8e7ac632859de169455d70bd8f46a5efa3ecfe6e7aacff39ba9a6bf1ef41eb2a258e946d5bfbb01938f8a7f6f9352cf4e1cb93ef9a4076199e50299030f6d88864f3310b960cce21cf3527e46a8014da7376237b9e63d4fd056e6fc93e8e780ac925e1993ced10db591212cd2cec0eeae0ea683004050446b78c40100f757419d5cfef1046e5e251605d1f4febd6076264c08989f73cceac1c7e0450368a04e5743560e3945e41b3e01884d67c95e7ffba208197c6667ce64e0473"}], 0x144c}, 0x2}, {{&(0x7f0000007780)=@ax25={0x3, {"48b89f5eb2ef12"}, 0x9}, 0x80, &(0x7f0000007900)=[{&(0x7f0000007800)="9b911bafe3ff7643363d9966496681600b6ab3282addd9e283b82b331818513918f736a3c26693b85f0ad950e33c6aa6dd8c8bbba8ee4a70440d90b7dcd26ad8917fad8f7a139b42c47da70c5ef548c8437dfd480949ca26303d0a", 0x5b}, {&(0x7f0000007880)="fd1324f05306609ddd84ec4c5ebc0e807248fb724f7fd903b4c5c285a4a8bef4106b48fa722760d260fe5ec13a09b77a3e36debc7d9041eda351be996e0ce8a216ac25eb8c313b004ad6b8ec8ab2f0b60f81ba", 0x53}], 0x2, &(0x7f0000007940)=[{0xec, 0x109, 0x1000, "f55caac25e40f6dc287df0474272377c5e693260f253de03961fd1fecd8c3cab4b6f62f20674167583463a015126efce77983a0f645614cc162e549fdfc8391cd84dcfb562cdee4a64ecf8b0bfc4a243591658bd83ff207ccba691615640d834502e4a05f77aebb502ccf62b1eb2d835c3dd9f863d9b6d3689b2719235d44d4d76c3b7f758c1938b9d245470e7965c0619123580e68b48369bf7a5a018215b43d1cc43111236de508d5ae54f7e75104925378ac3ea1a02e5d840edefe2057e605726e9857c13b4bdc47620141e6ef07aae4cb140d0981e61a6a44d6527"}], 0xec}, 0x5eddb99e}], 0x4, 0x20008801) [ 144.416246] binder: 9083:9087 ioctl c0306201 0 returned -14 [ 145.189769] binder_alloc: binder_alloc_mmap_handler: 9083 20001000-20004000 already mapped failed -16 [ 145.199297] binder: 9083:9111 ioctl c0306201 0 returned -14 [ 145.200132] binder: BINDER_SET_CONTEXT_MGR already set [ 145.200139] binder: 9083:9112 ioctl 40046207 0 returned -16 [ 145.200448] binder_alloc: 9083: binder_alloc_buf, no vma [ 145.200479] binder: 9083:9113 transaction failed 29189/-3, size 24-8 line 3136 [ 145.200753] binder: send failed reply for transaction 268 to 9083:9087 13:48:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) connect$packet(r0, &(0x7f0000000140)={0x11, 0xf5, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14) 13:48:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067c072dec33ffa197428cc4689b9a6b4d1977870a8ea412a632220000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000440)={@dev, 0x0}, &(0x7f0000000480)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000980)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000009c0)={@local, @multicast2, 0x0}, &(0x7f0000000a00)=0xc) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f00000000c0)=""/73) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x482080}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1cc, r2, 0x600, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x1b0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x639f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008895}, 0x800) 13:48:25 executing program 0: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000140)=0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be69010000009c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197404cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], r0}, 0x48) 13:48:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1, &(0x7f0000000280)=ANY=[@ANYPTR64], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000001}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x110) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2030000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x328}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 13:48:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'ip6gretap0\x00', @ifru_data=&(0x7f0000000000)="4e509e692202af458522b6b7e6cc6168dbd6b9284bc24652875db46074d36366"}) 13:48:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e162000067e060714082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a63222087559b479095e7e020279141a60a12fec2febc66f200fd363d8dc1dda0ea1aec42f0fbf98058e59a8867aaba92aa1c207f30d92b318b1c902d6f5fecef676456"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/86) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xa3, 0xe7, &(0x7f0000000000)="c7b904ac83c36c6fb3b9520611ea200edce197a4722dc959420e30af2c098131536fc8a7b2bcae6f2c015f89fa5d552fcec0016a3c5e3e4efdecd99e98e6354990832cab6bdc91d43b8434ff2f1531627c6cdbe8f1c77c264c6bd1cfbfb68d32f198d0c2138954db90e99a1be7739d999692eed46198828198388b6a9fb07bc9805b879e7c3f2d4932c8d68d4939857175d69453b199ac30ab63cd5a09d02c9759ae66", &(0x7f00000000c0)=""/231, 0x1f}, 0x28) 13:48:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = open(&(0x7f0000000000)='./file0\x00', 0x201, 0x4) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'ipddp0\x00', 0x8000}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101000, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x101200, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f00000001c0)='security.SMACK64IPIN\x00IA\xda3\xa9\xc0\x99:\v\x87\xec\xb7\x8c3(i\xfej}\x9f}\x89\xcf\x18#\x0f\x0f\x1cUc\xee\n_\x96/\xbc\xd7\xd71wUpm_\xb4\xa5r\xda\xd6\xb7\x8c\xb3\xe6\xd3\x81\x8dh\xc5[\xf3\xcb\x8dK\xebo\xb0\xcdd[\x16yQ\x82\b\x94^\xd9\xc71\x9d\x1a\xe4\x7f\x18\xee\x04>\xae5a\xa6w\x9b\xbe\xd2\xa2+\xc1g\n\xc6\\e\xd43', &(0x7f00000000c0)='\'^-procvmnet1p\xa9p1cgroupkeyringlo-eth0-\'cpuset\x00', 0xffffffffffffffd2, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [ 145.205356] binder: undelivered TRANSACTION_COMPLETE [ 145.205362] binder: undelivered TRANSACTION_ERROR: 29189 [ 145.278742] binder: 9122:9128 ioctl c0306201 0 returned -14 13:48:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xd) getsockname(0xffffffffffffff9c, &(0x7f0000000040)=@can={0x1d, 0x0}, &(0x7f00000000c0)=0x80) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="210000ff", @ANYRES32=r1, @ANYBLOB="1400030069703667726574617030000000000000140006007f000000530e0000060000000300000008000400ac1414bb"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000091) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x20, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2fe45c1cd2ca35830be28bb85bfaba8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgid(0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x6000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40a0848}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc0, r3, 0x600, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x33494000000}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x800}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000440)=r1) r4 = dup3(r0, r0, 0x80000) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40246608, &(0x7f0000000640)={0xe234d72, 0x8, 0x9, 0x7, 0xffffffff, 0x7}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1b8}}, 0x4000000) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x6, 0x2, 0xff}}, 0x28) memfd_create(&(0x7f0000000680)='syz0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca34ac1f58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:25 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000280)={@dev, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000640)={@empty, 0x0}, &(0x7f0000000680)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @empty, @local}, &(0x7f0000000840)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000880)={@broadcast, @multicast1, 0x0}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000940)={{{@in=@empty, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000b80)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000bc0)={0x47c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xe8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8c}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r10}, {0x14c, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x10001, 0x7ff, 0x2, 0x5}, {0x81, 0x800, 0x100, 0x3}, {0x0, 0x6, 0x40, 0x1}, {0x8, 0xaba1, 0x5, 0x1}, {0x3f, 0x3, 0x1, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x8c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 145.301235] binder: 9122:9128 ioctl 8004700b 20000000 returned -22 [ 146.068075] binder_alloc: binder_alloc_mmap_handler: 9122 20001000-20004000 already mapped failed -16 [ 146.077627] binder: 9122:9156 ioctl c0306201 0 returned -14 [ 146.078621] binder: BINDER_SET_CONTEXT_MGR already set [ 146.078629] binder: 9122:9176 ioctl 40046207 0 returned -16 [ 146.078994] binder: 9122:9177 ioctl 8004700b 20000000 returned -22 [ 146.079096] binder_alloc: 9122: binder_alloc_buf, no vma [ 146.079113] binder: 9122:9176 transaction failed 29189/-3, size 24-8 line 3136 13:48:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000540)=""/4096, 0x1000, 0x40, &(0x7f0000000140)={0x11, 0x1b, r3, 0x1, 0x1000000000000, 0x6, @link_local}, 0x14) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000040), 0xa5536373f3ba4324, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:25 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'eql\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x190}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x2, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee349b9568ceb067493c331cec8bcf20dfe5987362e509675db7736903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8e5606d7039842f2996296039dca9f2e1629c7067e06c844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4"], 