf593510390f1ad4ae61b49fffd046746143747bc8d62e5637307f059e5aec333f39214cf0f5d11eeb0d5cba22f856a04fe4ded139ecfb015eceb146fd0d9deadf6e6fbbfe4d4f95f0", 0xca, 0x1000}, {&(0x7f0000000240)="a1b23b87e10614562daf714f8938e9cf4aa11db17af2608edeba4e932bc0c1a2f0d118d89adb790f2ecdea094d2660670748ec88ce1573cd5df46a2bdaa55859e45212e383a0900ef6d2050ec45d98c4c9aeb27a6d1b476e98ae10f2fce3ae9f8d0990fdaa52c0bd26e22bdc551792c88b0e544da9cae826c3c2259aca28bd0b62b63c92f311777ab07f2fd6c68dda4f330c35c2f6e21da80d410443365dc19d75c0340ae98e63c6634b92dc932342b84223678aa093b8102e6d7bf0d46fcc56dbe514af2ff2061d4ed413ee", 0xcc, 0xfffffffeffffffff}, {&(0x7f0000000040)="1754e831f716ac59524bc616ad9efab148eded1d73ece22feefcbae8fda512ab2b1c8a716c8fa2baa9f6186bd24b4eb34c", 0x31, 0x8}, {&(0x7f00000000c0)="8e19e0926d0f92ff360777d6f0aac6c70b", 0x11, 0x5}, {&(0x7f0000000340)="5a3d823a3cea0ad8ba79bdef2f433202885061c479737235e63b205c8afbe4b10b98b6beb3e3383ca1149535078918e270c00342496f9636e8d8be2882cecd5810b25a79319cc19c50b1227e1cacadc8c2568fba878361dc810530f7758bf37451458cbd1cf0e51e53e7cdcfc9a0c30ef5cc2c3076dbe8aeeb2330d9f3c624f45d447a4768f560b96b4228962f08d91b6d60fb9af739e95a27897d9ae729c5aa0f8005ae435963d624546b4ad7d73c5d0bca283964d05b165ad995e7d966279bb0aaa29d", 0xc4, 0x1}, {&(0x7f0000000440)}, {&(0x7f0000000480)="cd01df6ca70abb4ee2e7c46f5ac89fc9be8de77213df06527bec20fd1501eb0ee0c659a1540395a8699b65ca2fb60c1531dddd05002c96c182c9e5a9d1b6f7a533928a59bc994bf6dc2a4590", 0x4c, 0x40}, {&(0x7f0000000500)="56f61eaada90d483918b3462f1f8970942c7d0bce9902d399d6f7491d3a780063279dbdafcc02de6ee6ca80c5c5c823f40823b56b68726d8f0237ac4d5aac244884e1c8043a16742ae39f7e8f6953d78383adfb34c40541ceb9e323e3a388073b5d1e35460e26b62f5f38b3964d90f59f94bb894d95b9ad8934327764d517b23b397d2e891f4add1d3432b480d8120e2860aa8ddcae8b4d7bb4a58102a5d35658de5ca", 0xa3, 0x3}, {&(0x7f00000005c0)="a6e002536ef4827d6e48ea042adfebdea52861252224ea2d22d8837b7c8088361ab992fcb4c8eec41b01abdf261b63d5fffd3e18d49baba0e7a3bacd7d1e17e7032cdd362f50c64343607d7b2e96bfd46b9215c278567682489ceed571ad5bac02ef73d10747bcc2c96af98edc2092a10a19a20387b1e9d534e04fe8c634b0745f1e579ab3cad7bf72a298c01b6a6929a892163417fcfc30b17e89b9107639b49cee360a90fd64e5d81864f5acfff96deddb213337520d6d4269cb2fb0141f2ee8a1d471205931de53b222b9f31dbc6e2527fa012ac07c77686541a11df0684ecaaad82ad28053aa0c5ddb", 0xeb, 0xfff}]) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000240), 0x1000) [ 1110.632367] binder: 7421:7427 transaction failed 29201/-71, size 0-0 line 2921 [ 1110.661393] binder: BINDER_SET_CONTEXT_MGR already set [ 1110.679800] binder: 7421:7436 ioctl 40046207 0 returned -16 [ 1110.696547] binder_alloc: 7421: binder_alloc_buf, no vma [ 1110.702432] binder: 7421:7427 transaction failed 29189/-3, size 0-0 line 3136 [ 1110.717067] binder: 7421:7436 unknown command -1890232474 [ 1110.717075] binder: 7421:7436 ioctl c0306201 20000140 returned -22 [ 1110.717107] binder: 7421:7441 got reply transaction with no transaction stack 09:38:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1110.717117] binder: 7421:7441 transaction failed 29201/-71, size 0-0 line 2921 [ 1110.717384] binder: undelivered TRANSACTION_ERROR: 29201 [ 1110.717406] binder: undelivered TRANSACTION_ERROR: 29201 [ 1110.799398] binder: undelivered TRANSACTION_ERROR: 29189 09:38:17 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup3(r0, r0, 0x80000) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x4, 0x400, 0x8001, r2}) r3 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="a6487969f0bd751d2808", 0xa, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f00000001c0)='posix_acl_access{vmnet0cgroup$-ppp0keyring\x00', &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x552a71ab38070ac9}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4010) r5 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r5, 0x700f) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000440)={0x100, 0x100000001, 0x6}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000480)=""/4096) perf_event_open(&(0x7f00000014c0)={0x7, 0x70, 0x20, 0x1, 0x7, 0x8, 0x0, 0x2, 0x2000, 0x5, 0x9e6a, 0x20, 0xd8, 0x3f, 0x1, 0x3f, 0x100000000, 0x800, 0x1f, 0x5, 0x5a, 0xa6, 0x4, 0x7fff, 0x0, 0x9, 0x5, 0x7, 0x2, 0x400, 0x1f, 0x1, 0x7fff, 0x7f8000, 0x3, 0x846, 0x9, 