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) sched_yield() 13:48:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1ffffffffffffe51, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], 0x0, 0xffffffffffffffff}, 0x48) uname(&(0x7f0000000000)=""/158) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @multicast1}, 0x200, 0x0, 0x0, 0x0, 0x895f, &(0x7f00000001c0)='bridge_slave_0\x00', 0x3, 0x5, 0x5}) write(r0, &(0x7f0000000280)="cf93af21684ea5f211c8a5df6fac9f7c8939b03bcf53bb5f0fd8ad98035ce674c69ef7d61f46f2fff5b92da5d0e79612a6476d40ac92cd1d1cc99c82ba765f6766d98a9dd8b43b7d", 0x48) getdents64(r0, &(0x7f00000003c0)=""/176, 0xb0) 13:48:25 executing program 1: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r1, &(0x7f0000000580)="d316e4d895f2fd0c7e9a6a60ca783dca7c56b58468b44eec601df5e510f3b560214feffeac32", &(0x7f00000005c0)="43093b721c16c1508129f4142e0a07dddf929a25ddc4b0b8d66ab3088dfcf256f0909c17169f11438c46c5eb6605a9f53e73943a808ab47198a1dd988f0bfda6046bcdb609caca20edfa94a7b9ebb11652481e690a4c5ec0baded3ddb47658607ab38f270495deabd72b063cd6b4616ee96f8cec9df7265c0041cd3627c9270d69155ea6efa85916b743611bf371eb6590f9e60eeccdf8265ed1f4ec644e9907feb7772fab49e067ff1f8e5153b07dbab653bfa9969ca8", 0x1}, 0x20) setxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x2) r2 = gettid() r3 = memfd_create(&(0x7f00000003c0)='eth0\x00', 0x2) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x5a) fcntl$lock(r0, 0x25, &(0x7f00000002c0)={0x1, 0x1, 0x1, 0x7ff, r2}) ptrace$pokeuser(0x6, r2, 0x3, 0x10000) r4 = memfd_create(&(0x7f0000000240)='eth0\x00', 0x1) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000280)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r5, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x80) sendto$unix(r5, &(0x7f0000000140)="9fc64ddeea745a52b1146648bdb73166f78f2b9528b804a70cf2d93bcb7642e7d9df232e900ce2e6af7e10f748e4133fdb15d41a3d6bf7451f717d060140c25779c90200416ab929dbfa0f92", 0xff49, 0x4000000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 13:48:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee308f2cceea056933bc331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x7, &(0x7f0000000000)=@raw=[@alu={0x0, 0x2, 0x2, 0xf, 0xb, 0x18, 0xfffffffffffffffc}, @alu={0x7, 0x7fffffff, 0x7, 0xa, 0x0, 0x2, 0xfffffffffffffff0}, @alu={0x4, 0x9, 0x24a7a27ed2c3b72b, 0x8, 0x0, 0x100, 0x8}, @call={0x85, 0x0, 0x0, 0x5b}, @call={0x85, 0x0, 0x0, 0x52}, @ldst={0x2, 0x0, 0x2, 0x2, 0xf, 0x18, 0xffffffffffffffff}, @generic={0x69e3066a, 0x1, 0x1, 0x4d9b, 0xffffffffffffffe1}], &(0x7f0000000040)='GPL\x00', 0x8, 0xa5, &(0x7f0000000080)=""/165, 0x40f00, 0x1, [], r0, 0x5}, 0x48) 13:48:25 executing program 2: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000009004000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7066e0603e0e0000c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220f4b0a93bb4467e599ff867cb7a7c16cea281aef8129d"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1ffffffffffffff6, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x1, [], 0x0, 0xb}, 0x48) r1 = dup(r0) pipe(&(0x7f00000000c0)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1a5, 0x6}}, 0x30) [ 146.079164] binder: 9122:9177 Release 1 refcount change on invalid ref 1 ret -22 [ 146.079412] binder: send failed reply for transaction 273 to 9122:9128 [ 146.083707] binder: undelivered TRANSACTION_COMPLETE [ 146.083714] binder: undelivered TRANSACTION_ERROR: 29189 13:48:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f0000000000)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 1: 13:48:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b40000000900000025000000000000009500000056000000876bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004040)=""/84, 0x54}, {&(0x7f00000040c0)=""/48, 0x30}, {&(0x7f0000004100)=""/152, 0x98}, {&(0x7f00000041c0)=""/53, 0x35}, {&(0x7f0000004200)=""/237, 0xed}, {&(0x7f0000004300)=""/97, 0x61}, {&(0x7f0000004380)=""/4096, 0x1000}], 0x7}, 0x100}, {{&(0x7f00000053c0)=@xdp, 0x80, &(0x7f0000005500)=[{&(0x7f0000005440)=""/113, 0x71}, {&(0x7f00000054c0)}], 0x2, &(0x7f0000005540)=""/13, 0xd}, 0x100}, {{&(0x7f0000005580)=@pppol2tpv3, 0x80, &(0x7f00000068c0)=[{&(0x7f0000005600)=""/173, 0xad}, {&(0x7f00000056c0)=""/188, 0xbc}, {&(0x7f0000005780)=""/159, 0x9f}, {&(0x7f0000005840)=""/126, 0x7e}, {&(0x7f00000058c0)=""/4096, 0x1000}], 0x5, &(0x7f0000006900)=""/245, 0xf5}, 0x1}, {{&(0x7f0000006a00)=@tipc=@id, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006a80)=""/52, 0x34}, {&(0x7f0000006ac0)=""/216, 0xd8}, {&(0x7f0000006bc0)=""/80, 0x50}], 0x3, &(0x7f0000006c80)=""/77, 0x4d}, 0xb22}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006d00)=""/33, 0x21}], 0x1, &(0x7f0000006d80)=""/251, 0xfb}}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000006e80)=""/104, 0x68}, {&(0x7f0000006f00)=""/247, 0xf7}, {&(0x7f0000007000)=""/109, 0x6d}, {&(0x7f0000007080)=""/136, 0x88}, {&(0x7f0000007140)=""/208, 0xd0}, {&(0x7f0000007240)=""/172, 0xac}, {&(0x7f0000007300)=""/30, 0x1e}], 0x7, &(0x7f0000007380)=""/144, 0x90}}, {{&(0x7f0000007440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000007540)=[{&(0x7f00000074c0)=""/115, 0x73}], 0x1, &(0x7f0000007580)=""/222, 0xde}, 0x5}], 0x7, 0x20, &(0x7f0000007780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000077c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000007800)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], r0}, 0xfffffffffffffe87) [ 146.176276] binder: 9184:9190 ioctl c0306201 0 returned -14 [ 146.210312] binder: 9184:9190 unknown command 0 [ 146.239830] binder: 9184:9190 ioctl c0306201 20000380 returned -22 [ 146.259150] binder: 9184:9216 Release 1 refcount change on invalid ref 1 ret -22 [ 146.274505] binder: 9184:9190 ioctl c0306201 0 returned -14 [ 146.280588] binder: BINDER_SET_CONTEXT_MGR already set 13:48:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20015, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:26 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101042, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x80, 0x6}) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a402220"], 0x0, 0x5, 0xfffffe1f, &(0x7f00000001c0)=""/195, 0x2, 0x4}, 0x48) 13:48:26 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x2000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0x17, &(0x7f0000000200)='-trK\xa1\x92/dW\xa8\a\xbc\xc9\r$\xb9\xc4ust\x11\xdd\x00'}, 0x30) r3 = syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/pid_for_children\x00') accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x80800) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast1, @multicast1}, &(0x7f00000002c0)=0xc) sendmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@hci={0x1f, r4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000640)="15a877a41b9dc325f5e3af3cafdc50d8c33c2da99c67e09f7c8652843abd178e614673893d0594e6b5ad2215df5143573104674cbfdc5331e6e94ed78e610fab16fa78509641bf3381a9fd9769cfb5600b395ae227635757f406dbb33c8e18f558228f94c679e0b331741b548ff9033aff5fb714f2de6091555711f484be9a7abd6672851b5e016062e01a97853452d2b51da5cdef04752c141074e20023f829449ec0456b22a6a32714b5b51bccaae85258ab7ce4542c349cb3f5e502f0278e99f3280ca3e64d0384fa3145fa127f77b551c53e665ae36e1280fd0b09d69840a20a2ac9a1a2c9e1ed5917fd217c", 0xee}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="dc000000000000000000640090c2c5e71a0f3d423961ffb5b93fe3c39b098505027f42aa466175754a71825db92bbbdcc90bbbaad465b14ae5b40e700efd8bd61b739133e6ada3cb023b63fc268f243caee5c1eb906e083123c558c6ee82d23ffbd92dda53d822052e860cc289c74068e1407b813e28c6eddd5e6d3eafbd09e62a151edcda520b0e3ea6cf92e4000000274d06989c6355971606dc8d6530fbb2fc3bf4a818323de9761f2d51538ddef9dc9b89412f03e78cb309a7b5ffffffff6868557f7eeae5b620d00000"], 0xdc}}, {{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000840)="36cf7f6e673bbef81bb127344e22bc6d34942484f350d775b94a437050469da6ddc0f7a8a985e80fc72f5d332279dd84bd91d37fe39e903bb71ca69fd0138ea044b85214509e3d5b2924e02a6899871979a7b5c9f86488285dd7fb17455ac5cdd19fdadd5a93f67bc70c0c588d565d", 0x6f}, {&(0x7f00000008c0)="abd75950fcb00912b6af6fc990b37e45b6e07c88d6eb2e1081a47f6f76e65a2469bcff39a39141a47ca92bdb8fa68d59d95e747864e621f7416ccd64529a7f521077acf55820e5973462febc1748daff1c8bc1074385cb444bccdd743031be4f8098c695391150b3836a4e7c5d33f37e470bb7231acbfe00d79d3ee6d5491b86f49a3f75af230b9a56870b20d049f4fac683ac246e2fd5a645c1d7a872cecf98b09a05ed7011cad0cecc023e26329948a59966f374d09efde903b5bb69444905d5ad5ec55192f8198809af07cd09b95a44c865e68eb7ca5010cfac73fadca3c8b284594bb0bcd2de76", 0xe9}, {&(0x7f00000009c0)="f36b878c28b3d4013a206900e225e1e6fc8eaebef8f1db7b0faa4e8dc7417fe5695e46d0b83b9a1f3717c04754f0106e7f49f3610952ea018ed96a70bac705f4e4c157dc8123e7bb166c9cfd4e500edd25745b9ccae75cff4f805ab32b2819713055d6e24f3607d1320605a682c5d107ed3b0e33c60a0e94463f5ef81f9ea500a95fb7cb12095f07fe1a51cc34c292156a3b86ff6e86b286b6b0c6f845feeb447f72ac701e0aa01c021554064c53c2ffc9e97b32e43f6622449b80283324b1493340a46ac7db0561de175bda3c23", 0xce}, {&(0x7f0000000ac0)="b073c94c8c251afd1b85aca708601e23bec4c8f0ba647e95ec89c810b5fb986a72782b11e578fa40779719a29de379e331ac23371abf1744cc6ef913c4c8253c28ffac101b03ac76f46bac70326c7e8dd94fa666a276c38bd7d9abc1eabb5c6926ef1a509bd92b5aee3366e725049f0ec30146755af0285cb7fd4a9b22618d0d5e690ca6798770e47344971494abd4abf613357a247a527b168c670bb87e7745c33f81b9a88603813b19bc56f18f61ba6c81c5134292e57f754fdf9d9e0e1ce604842187114302983fbece75609d22bcf8955f5de2ff176dd8", 0xd9}], 0x4}, 0x1}], 0x2, 0x4) ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000c40)={0x9, 0x0, 0x6466, 0xe04, 0xfffffffffffffffc, 0x6a45bf76, 0x100000000}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000c80)) fchmod(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, &(0x7f0000000000)={{0x0, 0x1, 0xfff, 0x3, 0x746}, 0x3, 0x9, 'id0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 'timer0\x00', 0x0, 0xffffffffffff0000, 0x400, 0x9b, 0xfff}) 13:48:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009004000250000000000000095000000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bc69f1fe5902d67af6c93d3ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec328fa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) write$binfmt_elf32(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffeff, 0x6, 0x1ff, 0x4, 0x7, 0x2, 0x7, 0x4, 0x1d3, 0x38, 0x1cf, 0x6, 0x2, 0x20, 0x1, 0x0, 0xfffffffffffffffc, 0x4}, [{0x41b27ddd799d6438, 0x7f, 0x0, 0x9, 0x1, 0x1, 0x9, 0x1}], "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", [[], [], [], [], []]}, 0x656) 13:48:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@mcast2, 0x7e, r1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x2, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x0, 0x7fff, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = fcntl$dupfd(r0, 0x406, r0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0, 0x0, 0x3, {{0x1, 0x1, 0x6, 0x9, 0x0, 0x5, {0x0, 0x81, 0x4, 0xdbb, 0xa5, 0x81, 0x9, 0x7f, 0x80000001, 0x5, 0x5, r2, r3, 0x1000000000000, 0x9}}, {0x0, 0x2}}}, 0xa0) 13:48:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) signalfd4(r0, &(0x7f0000000000)={0x4}, 0x8, 0x0) 13:48:26 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xffff, 0x101000) [ 146.286824] binder: 9184:9216 ioctl 40046207 0 returned -16 [ 146.292882] binder: 9184:9190 unknown command 0 [ 146.294969] binder: 9184:9216 Release 1 refcount change on invalid ref 1 ret -22 [ 146.305670] binder: 9184:9190 ioctl c0306201 20000380 returned -22 13:48:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x20, 0xc3, &(0x7f000000cf3d)=""/195, 0x41f00}, 0x48) 13:48:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = geteuid() r1 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r1, &(0x7f00000013c0)=[{&(0x7f0000000100)="6794b9393a70cf3259b22f36cb43949f1cd66b30b9c4ae390bbed932d41a263c8e7adf62b17c2258522d3d0d54d921c357ed334cf61af812e35cd265b1228ac557c33e9e5a8bbe1f54fe4f380d167d53ec27b7909221379263790938f24b0fa86b07bbd39a11db043b8756771011124105c28808c6bb6fc3680a3f871087227fa1afe1b541218e43fbc5038d0766b44ec7ef1d6f821711fcc69cf42ac3de", 0x9e}, {&(0x7f00000001c0)="ab056dc8c7582dca81e34d3869f345e26e1248f98ed57bdf5188af1dd31b3684a9beaca80eaaad2079d6459c7a8ebc4be67ae48925fca6a17efea118e79811d5ffbf07838982b6389f06a02acc638607aba52df8d00bd47c68062fbb6caf2c81dc1be0c65781d0cd926a507c57c53b7d8daa713c56a46cefc1e8d85fc7c1bf8733385fcb22fef6d1c68d2f6040f6b2fda368a600879038d90f476c832d79d3aafce26db28c37289ff1fd5a690df8f81c4508bf3bc03cabc71283f71c2b166ab213c5b36259533151f0a97db63fee48cee98d617a84307819e3213e873f48eb95a9f3cceb4c1910c1c560", 0xea}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="b3d71138bcdff87a16fdeb834178ace24ff4cbf0c38e7fabe7033c52d6ef", 0x1e}, {&(0x7f0000001300)="cf6bf7711b5c7448d489fabece7b810d50c9f305339dd6322a245bb073e89c71c0d2d50dfa7bff24a8f659771d3dfcbd94288053fb7a63eeb76abf7ad4e8f38e1b6a3bf955a962056a16715ae5b157492d738aeef8d3fbaae53ee54cac4a3c5c6086c0dd093a59c66c4d791c3d71731fa6a718c3ba711e74eef13cabd434028f45446a368fc684330b589d4e5015dc0bd5384d6e3b08df8ff2146761451ca691a65906cdf346310d222558ebf6", 0xad}], 0x5, r1) keyctl$get_persistent(0x16, r0, r1) 13:48:26 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a69958c932f848a756cd8b8dcff5ffccb4d1977870a8ea412a632220391740bbdf32ae1178f45254eb7bfe49db98a369ca770c"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 146.346365] binder: 9230:9235 ioctl c0306201 0 returned -14 [ 146.379261] binder_alloc: 9230: binder_alloc_buf, no vma [ 146.400914] binder: 9230:9235 transaction failed 29189/-3, size 24-8 line 3136 [ 146.423170] binder: 9230:9235 Release 1 refcount change on invalid ref 1 ret -22 [ 146.441983] binder: BINDER_SET_CONTEXT_MGR already set 13:48:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:26 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f00000007c0)="851e5d29353dd90a03fb8e70fe41da8b471d71bb4270b77464254c09270977d9222a98cb57") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x375, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f0000000000)=""/195, 0x4000000000, 0x0, [], 0x0, 0xfffffffffffffffe}, 0x48) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x98002040}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x168, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c800) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10010084}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x700, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr=0x13}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000810}, 0x804) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) 13:48:26 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x800) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffb2, 0x80800) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x55, "6554717ea61a82b8e8a5232dd80c02cfd3840484b312f62f4faa4c902aef05d46070c6b5dc4b5b7cfa832d7f26eda4646ce25980e1e1fd1a15d850f43ad2d06a807c3ca6f5ebe9c81e9ad9f984e1c3f81ba25a60b2"}, &(0x7f00000000c0)=0x79) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)=r2) 13:48:26 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@empty, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 2: set_tid_address(&(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) finit_module(r0, &(0x7f0000000040)='\x05securityeth1\xa1posix_acl_accessusercpusettrusted/$vboxnet1^trustedbdev\x00', 0x2) pipe2$9p(&(0x7f00000000c0), 0x84000) 13:48:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x81, 0x18}, 0xc) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x80800) recvfrom$inet6(r1, &(0x7f0000000140)=""/244, 0xf4, 0x42, &(0x7f0000000240)={0xa, 0x4e20, 0x7f, @remote, 0x1}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)="13fee2d185e1572cc13ca3822457e3e7548bb6be613c59232310e74b1ec3174a410ec932edd95cb142910defdaba163905bac94945a6ce4f1c8b66"}, 0x10) [ 146.442500] binder: 9230:9235 ioctl c0306201 0 returned -14 [ 146.453193] binder: 9230:9258 ioctl 40046207 0 returned -16 [ 146.459436] binder_alloc: 9230: binder_alloc_buf, no vma [ 146.464895] binder: 9230:9258 transaction failed 29189/-3, size 24-8 line 3136 [ 146.472558] binder: 9230:9235 Release 1 refcount change on invalid ref 1 ret -22 13:48:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x400001, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0x454, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000)="7f54859bf43b02b23c04c8875e12b96bdfbf708536669466f9584e383db31e401c19835c45f71913050ee25abcfa475a2347703f74d6d65d8f2fab735d5ca2e500ba91795ecf912820c0d5cb607c3424b15975700b357408a6cac41f25fa6709ecea6be66726f5170b62be86f99911df85e2bca8a36f1503db71f6ecdee33801a81c4ee070e1", &(0x7f00000000c0)="e2108be0160df223a47917fa3279a996200915b7c26c3cb634be4376ab8db270dc26c5742eddfba78eaa7ca534a55f133b5489ca6ecdaa3c8a371d9bd381c63cbdf2b80e7e5473f54883823e45acb2fb6b73442d7818f5090be547dd624821bfa52fe13292b6076511abb5077fb7a7d9fd7eca6f155ad0338a601635fdce56e5d51ba5b77bb624e58e2c3233f897e82602a2", 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) r2 = memfd_create(&(0x7f0000000bc0)='*\x00', 0x2000002) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000c00)={0x0, @remote, @dev}, &(0x7f0000000c40)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/219, 0xdb}], 0x2, &(0x7f00000003c0)=""/239, 0xef}, 0x6}, {{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, &(0x7f0000000580)=""/34, 0x22}, 0x7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/3, 0x3}], 0x4, &(0x7f00000008c0)=""/35, 0x23}, 0x9}, {{&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/52, 0x34}], 0x1, &(0x7f0000000a00)=""/8, 0x8}, 0xff}], 0x4, 0x2000, &(0x7f0000000b00)={r0, r1+10000000}) getsockopt$inet_tcp_int(r3, 0x6, 0x3f, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) [ 146.498918] binder: 9265:9269 ioctl c0306201 0 returned -14 13:48:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af6369041cc92c2fe683ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8359e00002220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r1, 0x202, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'em1\xb2\\eth0louserlo'}, {0x20, '/dev/ppp\x00'}, {}, {0x20, '/dev/ppp\x00'}, {0x20, '/dev/ppp\x00'}, {0x20, '/dev/ppp\x00'}, {0x20, '/dev/ppp\x00'}], 0xa, "4249b3012cf0a5fcbb9a2da6abc993c68724a0b1c5b97f68c52d9bfd8223c0b5a1f1b4a213833f74c1b7a41c988e87f8138489cf33a081e56711af85e57a5fdaa2723c1da1cda3fd934492be9171f45b1bfa6c3d35e4c62f851dbcae3df9df760a1e396cec5f92ab60fc429a010b8aa159d7fc1ad6cd22fec04f4fdd165e443d5a4f2fa478de1aeb166509aec8490cda65acc4671ee4ffcd8c5fd68956ac20756945be0c13528d76c82fac90701c026a51d6dc59c4a12e0265303d25acbe7788198b71"}, 