0x4, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000001480)}, 0x0, 0x8, 0x3, 0x9, 0x7fff, 0x0, 0x101}, r6, 0xe, r1, 0x9) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000001540)) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001580)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x174, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda82}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31bb72ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffff9}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x11) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) write$binfmt_elf32(r0, &(0x7f0000001840)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x48000000, 0x0, 0x80000001, 0xffffffffffffff5c, 0x2, 0x7, 0x7fffffff, 0x30e, 0x38, 0x26, 0x1, 0x79, 0x20, 0x1, 0x6, 0x8, 0x8}, [{0x1, 0x3, 0xd88, 0x3, 0xdc, 0x40, 0x3ff, 0x3}, {0x3, 0x5, 0x401, 0x8, 0x9, 0xb0, 0x7, 0x200}], "3c5f65c8537e5fddd6506f3196d25ac1b39a3146f3f7ac7509b70a4a6f866d4ce99f8250e4207e68143fcc3e2fda75"}, 0xa7) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x7c, r7, 0x500, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffff8061}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4f31}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2800}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000001a40)=0xaa) syz_genetlink_get_family_id$fou(&(0x7f0000001a80)='fou\x00') bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001ac0)=0xffffffff, 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r8, 0x202, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x40}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0xfcf81f7e04e79f1) sched_setaffinity(r2, 0x8, &(0x7f0000001c40)=0x7) 09:38:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0xc40, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x2}) 09:38:17 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x8, @empty}, {0x307, @remote}, 0x2, {0x2, 0x4e23, @empty}, 'veth0_to_bridge\x00'}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="0201000010000000001c0000000000000800130000000300000000000000000006000000000000000000800000000000e00000010000000000000000000000000000000000000000000000000000170003000600000000000200000490cf7ced000000000000000003000500000000000200423b1d632b010020000000000000"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 09:38:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1dc}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:38:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140), 0xffffffffffffffc6) epoll_create(0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000100)=0x68) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001000), 0x2e1, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18, 0x80}, 0x2404007d) [ 1289.386831] INFO: task syz-executor2:7417 blocked for more than 140 seconds. [ 1289.394292] Not tainted 4.9.155+ #27 [ 1289.398740] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.406759] syz-executor2 D28976 7417 2518 0x00000004 [ 1289.412646] ffff8801ae2c4740 ffff8801c827a100 ffff8801db721000 ffff8801cd374740 [ 1289.422198] ffff8801db721018 ffff8801c82cfc48 ffffffff82806806 ffffffff815cc960 [ 1289.430296] 0000000000000000 ffff8801ae2c4ff0 0000000000000006 ffff8801db7218f0 [ 1289.438432] Call Trace: [ 1289.441007] [] ? __schedule+0x656/0x1b50 [ 1289.446774] [] ? blkdev_put+0x560/0x560 [ 1289.452484] [] schedule+0x92/0x1c0 [ 1289.457756] [] schedule_preempt_disabled+0x13/0x20 [ 1289.464340] [] mutex_lock_nested+0x38d/0x920 [ 1289.470453] [] ? blkdev_put+0x2b/0x560 [ 1289.475981] [] ? mutex_trylock+0x3f0/0x3f0 [ 1289.481909] [] ? locks_remove_file+0x32f/0x430 [ 1289.488175] [] ? blkdev_put+0x560/0x560 [ 1289.493809] [] blkdev_put+0x2b/0x560 [ 1289.499251] [] ? blkdev_put+0x560/0x560 [ 1289.504963] [] blkdev_close+0x8b/0xb0 [ 1289.510933] [] __fput+0x274/0x720 [ 1289.516037] [] ____fput+0x16/0x20 [ 1289.521188] [] task_work_run+0x108/0x180 [ 1289.526908] [] exit_to_usermode_loop+0x13b/0x160 [ 1289.533360] [] do_syscall_64+0x3f7/0x570 [ 1289.539157] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1289.546073] [ 1289.546073] Showing all locks held in the system: [ 1289.552441] 2 locks held by khungtaskd/24: [ 1289.556689] #0: (rcu_read_lock){......