0x113) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x100, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x3, 0x2, 0x8000, 0x5, r3}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'team_slave_0\x00', 0x102}) [ 147.295286] binder_alloc: binder_alloc_mmap_handler: 9265 20001000-20004000 already mapped failed -16 [ 147.304805] binder: 9265:9296 ioctl c0306201 0 returned -14 [ 147.306119] binder: BINDER_SET_CONTEXT_MGR already set [ 147.306126] binder: 9265:9314 ioctl 40046207 0 returned -16 [ 147.306450] binder_alloc: 9265: binder_alloc_buf, no vma [ 147.306470] binder: 9265:9315 transaction failed 29189/-3, size 24-8 line 3136 [ 147.306599] binder: 9265:9315 Release 1 refcount change on invalid ref 1 ret -22 13:48:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20000000}, 0x894) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockname(r2, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@mcast1, @in=@loopback, 0x4e24, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x33, r3, r4}, {0x2a8, 0x6, 0x7, 0x861d, 0x5, 0x4c7, 0x3, 0x6}, {0x1, 0x40, 0x9, 0xff}, 0xffffffff, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d4, 0x3f}, 0x0, @in6, 0x3504, 0x0, 0x0, 0xbd2b, 0x55, 0x7, 0x200}}, 0xe8) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)="1b47309ed2ebbbdbb28c819f956eb7334662c2e0e5ae0e4e731a9358f5ccbf29544ebb0947f07cb4694e4ba36d2dc5d6947f056767dcd1aa02e3d9f5119fad6a859a580a34f2a21e1c9d45e5a5ce8cf6e7529b007611433fe3c90c1ccbc5cfcb170bac88e9ebb8c5e9f6ce1ce5264787116e261ab4fac2539aaca4127c332327368b67baf4287b4c", 0x88}, {&(0x7f0000000280)="54334c1fe47d35c96a7e56756680a22bc0fcad2d1d80b7ed14010c03ffa36ee9b1ff802833133ac0fbce77937cac0394e2792f5986b04ba62916e7", 0x3b}, {&(0x7f0000000a00)="51a87cd6a5a81748418ece446f26a491e62f11e54470e531bd92bfd35787dffd247e0dd3505142ed3ac345211fbe9b59bc2fd6d26116764f6ef112c2b8a5bfae4e71f1a01a2f185b3e8c3429254e89333fc69ec086ccc3823f5dea148b3a", 0x5e}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="824cefe9b8860d57a42fb5a80c1cf46281a5e29c5a8aa959e779894339dc0cbb8f22a159b9467ca5494ac85f07ff13de330b9ac27627c260da1c5923e83801e1b10570fd6c62f1ee029ccfe927d749b9b127b85d71f94e35f277572e6755a2c7ef43b76e64234a0a40a85ca86bf2c0366d18a686fb0081414585cc73f3513bc1066ef2684cc9b7920f55", 0x8a}, {&(0x7f0000001b40)="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", 0x1000}], 0x6, &(0x7f0000002b40)=[{0x98, 0x18d, 0x1f, "d9fb3ca671465f2ebd0abf72e31494c003307235601905945642d2363f9248ec3a1b6c45fb0993b73b46f7afec321b4d16d7d9178ce7d9dd3427b656a7c0872b9f90e78a4f9c6dda2a509d10e2f981e5dc572aea5ae54f71a8f9ee299b3e14c507eac64e993482b3e68184118d3abd1709265616e80ea52782e54a4a90b22a965bfdefc27e8abc1f7636fa90"}, {0xc8, 0x88, 0x1ff, "62f0b5061acb706db0d555d4d34edb85c6a74b12af3ae884056a60f4b4d2f83c1bdfd5987332618a5a80c115a9b4b45762cc5dc2d6bf18f918e9efd4114fab27a6f0cb03ddf3f56c29134dcce2d070d1233275606a2711f8d4ac7ebbb64cfdb6163626bc1b1b15d0575f56ec010adaacbe7ba04e8f830312f89b8e9aaf4a2a49ed83802a7d1309962adea85379abd4c619d5a15192e13bfc0eb37aee6f012e345194e9b42ff838db51845c249526964905e21075a820883aad"}, {0xfc, 0x11f, 0x1f4, "6e53547dfa6223eb01a287bbce098c5df3ded2628da2bd98bf35d886989f451a4283bf4643dc5a45f33ed3983065d94028c4e02e77a5ba6783db5b05df8e8fa61f1b412ff826d93e668c28d9d66dc2110b62e09ba3c766103c5058afb114051f652467692afc333c32595744a9c1f4bb5cc409050ba7cc5358fab5fb88c89375978e0920b762e5d3fda0d799d56c27afb9c8c02657d6e599ed36504e2b1ddc33f9fcfd5e92e0f2c3adb43574551e05660ad97f666ac9faeebdf2d822eb893ac648dab97b01354b5555f0f167fa307aad6480e5b2a3322f4676ddd25697f9ff7c7074675dfe90f5a00317d58d4f"}, {0x20, 0x1, 0x2, "a8d2cf5a51836f7b55938db45173d01d1bf86c3f"}, {0xf4, 0x10d, 0x2, "9c6a347e9031fcac1a720950840de011eeb0a47a97b04c1db163cdc7fc71ea434772e36d42d043db40725ab577500bbd621353fce551dec0aa7788887ecfba5a56f5ff109f8c00c0ab8cbcef4623999c9eb3adedbd27245ffed733fa4f69f5d691ff85f923feb0e414641ff8ef4c4037abd60ce652b4141c6e5d797e9a8f62ff76d18cb7b9a74c7c5c607cb83a5ef4b0442cc236da4dbf2e8c6a0af374a62b5e87b813a1086c61688cd7227cc83dc9f2787f53b9cf000d9dffc9dc553da43cd026a5158218372660c38b2ca5db178b92dd8650b0eafcc2db886ccd20bb978b8937b55de6e1"}, {0xa0, 0x100, 0x2, "3512bd2aafa3438119859b70f3fc7f10a1bee79eafc66f721714d8ec7c39f4ae05e9e2aa1dae6cff322be16c06f304b30518ed3f34009f2cd7e266b646de3da491727ef4080b564cf484998a467487b3301bd74d998bdbdd1ff0020bc175f6d1233854b819eb114214bb8eb41919e225f5fb29407146adf2ffaaf89e1d4e3cd2293c196e5acbed62d248147a3d6021b32d6eaf"}, {0xc4, 0x11f, 0x2, "d192f79cabca1e45d02652ca228ec49c3e90540c92d2732ba66fdfa16f2958980e948884eb50d362c4a6124dcbded98c46cefe204ba711cab50826c85c51ecccad5d87888ae980b80ec0362fb2db5fa4d8b1eab36ce99d214c1106a6480019b895e91c18a7219395d68247a051318283129c7d86259e61355a3c7125abba4559ca1cbf1dea051b60647f0e0867299d7493b88d14da632549d289c2db6b8363781b63177d35d503b60164323e124a904c4fc387939ddb"}], 0x4d4}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf5a704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8e2412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x15, 0x0) 13:48:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "49306b943729cb98b580cad462ec26b1f59d029174995540e4618f34c0c96de6d9f95207bf4d84c587ccf5fbc9a905cf4c714001bb184e971c3452aa8c6662e1cd76dcb17029c84084b3195bd610120506050d129f756bc9fa4b479b23fd12ba40abbaf1c1003d02044a41f5db460ef2ad3a8d30494cbb9b132f71c485165157a51fa006434e8abe579fbb0295"}, 0x91) 13:48:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xd, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYPTR64, @ANYRES64, @ANYRESOCT, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="a9014689ffb8b9e4609cbb5ec68061856f20a39cbd8c2a741d9b688d1c66dd094578598a7bed3f281fa86d4891120311d69c931943fc489254fe6d45d9568112df0e5f77507c953b367bbcd043efdd541c62a5580484e2a17ef4164b7cda72d78c8451a1362638f3ce453b77cdad64587a994a8d6da5c5992e88c0c9c2f13f7a5f6f2987133d8c640ee2043ec5b62ea7755acb6842290938b77810524c2c06fdebafac50f98fa0bceb992f08a745d1651e1487f727f728c6391e6edd84a03b2b7ed71dc3c4ceee42ec6d29d38519f1fc536b8ebae1d2241eb04d5604d293d4f7", @ANYRESOCT, @ANYBLOB="dacc333b800483ac5eabec41a320a2d62a026ec1697ccb593b7cb36d43b04b7131ef", @ANYPTR, @ANYRES16, @ANYRES64, @ANYRES64], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYBLOB="84dc770b59da20818b586c4d7320804b69a9eb13375af5bef11fcf025d85eb78217e2d247545292a4f6e41826a6e98e7bd4dde33ca986a556760224dc9896fcd11a2b2672d32d59284a8cef3a37b2674c0e60550ddbf7babb8a238c16467a0ab7c90cdc4b39a02c487e93d57f8f022f3a2b2a46df04158026e", @ANYPTR64], @ANYRESHEX, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX, @ANYPTR, @ANYPTR, @ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRES32, @ANYBLOB="1663399434164c55addcac9e35d967e4f0928e33932d63c89e27af7798d90836e68bf488170b7038dc36b79fbe68266cb74a78b82f894ad313e04bb3a00c16f85d0ed4f8b9b85e28b8de18ed75fc27e79c8ea8de95ad432525b8c2964b1cbceaf00a478a658970f80ca12d3d68dfb939c0da3a468a53bff38f6f52f0d460d2bd0be95821df686f9dbac0408df832e5e332051f4770b34e26fa67ca0b544684ce3fb83ab90df225ec4d"], @ANYRES64, @ANYRES16], @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES16], 0x0, 0xb, 0xc3, &(0x7f0000000000)=""/195, 0x4000002000, 0x40000000000000, [], 0x0, 0xa}, 0x48) 13:48:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x5, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) 13:48:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x100, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x2010, r0, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={r2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000040)={0x8, 0x100}) 13:48:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x12) accept4(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, &(0x7f00000000c0)=0x80, 0x80800) [ 147.306907] binder: send failed reply for transaction 282 to 9265:9269 [ 147.310877] binder: undelivered TRANSACTION_COMPLETE [ 147.310884] binder: undelivered TRANSACTION_ERROR: 29189 [ 147.381817] binder: 9326:9329 ioctl c0306201 0 returned -14 13:48:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000900000025000000000000009500000056005d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6917b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220f09f8e7edf472d8f63925f842042bfb6283b5dd77afeed48cf5db6c5612a1385af"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0xfffffffffffffea0) 13:48:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xc38f) 13:48:27 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xfffffffffffffffe, 0x2000000000000176, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0, 0x5, 0x8a, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], r0, 0x2}, 0x3e) r2 = dup(r1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000)="6fcac49b7e4c9370fd499de133d96dfc69e427aef2e2b9b4c8a2dda406ad87fc63a63d88ab76aab4732c1de8c5607d84321de203c93151bde2952d80849c365d08878661118e7261fe8b74a74a70a7cff6a210c86c6c8a3e004c80998ba92e81aae5a0b9d389878fd3f8fb389aa26002be62f297a36f15e766b094935bb932e04b7a07ce3fb8f5089389fe91ab72d21258020aa34900ac2aab4195cc44cd867beebdaef9d4c399a6171904d7c7fe13b58653f1750b4da5d9830d75e4cffc3e", &(0x7f00000000c0)=""/106}, 0x18) [ 147.398247] binder_alloc: 9326: binder_alloc_buf size 576460752303423488 failed, no address space 13:48:27 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@empty, @dev, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @empty, @empty}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 1: prctl$PR_GET_TIMERSLACK(0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f0000000000)=""/195, 0x4000000000}, 0x48) [ 147.407841] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=9322 comm=syz-executor5 [ 147.425515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=9335 comm=syz-executor5 [ 147.451804] binder: 9326:9350 Release 1 refcount change on invalid ref 1 ret -22 [ 147.512660] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 147.522163] binder: 9326:9329 transaction failed 29201/-28, size 576460752303423488-0 line 3136 [ 147.534243] binder_alloc: binder_alloc_mmap_handler: 9326 20ffc000-20fff000 already mapped failed -16 [ 147.544450] binder: BINDER_SET_CONTEXT_MGR already set 13:48:27 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) timerfd_create(0x9, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) r3 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000bb5d6231b63e4fd700000000000000000000000000000000000000000000000000000000001800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00ffff49478e2b2e"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000094000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r4 = geteuid() r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r5, 0x0, 0x2f, &(0x7f00000000c0)={@rand_addr, @remote, @dev}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000002c0)={0x40, 0x800, 0x1, 0x0, 0x0, [{r3, 0x0, 0x1335c216}]}) fchown(r0, r4, r6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:27 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) fallocate(r0, 0x40, 0x1ff, 0x101) 13:48:27 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x81, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9fda795fa6aee37460f1a3eb067413c331cec8bcf218fe596d8a922a1d8502d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e329fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f9fe989b8a6b4d1977870a8ea41b680f03b2a6322206f2ec6350f67d05e5bbbb5022c796f00a2a37eaa46cdf58d65806f8955c9bb628160774a96f9dbcabc32c38d0ab68319fdeedc86b47ffbf478712b89c83433"], 0x0, 0x6, 0xffffffffffffff4a, &(0x7f000000cf3d)=""/195, 0x20000000040efd, 0x0, [], r0}, 0x48) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000005c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000100)={0x24, 0x25, 0x100, 0x70bd29, 0x25dfdbfc, "", [@generic="21799e9acaa2373d715bde3bb42772", @typed={0x4, 0x3b}]}, 0x24}, {&(0x7f0000000280)={0x4c, 0x21, 0xa00, 0x70bd2b, 0x25dfdbff, "", [@typed={0x4, 0x77}, @typed={0x8, 0x26, @u32=0xffff}, @typed={0x20, 0x3c, @str='ppp1cgroup^--+%vmnet1em0)%\x00'}, @typed={0x10, 0x1b, @str='vmnet0$/(\x00'}]}, 0x4c}, {&(0x7f0000000140)={0x38, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, "", [@generic="bc837f3eea114f979cd6c4da7ce05a56e0b8128bbdbc89f967f2187bf67adc", @typed={0x8, 0xa, @pid=r3}]}, 0x38}], 0x3, &(0x7f0000000540)=[@rights={0x14, 0x1, 0x1, [r1, r1]}, @cred={0x18, 0x1, 0x2, r4, r5, r6}, @rights={0x34, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1, r1, r1]}, @rights={0x10, 0x1, 0x1, [r1]}], 0x70, 0x40}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000000)={{0x3c, @empty, 0x4e24, 0x1, 'dh\x00', 0x2, 0x81, 0x1000000005b}, {@loopback, 0x4e24, 0x2, 0xf36, 0x2, 0x9}}, 0x44) 13:48:27 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x402, 0x1c5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x438, 0x21c, 0xe0, 0x438, 0x34c, 0x53c, 0x53c, 0x53c, 0x53c, 0x53c, 0x6, &(0x7f0000000040), {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'yam0\x00', 'syz_tun\x00', {}, {0xff}, 0x16, 0x3, 0x2}, 0x0, 0xbc, 0xe0, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0xb}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x1, 0x62}}}, {{@uncond, 0x0, 0xe0, 0x13c, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x1b, 0xbe8, 0x9}}, @inet=@rpfilter={0x24, 'rpfilter\x00'}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x10000, 0x1, [0x30, 0x2d, 0x13, 0x3d, 0x27, 0x2c, 0xf, 0x1a, 0x21, 0x2, 0x3c, 0x15, 0x16, 0x13, 0x40, 0x31], 0x0, 0x1, 0x1f}}}, {{@uncond, 0x0, 0x10c, 0x130, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x6, 0x4, 0x0, 0x2}}, @common=@inet=@set2={0x24, 'set\x00', 0x2, {{0x0, 0x1, 0x1}}}]}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xbc, 0xec, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x9}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x20, 0x0, @local, 0x4e22}}}, {{@ip={@multicast2, @rand_addr=0x3, 0x9e400130de25f61d, 0xff, 'syzkaller0\x00', 'ip6tnl0\x00', {}, {0xff}, 0xff, 0x2, 0x26}, 0x0, 0xe0, 0x104, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x24, 'rpfilter\x00'}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x31, 0x4, 0x3}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x62c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f315b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x383, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0xfffffffffffffffe, [], 0x0, 0x4}, 0x48) 13:48:27 executing program 1: r0 = socket(0x7, 0x7, 0x20) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x3, 0x6, 0x9, 0x8f, 0x40, 0x2ef, 0x2400000, 0xfff, 0x38, 0x2, 0x200, 0x10000}, [{0x7474e557, 0x7, 0x2f6, 0x456fcb57, 0x0, 0x93d5, 0x8, 0x8}], "1349f32fbac114d6166cb09d7bd18005d4c2fb04fdaa6dfe802ec4d908b2550e96733f55cd4652497772352723aede349f2a9a6762d7db318c22050308711fefe9d7a485324ec9bffeab420acff4ecbfa4317cb5f4055244986d7d79eb00011ac646e62b595d398987657289d0f0d3efe85b470ed6101e556e8c93e31ba79c5c00f08ef4a205fbb48db446f2062fd962bb85e5ec09c82df4360d004dfae6fdcfca83242f9b1b92a5e9d6c879884b549c72daa69b303ae0ba0beb77213d943e27ff5530c518a74d435c24fd7dbe43b49b1a76104791d6aa5dd8834c98cc044ea2be3180cbbb7574e4581f39bafc9c04d12aa49d769b5ae81ed7", [[], [], [], [], [], [], []]}, 0x871) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@dev, @dev}, &(0x7f0000000040)=0xc) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf21895f45c81b586fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6d438c66137d6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) fstat(r0, &(0x7f0000000180)) 13:48:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ip6gre0\x00', 0x102}) 13:48:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 147.544457] binder: 9326:9329 ioctl c0306201 0 returned -14 [ 147.555709] binder: 9326:9350 ioctl 40046207 0 returned -16 [ 147.561530] binder_alloc: 9326: binder_alloc_buf, no vma [ 147.567044] binder: 9326:9350 transaction failed 29189/-3, size 576460752303423488-0 line 3136 [ 147.575923] binder: 9326:9329 Release 1 refcount change on invalid ref 1 ret -22 13:48:27 executing program 2: pipe2(&(0x7f00000000c0), 0x800) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0x1c2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x20000046, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5870}, [@alu={0x7, 0xa4d9, 0xd, 0x5, 0x6, 0xffffffffffffffff}, @generic={0xff, 0x4, 0xb4, 0x200, 0x2}]}, &(0x7f0000000440)='{y]s\x8d4\xfe\x1f\x80\x9e\x1f\xc9EO\x01&\x99aller\b', 0x1, 0x7e, &(0x7f00000001c0)=""/126, 0x41f00, 0x1, [], r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f267ece1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) socket$inet(0x2, 0x4, 0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xfffffcb3, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4008800) 13:48:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40000, 0x0) lseek(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5706d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 1: r0 = memfd_create(&(0x7f0000000040)='{\r(\x00', 0x7) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0x20, 0x4) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) setns(r1, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x3, 0x7, 0x0, 0x3, 0x3, 0xce, 0x208, 0x40, 0x14f, 0x80, 0x8, 0x38, 0x2, 0xfffffffffffff001, 0x2, 0x7}, [{0x5, 0x7, 0x101, 0x5, 0x8000, 0x80000000, 0xd55e, 0x7}], "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", [[], [], [], []]}, 0x1478) 13:48:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x8, 0x0, 0x1f, &(0x7f0000000140)=""/73, 0x49}}], 0x8000189, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) r4 = getpgid(r3) sched_setscheduler(r4, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(0x0, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x31, 0x3, 0x1}}, 0x14) pread64(0xffffffffffffffff, &(0x7f0000001880)=""/229, 0xe5, 0x0) pwritev(r2, &(0x7f0000001400), 0x31f, 0x0) r7 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xbd, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc7, 0x90000) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/54) 13:48:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000090000002500800000000000950000004e2b00008f717f5e71ddcc2f7aea3b6bc96c5d2c9f55dc31b532138f9d215b5fbf5576f922629f67a6aee37460f1a3eb067493c331cec8bcf218fe5902d67a7636903ebc87a288eed2d2cd2ca3584cf58704be6925b8a54f0600229fe5606d7039dca9f2e1629c7067e060844082357e71ccf0c072dec33ffa197428cc92427d074dbe6f5f469ea28e"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x82100, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000240)=""/87) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x302, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) 