}, at: [] watchdog+0x11b/0xa40 [ 1289.565395] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x7f/0x21f [ 1289.575299] 1 lock held by rsyslogd/1906: [ 1289.579515] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xa8/0xd0 [ 1289.588526] 2 locks held by getty/2034: [ 1289.592479] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.601865] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1fe/0x1820 [ 1289.611890] 1 lock held by syz-executor2/7417: [ 1289.616453] #0: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_put+0x2b/0x560 [ 1289.625491] 2 locks held by syz-executor3/7419: [ 1289.630195] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_put+0xbb/0x840 [ 1289.639457] #1: (loop_ctl_mutex){+.+.+.}, at: [] lo_release+0x1e/0x190 [ 1289.648552] 1 lock held by syz-executor4/7420: [ 1289.653126] #0: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_put+0x2b/0x560 [ 1289.662270] 2 locks held by syz-executor0/7440: [ 1289.667004] #0: (loop_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x85/0x1a10 [ 1289.676223] #1: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 1289.685905] [ 1289.687665] ============================================= [ 1289.687665] [ 1289.694793] NMI backtrace for cpu 0 [ 1289.698473] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 [ 1289.704943] ffff8801d9907cd0 ffffffff81b47871 0000000000000000 0000000000000000 [ 1289.712963] 0000000000000000 ffffffff81097301 00000000003fff8e ffff8801d9907d08 [ 1289.721033] ffffffff81b52afc 0000000000000000 0000000000000000 0000000000000000 [ 1289.729081] Call Trace: [ 1289.731659] [] dump_stack+0xc1/0x120 [ 1289.737080] [] ? irq_force_complete_move+0x281/0x300 [ 1289.744136] [] nmi_cpu_backtrace.cold+0x47/0x87 [ 1289.750446] [] ? irq_force_complete_move+0x300/0x300 [ 1289.757177] [] nmi_trigger_cpumask_backtrace+0x124/0x155 [ 1289.764253] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1289.771258] [] watchdog+0x5f7/0xa40 [ 1289.776595] [] ? watchdog+0x11b/0xa40 [ 1289.782031] [] ? reset_hung_task_detector+0x20/0x20 [ 1289.788673] [] kthread+0x278/0x310 [ 1289.793837] [] ? kthread_park+0xa0/0xa0 [ 1289.799672] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1289.806436] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 1289.812738] [] ? finish_task_switch+0x1e5/0x660 [ 1289.819239] [] ? finish_task_switch+0x1b7/0x660 [ 1289.825541] [] ? __switch_to_asm+0x34/0x70 [ 1289.831527] [] ? __switch_to_asm+0x40/0x70 [ 1289.837385] [] ? __switch_to_asm+0x34/0x70 [ 1289.843241] [] ? kthread_park+0xa0/0xa0 [ 1289.848838] [] ? kthread_park+0xa0/0xa0 [ 1289.854437] [] ret_from_fork+0x5c/0x70 [ 1289.860166] Sending NMI from CPU 0 to CPUs 1: [ 1289.864716] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff82815692 [ 1289.871941] Kernel panic - not syncing: hung_task: blocked tasks [ 1289.878068] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 [ 1289.884536] ffff8801d9907c68 ffffffff81b47871 ffff8801ae2c4700 ffffffff82a79d00 [ 1289.892528] 00000000ffffffff 0000000000000000 00000000003fff8e ffff8801d9907d48 [ 1289.900526] ffffffff813f746a 0000000041b58ab3 ffffffff82e35b4a ffffffff813f7291 [ 1289.908585] Call Trace: [ 1289.911154] [] dump_stack+0xc1/0x120 [ 1289.916495] [] panic+0x1d9/0x3bd [ 1289.921550] [] ? add_taint.cold+0x16/0x16 [ 1289.927329] [] ? find_next_bit+0x44/0x50 [ 1289.933038] [] ? printk_nmi_flush+0xae/0xd0 [ 1289.939006] [] ? irq_force_complete_move+0x300/0x300 [ 1289.945743] [] ? nmi_trigger_cpumask_backtrace+0xfc/0x155 [ 1289.952984] [] watchdog+0x608/0xa40 [ 1289.958243] [] ? watchdog+0x11b/0xa40 [ 1289.963744] [] ? reset_hung_task_detector+0x20/0x20 [ 1289.970461] [] kthread+0x278/0x310 [ 1289.975690] [] ? kthread_park+0xa0/0xa0 [ 1289.981347] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1289.988085] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 1289.994455] [] ? finish_task_switch+0x1e5/0x660 [ 1290.000754] [] ? finish_task_switch+0x1b7/0x660 [ 1290.007053] [] ? __switch_to_asm+0x34/0x70 [ 1290.012916] [] ? __switch_to_asm+0x40/0x70 [ 1290.018773] [] ? __switch_to_asm+0x34/0x70 [ 1290.024631] [] ? kthread_park+0xa0/0xa0 [ 1290.030257] [] ? kthread_park+0xa0/0xa0 [ 1290.035924] [] ret_from_fork+0x5c/0x70 [ 1290.041775] Kernel Offset: disabled [ 1290.045389] Rebooting in 86400 seconds..