13:48:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b482faa49100000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)="84b7850af87ba0b4c4dea0dacfc47c343a5bdf33367428ff9770420adf760bb95a498a51fcdb836c85088d56d82c195f0373447160e555b1b8cf2e955b24ea5b"}, 0x10) 13:48:27 executing program 4: sched_yield() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0x108, 0x9, {"0599a0255876983c3bd9c9fad1ed49a67a029f1c3fbf9e3b030319b42c12f2e05c467443806d53e3f2f9fc8b1f443d8f25018ef5a101e97263c8d04eb40db77f7e9af1cbae640004893b1cae90f05828837b86bd19dfb965192ab4ee20e15883cff68578e02837bc71203510ab801db8159b9d1bf21b647585020813e0e012f91c22763a1e64d4bb5a618536026ff51e8e37d7f5ce063846bae53afe9b8f4d189d199250940c2f42ec96c98bc08cb89b58b2d9c0e36c220d3c7d61a8333ad9e9d85fbb255e29c6061e431b4b1387e4b66fad2aef2df76a9813740db460ca2f58048acb650a1d574a2e507baca026"}}, {0x0, "fa28bcaafe1485d79f4f59e27558f37fa10054c78154d20c0f3eba27e8ddb8cf60b3618053bc18f5d6a0300431f8ac89153711c9b49a2f4a928cd566471721"}}, &(0x7f00000003c0)=""/4096, 0x149, 0x1000, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a2880e030000c1cd2ca3584cf587043961a57ef4be6925b8a54f9c2e229fe5606d7039dca9f2e1669c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1b67870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4100, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x30, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x410c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}]}, 0x74}, 0x1, 0x0, 0x0, 0x480c0}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 147.748960] binder: 9414:9417 ioctl c0306201 0 returned -14 13:48:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000900000025000000000000009500e10000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x7, 0xc3, &(0x7f0000000000)=""/195, 0x4000000000}, 0x48) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={'veth1_to_bridge\x00', {0x2, 0x4e20, @empty}}) 13:48:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0x13c, 0x0, 0x13c, 0x13c, 0x26c, 0x26c, 0x26c, 0x26c, 0x26c, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf8, 0x13c, 0x0, {}, [@common=@inet=@dccp={0x30, 'dccp\x00', 0x0, {0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x0, 0x1, 0x400, 0x400000000000}}]}, @common=@inet=@TEE={0x44, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'bridge_slave_1\x00', 0x1c00}}}, {{@uncond, 0x0, 0x110, 0x130, 0x0, {}, [@common=@icmp6={0x24, 'icmp6\x00', 0x0, {0x1f, 0x4e33bec0, 0x1}}, @inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0xa}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x394) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x104) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:27 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0xffffffffffffffea) 13:48:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f0000000000)=""/195, 0x4000000000, 0xffffffffffffffff}, 0x48) [ 148.520259] binder_alloc: binder_alloc_mmap_handler: 9414 20001000-20004000 already mapped failed -16 [ 148.529818] binder: 9414:9452 ioctl c0306201 0 returned -14 [ 148.531020] binder: BINDER_SET_CONTEXT_MGR already set [ 148.531027] binder: 9414:9465 ioctl 40046207 0 returned -16 [ 148.531383] binder_alloc: 9414: binder_alloc_buf, no vma [ 148.531403] binder: 9414:9466 transaction failed 29189/-3, size 24-8 line 3136 [ 148.531813] binder: send failed reply for transaction 290 to 9414:9417 13:48:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x2) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044001000000330c66534970e9982c2a148d1291fd67c241cb8212cc40b60004db60e440f06bde08ac32fd6cb3b9c61bc7f03512f4f99871a125eddc64e0dd8108af85deb2ef1d3272d6e6a9d7cd5d54000000000000"], 0x0, 0x0, 0x0}) 13:48:28 executing program 1: 13:48:28 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f00072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000001c0)='self^\x00'}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/relabel\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000005380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=@bridge_setlink={0x4eb0, 0x13, 0x20, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_VFINFO_LIST={0x4e70, 0x16, [{0x15ac, 0x1, [@nested={0x1d4, 0x94, [@generic="290ef9c02d3d1dc4d3abe401519b32396f8b2a65525ff290a924", @generic="ded3341799abf3e424de90e6c82c07f9f3d06964f60e889e09ef4ef05e92cacc679acbca7445237f52a1208f55cee3c54262d5b3225eb8c4b08e2cd955946a9e39f22766282d4d8b897e18b448b9733c9f08c2f5beb6f9ac52f017299c44e99afe4ddd978526b16ff5880d609690e539810bd13a9ba66ffd80240d210ff4c368f85f5beabde16912b9f8cc7ccf8846a44bed1d9602c223e02a38327124686e9fe3d0c8a62324a6cc825f07c3936b8d2c4dd417c19f7d6a672753840ef92e81c245b996d54a5b17aa713ea290bca5e2e3", @generic="871e6dc50b510370201e0353e7464567c650f581084af057b849b2fe15185e9019642758aede5ddb887a0f8338d8b30914c100916351b286589d23b007d26d621591a5af0a9354447494f5d8acbc9ea9a686b22a4fba17d10b44c4137dc5836c4729fa4f076a3c74a5d6810bec37abcfbbfd29", @generic="a2435b9b37454668b8785e4c59f161ec1741baf0dba1264eb9d08102af1fc23703558237bead6fdff123d4612303fb9c043ddbef9350f33c271ef137386e20718a1aee2a2edaf87869b1e7064338ef7ee42b4dde4273b438f61847bb49cdfcd636328a88d5794252a24db44682ac784600"]}, @generic="e8b33d1cf0988ef4a0528798d9e5b9f5c94ec9ccedba1a8ade34836f8e3b5ca98de4dfda27e9dffe1a7ee442f1ea0a3b797b8ab647078fb9e937d9a66bbe71378845801a6ecd871ba754987da278b56f98ad42d434863b5098acfbd14523a956691652270d43ad", @generic="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", @typed={0x6c, 0x47, @binary="4ef6eab56792acd3c5cc99875588245c1dfe109607aed13c1845455e441a04ed9bc2e2aaaf0c44d2c0b415e10a2b281cc7c16e7fbc8d8d3eda150f9616f5795fa01b579c3fabbd619c1fc49a258eebc3db3e07552fcfd3e9647393017b5843dccab11f5f1a"}, @nested={0x168, 0x8f, [@typed={0xc, 0x84, @str='trusted\x00'}, @generic="9f030a34873c1a7d28b557726bd4b23209a99769bd7395a8b66f429ed120877ce4dc4668757ba961cb0958200d457d6aff11cdfd56e2eaa37fd925d7286ee1ed281951855a1a07f429f7507e92486706951218736669bcc2dfa7740eb25e6bd73153d494b50ddc6fc73e8dcee16bbb9ce25e92e074fd1ca9501f921a94e805f26309b0e8", @generic="b811b9222d5f4e0a3b9bbbba0218cb23ef05658e6b012b4c9c510984c40296aae971b46e0af2f7ef6f216d20b3f2f7b134853bf9dea533ff19ae14b111352d8df8537b3119d8563b410188f294d75e5aaaa27663babb73bd0e4fefa2682ba5a78c2e1102a520e3cdcdc5bf5811d20cd1bedb5247ad79309db9b23f635d590e7d163027f7fc26dff8d61b7fc8a5e15924be5fe22e805a2dca9f0630074cceec44d92ea53a30281c6fd46c97700b979ba1c0108bd2b6cea86390faba9494c518eb3c5bbebf72c5e5c8e2", @typed={0x8, 0x3a, @pid=r2}]}, @typed={0x8, 0x5a, @u32=0x4}, @nested={0x190, 0x68, [@generic="81b85025034b118bcfb1f7a749d05963", @typed={0x64, 0x49, @binary="6f4da456725d98ee0c02767998fbc28fdc7d429fce4e9463c2ddcbbc6132d914f8bdd57f79903353b952092f2417a0b40043cda5bc2d5ef597c54835e1e7672b92961327d20f8083f930a190f773a8fc690a2d6f6f0feb0f44981a2b4dff"}, @typed={0x8, 0x6e, @ipv4=@loopback}, @generic="88a102c0df51a37f8f6728b8a559ba8174aee219e79bbcf145378d121b59577637d664e58d17865a7ea6c8a5e9188e7a44375d7b9dbf2d3da2393cab805f4b9f1eb7d025b3903044fbaa71ea246b7528a045833dfe9eb8f465da0e48026a68e593a3552e7b5e111de9", @typed={0x8, 0x71, @str='\x00'}, @typed={0x6c, 0x80, @binary="138130aaf1564fb41adad95e6b80b6109c9caf4e8a3474d83c5e583c60b527f4d74dd85d446564769ba7f0efe155129889910b612c4b9e5cea14dc01f3cf990e1e91f6e7e7f06784130c48729f0f563568c1058b9ed0a993ec38d7c247fb8a2851e5c95219f44ba7"}, @typed={0x14, 0x37, @ipv6=@loopback}, @typed={0x8, 0x75, @ipv4=@broadcast}, @generic="5ce0e923b01102d01ac2e898137e4958d8ab0928893c94"]}]}, {0x14d4, 0x1, [@nested={0x13ec, 0x21, [@typed={0x8, 0x36, @uid=r3}, @generic="5ae069ccaec23f37bafcbe39623c63f7677d1dad6202232aee3f40475a1f794e250af7308addf6726b838ba924a287de1eb58bfe9f91bb14cfe0eb6200ee40d985e7ad3985af5339bef34c69703ad1f6a0f692ad39ae9bce0bf3abb970", @typed={0x8, 0x1, @uid=r4}, @generic="303174667570cf97fbd01e222997b063a53f3a3f2dcef51a3dd995589e36db9a8d756b96c44ce40650e3d3bb7706d4d65308a3d6cf01e83d64324bbeb09a26e65f694e5cf733e214002aabfb13b9867b551028c16798a11a2ae2ee7bd204ae64570d8968f163f8dee2923ed3f4279d4b558926fa8df041622947d103aae1da2e402af0943c3fb9930cd863a521fff4e8b69ab077a7ba07c146a3e20a15efee525411c817cc6da7290ba948a7d47d23b57d571d3c7a07ce6196a130950835b7aeacfaf0692e9af2fbeab461", @typed={0xc, 0x22, @binary="141879741c48"}, @generic="be111e12c6d9933d99140f5a536070e52def28d76ec90cae2ce765f0b3aaf2c2b754b27bd6c45a5bea5e7bcd7244385111b46f73052e6435710a19218d917d4307fa6db59d3eecde304ae0ebf264c13b0550cc607312bd6d4e87d451f2df195506fdf9f925841bc217c29dcc74c137c296adf383d0d070416d3d8b60220791d354b2558d25de33480a1ac4438e6a8d3f70b83ad4074e4d0cbbe3860e6c03452f423d70176212044eab9be6e15adf499b33ccc8c03dd02bf16ace1f5e2f", @generic="b208b4a5c24f8851c1b6726f3fe14c394de085e970dc00a4041dc1a587bda0d3c77f2738ff63a0e2e0e0fa0940125e41ea40f3627d057a6b69f810188802109218487ebf661daf2873285dc379a379b9896cd45e4a81d55176fc517252bbdd8e9290f24c015c084cf58607de3fd9b5e9f24131a9ee4247e6050e0002ab91fac44fb0452a88d40f509772f959fa12782a7d8da9c0ee5c313848a184b2e1935a53e93ffe682f7f056926bfdb33a396df9de2ce438d1085c40853bfc96cdc248d68f40a1469f4a0676c128b60b4f8d26b36138ef1825c1bf87122a0", @typed={0x104, 0x43, @binary="21ec559df08e9efe1441d99937e51340184b4f6880f75a977c80c6a9048228c0f420e42c1c15ca3218b6c5a6eadaca1b3d6469b233af314573ed46a347d649774c68bae23742f0b5cc2509f65dee7ab42941c6ca29b2e3a5eb1b409e6cdad430a137988743cd9d31187cebc72dc9bf26796edef6cc553273b367f5cdcb5283a0cbf1aae1fbbfa325f075715ae5b0cd6d54cfbe9fee261c1014f68762e4e3ab6043e03e329a66d8fb440a245e32673773a28ee927c90c8f41f24ad0373c9c9f709a8299cb4d58fbd8125279884312166d323c2d32518bb08ede955997f2954a19516be1ae66ce8c3cb115769e1c637d199859d5d9772baced457516723181"}, @generic="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", @typed={0x8, 0x8c, @pid=r5}]}, @typed={0x8, 0x74, @uid=r6}, @generic="db3920889fb4d46ef743ae2594ba071f8cacbaa3600b30ea159be83500437c352bee0cd22fb9e03e3f886a71638bbd95f23b9294009ebf1c30318bef203f43d0607d06a466ed4c37f5719a19a990c399ccd18b429ff7214ec829e26f25985614e38dd9f86f5eb2c62adc8095bbcfe70f5f7057c9d28f14c46f7e25960bc79bb302595aee6e067145c70fc534f42c7437a5a61496325536248ee7c59e60057972e263ffd172d9e2239ebe009c73fb3b7316f628cdcc034bbe07324f4674b5631372781ad62f0253cec4e79451256574897f2256c8a042bc5814af39"]}, {0x2144, 0x1, [@nested={0x2018, 0x5c, [@typed={0x8, 0x76, @ipv4=@remote}, @typed={0x4, 0x59}, @generic="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", @generic="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", @typed={0x8, 0x4b, @fd=r7}]}, @typed={0x14, 0x71, @ipv6=@mcast2}, @nested={0x60, 0x58, [@typed={0xc, 0x3e, @u64=0xf}, @generic="6f071ff1486bd96832edcea803ae54f4e43f38e5ae14659a1b1e3d363cb39567778cc5e9de2d16113f7e9d76150bf9268da871c9bda31dd775ed8c4fbf3557bfb63e3040cba13c1b9647", @typed={0x4, 0x21}]}, @nested={0x24, 0x41, [@generic="ea47a1aa0e5e9b953e91fd849b1fcfea75fb23d7cd1b22fb", @typed={0x8, 0x17, @u32=0x8}]}, @typed={0x8, 0x1a, @u32=0x7}, @generic="90b24bb02daaaf6086fd87e9c355ae75cda0d914426ead80bb2f8f46964cd0c0c9cefc204a1a657a04b35515ebfaf1ffe5698ec1eff8d6ff55f168de6ccac6c3c7110d422d70c9de8ce1f69ce47da5771a3d12f5bee22429d6323f3ae1c2aa14bd456f6a906f23223a69235ce67394342141b8c644d28dc352ca9fc697e07b772be92bfc5ea919"]}, {0x1f4, 0x1, [@typed={0xc, 0x8c, @u64=0xb6}, @typed={0x14, 0x40, @ipv6=@dev={0xfe, 0x80, [], 0x11}}, @nested={0xcc, 0x4a, [@typed={0x8, 0x18, @fd=r8}, @typed={0xc, 0x8, @u64=0x2}, @typed={0xb4, 0x0, @binary="f5a8a1c3ed446dad52f6c704144c1851ac113aa3291dd9994f08087dbf87608dca6c80b2c4cfb672d8de8b58f40f152a2478de2e083522fcae82da8cbdc805f13f3b12ef6ad1863a62bdc433f8afe61ea8b06a7b512149d03d351c043b9232959143504229fd1f1eaa95e838a148adba616dcdb6d43840b71256af2095662a9b02bf355c708b7743fab8d367a7e9d3355a8128d212840e71203a57feb412d3c5aae4971c97eae6f502d7fd73f5dc8c56"}]}, @generic="9489a0d93db6042a4cafafdfb404f05ab7b68c91759eaf04d8bbecdc3068498dabf6f594b81fca8263e40aaf48997b970a07271cb7be848327378978b774b6cf8b1383cf449326979a77f336607c22617ac504e3c370900c6320957c09176c3566accb7283bf9275647a2a5712773abaac6ce7c0f671c5f594cc7ebcb84d81abb0f39071f38e6e25d10809ff998cb1f204108c263b877236a49b7eb04d0a2a82b39a783022d0a14ec1b893", @typed={0x48, 0x4d, @str='nodeveth0ppp0!,cgroup(GPLlo^wlan1louser:mime_typesecurityvboxnet1\x00'}, @generic="6f695f54ce3aee377748ce774ec95d3aad"]}, {0xb4, 0x1, [@typed={0x14, 0x19, @ipv6=@mcast1}, @nested={0x70, 0x57, [@generic="791f78bd40e5e7f69b34320890dcc1f9969d1105069b88c78db99fa9756439edf3532ed283039ef4f07bbb51d9ff3c4a6c0a173c093f559622f3ff466f7c5193f8200d5ea559b987a4bb743eea4ca0df44d4833d7c80c042412e7211d98aae873419525be5fe63e142171666"]}, @nested={0x1c, 0xe, [@generic="5dbb659d593e155914913dbbce9148d36e629c29ac"]}, @typed={0x8, 0x6a, @ipv4=@empty}, @generic="25821898a5630d"]}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IF_NETNSID={0x8}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x4}]}, 0x4eb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f46280392e4e28789b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) 13:48:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe53332eb5fa385d70762b5418a37606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a63222092a47247dd3c4929ef619a431ab21149f2d76aa9a8fb7c6e76271a3ac923de55524318c6854b619b3f51"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 148.535949] binder: undelivered TRANSACTION_COMPLETE [ 148.535955] binder: undelivered TRANSACTION_ERROR: 29189 13:48:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x4000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64MMAP\x00\b=J\x1c\x0f\xd6\xf2\x00\xe9f\xa3\x12\xcbM\xb93\xa8\xd9\xc6T\xe6#\x1b\xcd\xc5\xc5D\xc6\xc49\xf4!\x9e\xba\xcc\x8b\xdf\xbc:\xf7O\xa2F\x98\xda\x9b83+u\xc7\xe7\xf8-\xc9|\xf5\x1b\t\xc3X\x00X\xb3\r\xd8\x99&\x116C\xd1\xe9 l\xf2\'X~\xf7G\x16\xdf\b:\x1e7\x1d\xd8\x03\x18\x7f^\x81um\x05\xa7\xa6\xc0\x88\x88y\x86\xfd\x029&V\xec\xdb\xd5\x8a\x193j#Gs\xf2tV\xbft\xe0C\xf3\x1a\xae\x99{c\x8f(\xe8\xa6\xf8i\xdb\xa0A\xa9\x93\x986\fC:\x99h\xa2\xd8\x8e\x06\xfe\xd3\xbb%\xdd\xa8\xdb\xd99\x02\\\xba\x88\x950x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10801, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x60010000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x304, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x5}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000280)=0x2) timer_getoverrun(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], 0x0, 0xd}, 0x48) [ 148.613433] binder: 9472:9478 ioctl c0306201 0 returned -14 [ 148.624395] binder: 9472:9478 ioctl c0306201 20000440 returned -11 [ 148.642323] binder_alloc: binder_alloc_mmap_handler: 9472 20001000-20004000 already mapped failed -16 [ 148.663714] binder: 9472:9478 ioctl c0306201 0 returned -14 [ 148.669747] binder: BINDER_SET_CONTEXT_MGR already set [ 148.687593] binder: 9472:9488 ioctl 40046207 0 returned -16 13:48:28 executing program 4: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8000, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000140)={0x2a, 0x29, 0x2, {0x400, [{{0x0, 0x4, 0x3}, 0x8, 0xffffffffffffffff, 0x7, './file0'}]}}, 0x2a) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bc42f934dcb4db49f218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 0: getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8001, 0x9}, {0x6, 0x17a80302}], r0}, 0x18, 0x3) lsetxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=@v2={0x7, 0x2, 0xd, 0x7fffffff, 0xf3, "d3d65ca0a4cae5b73f8ba6420f3257002cca69fe7045352b5cee036f221c66aee81632ba83badb76a8f5d95f4845e88e2701bc9e7e3cff1cd0e7c251c64e30c51927b6c6b54f7fb8b85aca31964f89fe844462260f03d2455306dbdcc708bf1a30f146df57e35fb3bfe3792c3712e9716e88f3b76fdb7ebada813be1ddb9476caa2a68fb6e93db0502f917e837174b401d611140bde2598fe0be804e47dadbaa0c096c8833842bf2401e2c801f1f0b80308655e2abca27701f4303a5e5c485cf76fccb1470a0a1d00a2242bce5a131eef2d566496b4becacaec168e50cbb515e7cab8d071e3c6c71d7b61397cdec94c78b60ff"}, 0xfd, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a23d8457a388eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) 13:48:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x40006) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x2e, 0x26, 0x0, 0x9, 0x2, 0x80000000, 0x6, 0x16}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc8704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x138, r3, 0x500, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8540}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b92}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x36d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe00000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x788}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x40040c0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{}, {r1, r2+30000000}}, &(0x7f0000000100)) 13:48:28 executing program 2: getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x2000000000000236, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], r0}, 0x48) 13:48:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000090000002500000000000000950000c96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e048b96e29bbbf0663c33ffa197428cc92427d076f6322200000000000000000000000000000"], 0x0, 0x5, 0xe, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) get_thread_area(&(0x7f00000000c0)={0x1, 0x20001800, 0x0, 0x7f, 0x34, 0x5, 0xfffffffffffffbff, 0xfff, 0x54, 0x200}) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) get_thread_area(&(0x7f0000000100)={0x9f4, 0x1000, 0x4000, 0x7, 0x0, 0x32e, 0x6, 0x1, 0x5, 0x6}) 13:48:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x4000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0x50, &(0x7f0000001340)}, 0x10) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/binder#\x00', 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x19, 0x4, 0xe8c, [0x20000480, 0x0, 0x0, 0x200004b0, 0x200006f8], 0x0, &(0x7f0000000280), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x7, 0x10, 0x8847, 'ipddp0\x00', 'ip6tnl0\x00', 'ip_vti0\x00', 'ip6gretap0\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff], @random="fb456140217f", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xa0, 0x100, 0x148, [@mac={'mac\x00', 0xc, {{@dev={[], 0xf}}}}]}, [@snat={'snat\x00', 0xc, {{@random="1333446b2ee6", 0xfffffffffffffffd}}}, @snat={'snat\x00', 0xc, {{@local, 0xffffffffffffffff}}}]}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x1, 0x1000, 0x1}}}}, {{{0x11, 0x20, 0x681c, 'veth0\x00', 'ifb0\x00', 'veth1\x00', 'bond0\x00', @random="a5e148910470", [0xff, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@dev={[], 0x15}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0xc, {{@empty, 0x10}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x4a, 0x8, 'ip6gre0\x00', 'veth1_to_bond\x00', 'bridge_slave_0\x00', 'bcsf0\x00', @remote, [0xff], @empty, [0xff, 0x0, 0xff, 0xff], 0x194, 0x1c4, 0x1f4, [@comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0xc, {{@dev={[], 0xd}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0xc, {{@random="3348468ecad6", 0xfffffffffffffffd}}}}, {{{0xb, 0x7a, 0x4315, 'gre0\x00', 'veth1_to_team\x00', 'ip6gre0\x00', 'veth0_to_team\x00', @random="eebb4cbc11a3", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @random="89bbdade6049", [0xff, 0x0, 0xff, 0xff, 0xff], 0x978, 0x978, 0x9c0, [@u32={'u32\x00', 0x7c0, {{[{[{0x3, 0x3}, {0x6}, {0x2, 0x2}, {0x7fffffff, 0x3}, {0x4, 0x2}, {0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x1f, 0x3}, {0x200, 0x3}, {0x5, 0x3}], [{0x5, 0x1}, {0x9, 0xffffffffffff7fff}, {0x3}, {0x7, 0x5}, {0x100000001, 0x7}, {0x9, 0xff}, {0x5, 0x8001}, {0x80000000, 0x6}, {0x3, 0x81}, {0x95, 0x100000001}, {0x0, 0x3}], 0xb, 0x8}, {[{0x7f, 0x3}, {0x2e4b79b4, 0x1}, {0x2}, {0x7ac6f583}, {0x8, 0x3}, {0x8, 0x1}, {0x9}, {0x1, 0x1}, {0x3}, {0xcea, 0x3}, {0x3, 0x3}], [{0x400, 0x3f}, {0x100, 0x2c9}, {0x3, 0x7}, {0x6, 0x7}, {0xfff, 0x5}, {0x4}, {0xa, 0x7}, {0x7, 0x20}, {0x1000, 0x5}, {0x7, 0x7fffffff}, {0x0, 0x11}], 0x4, 0x3}, {[{0xdbf, 0x2}, {0xfffffffffffffffb, 0x3}, {0x6}, {0x5, 0x2}, {}, {0x7f, 0x2}, {0xffff, 0x2}, {0x859c}, {0x401, 0x3}, {0x1}, {0x4}], [{0xa8, 0x7ff}, {0xfffffffffffffff8, 0x4}, {0x3b0c80000, 0x4}, {0x5, 0x100000001}, {0x4, 0x3f}, {}, {0x9, 0x7b3}, {0x4, 0x10001}, {0xffffffff80000000, 0x6}, {0xffffffff, 0x5}, {0xff, 0x1}], 0x5}, {[{0xffffffffffffff62, 0x2}, {0x100, 0x3}, {0x7, 0x1}, {0x5, 0x2}, {0x3, 0x3}, {0x100000000, 0x3}, {0x2, 0x3}, {}, {0x1}, {0x6, 0x3}, {0x2, 0x1}], [{0x2, 0x8000}, {0x10001, 0x948c}, {0xa412, 0x81}, {0x1f, 0x200}, {0x0, 0xfffffffffffffff9}, {0x8000}, {0x2}, {0x0, 0x80000000}, {0xac00, 0x6}, {0x238a, 0x80000001}, {0x0, 0x3}], 0x7, 0x8}, {[{0x7ff}, {0x7, 0x3}, {0x1ff, 0x3}, {0x6, 0x1}, {0x30, 0x3}, {0x20, 0x2}, {0x2}, {0xc392, 0x1}, {0x7}, {0x7fff, 0x1}, {0xfff, 0x1}], [{0x9, 0xbad4}, {0xfffffffffffffff7, 0x3f}, {0x7, 0xffffffff}, {0x3, 0xaaa9}, {0x6, 0x80000000}, {0x80, 0x3}, {0x80000001, 0x8}, {0x0, 0x1f}, {0x9, 0xffffffff}, {0x40, 0x496}, {0x7040, 0x1000}], 0x5, 0x6}, {[{0x10001, 0x3}, {0x7, 0x3}, {0x7fffffff, 0x3}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0x1}, {0x8954, 0x1}, {0x7, 0x2}, {0x8000, 0x8b2b88e9250f39b3}, {0x5, 0x2}, {0x5, 0x2}], [{0x7, 0x6}, {0x1, 0x90000000}, {0x2, 0xe24d}, {0x1}, {0x2}, {0x200, 0x33380bb2}, {0x401, 0x6ff}, {0x7, 0x100000000}, {0x2, 0x6}, {0xffff, 0x100}, {0x4, 0x6}], 0x7, 0x1}, {[{0x4, 0x3}, {0x9, 0x3}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x20, 0x3}, {0x67f, 0x3}, {0x80, 0x3}, {0x7, 0x1}, {0x2}, {0xfff}], [{0x6, 0x8}, {0x7, 0x3}, {0x9, 0xa0aa}, {0x64c, 0x32f0391d}, {0x7fffffff, 0x2}, {0x0, 0xd996}, {0x8001, 0x7f}, {0x1}, {0x7, 0x1f}, {0xe60, 0x1}, {0x9, 0x1}], 0x5, 0x4}, {[{0x5, 0x1}, {0xfffffffffffffff8, 0x3}, {0x7, 0x3}, {0x9, 0x3}, {0x6, 0x3}, {0x81, 0x2}, {0x9}, {0x10000, 0x3}, {0x101}, {0x3, 0x69a97bbe57cb62fa}, {0xffffffffffffff00, 0x3}], [{0x4}, {0x2, 0x6}, {0x7f, 0x2}, {0x100000001, 0x3a46}, {0x6, 0x9}, {0x400, 0x1}, {0x9}, {0x1}, {0x100, 0x3}, {0x1, 0x20}, {0x1ff, 0x6}], 0x1, 0xa}, {[{0x5, 0x3}, {0x1}, {0x101, 0x3}, {0x1, 0x3}, {0x954, 0x3}, {0x6, 0x3}, {0x68949557}, {0xffffffff, 0x1}, {0x9, 0x3}, {0x5}, {0x1, 0x3}], [{0xfffffffffffffffc, 0x5476}, {0x2, 0xcd15}, {0x0, 0x9}, {0x7, 0x100}, {0xffffffff80000001, 0x1}, {0x40, 0x9}, {0xff, 0x6}, {0x6, 0xb4}, {0x0, 0x13c}, {0x40000, 0xffffffffffffffe1}, {0x4, 0x2}], 0x7, 0x7}, {[{0xfffffffffffffff8, 0x1}, {0x6, 0x2}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x2}, {0x1, 0x2}, {0x3f, 0x3}, {0x86, 0x3}, {0x1, 0x3}, {0x8, 0x3}, {0x2b, 0x2}], [{0x6, 0x53a}, {0x3f}, {0x7, 0x8}, {0x7, 0xd41}, {0x524c, 0x6}, {0x1}, {0x6, 0x3}, {0x0, 0x6}, {0xffffffffffffff74, 0xde73}, {0x2, 0x80000001}, {0x1ffc0000000, 0x40}], 0x5, 0xa}, {[{0x5, 0x3}, {0xfffffffffffffff9, 0x1}, {0xa7, 0x3}, {0x100000000, 0x3}, {0x0, 0x3}, {0x6bb0, 0x1}, {0x800, 0x3}, {0x4, 0x1}, {0xfffffffffffffffc, 0x1}, {0x5}, {0x2, 0x2}], [{0x7fffffff, 0x1}, {0x8, 0x512b}, {0x100, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0xc8, 0x8}, {}, {0x3, 0x5}, {0x7, 0x2}, {0x80, 0xff}, {0x1, 0x4}], 0x8, 0x1}], 0x9, 0x1}}}, @comment={'comment\x00', 0x100}]}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x0, 0x7, 0x81}}}}]}]}, 0xedc) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000001400)=""/4096) read$eventfd(r1, &(0x7f00000013c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = open$dir(0x0, 0x0, 0x4) r5 = getpgrp(0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}, 0x119) socket$inet(0x2, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0xffffff05}, 0x6) write$cgroup_pid(r4, &(0x7f0000000000)=r5, 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a607300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06810440410003079e00"], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000002440)='team\x00') accept4$packet(r3, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000024c0)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000025c0)={'team0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002600)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000002700)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002740)={{{@in6=@dev, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002880)={'team0\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000029c0)={@dev, @broadcast}, &(0x7f0000002a00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@dev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000002b40)=0xe8) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000002500)=""/167) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002b80)={{{@in=@remote, @in6=@remote}}, {{@in=@local}}}, &(0x7f0000002c80)=0xe8) [ 148.717303] binder: 9472:9488 Release 1 refcount change on invalid ref 1 ret -22 [ 148.717320] binder_alloc: 9472: binder_alloc_buf, no vma [ 148.717336] binder: 9472:9478 transaction failed 29189/-3, size 24-8 line 3136 [ 148.742153] binder: send failed reply for transaction 295 to 9472:9478 [ 148.749073] binder: undelivered TRANSACTION_COMPLETE [ 148.754201] binder: undelivered TRANSACTION_ERROR: 29189 13:48:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x13}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a4c437d}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40005}, 0x85) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 13:48:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9fd72681d70b3142fbf1a3eb067493c331cec8bcf218fe5902eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a6322200e7bc712a6ec4a3c73963e94f18f1a73055285d08bac3a6323db25c62606b8fd28f2abee256223fbc2ce22ba099d2c"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee3741af1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c5e67e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220000000000000000000000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x48) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0xfffffffffffffff4, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x5}, [@generic={0x6, 0x2, 0x5, 0x81, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x3c}, @alu={0x0, 0x0, 0xf, 0xf, 0x8, 0xffffffffffffffe0, 0x10}, @generic={0x6, 0x9, 0x0, 0x4, 0x8001}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x4b, &(0x7f0000000180)=""/75, 0x41000, 0x1, [], r1}, 0x48) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 13:48:28 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/120) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d0ae0e5d3f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220f0e0b27decd45c4dcb99dfe9f5fc24d140b9899b30584e06329945f0e8a4191ab0df77ed66eceb33cb48e75e2a1c6c62db8d65015e788d52ed3494700ad1b4817588bb6112a337c152a12827e52526c8cb7ce233989441330db69421cf4ecae9291bf1e9"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a2f58704be6925b8a54f9c2e229fe5606d7039dca9f2e16285a65d7760844082f0c072dec33ffa197428cc92427d076f5f4689b8e67bdd9b59d58c8f9aa6b4d11efec438840cfe3cd1a4"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], r0, 0xc}, 0x48) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0xc1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) lremovexattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=@known='trusted.syz\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@loopback, @in6=@dev}}, {{@in6}}}, &(0x7f0000000d00)=0xfffffffffffffe50) sendmsg$nl_netfilter(r2, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000440)={0x6ac, 0x11, 0xf, 0x40c, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0x4}, [@nested={0xd8, 0x2b, [@generic="6b32a5201f0712dfc4", @typed={0x8, 0x93, @ipv4=@multicast2}, @typed={0xc0, 0x46, @binary="966aa739fcab904482e23919593fb34d6ff7e74712188532d8d59e1dd98d7f7c3c36e33f4d94fece9e2a73a598b67860129e9d60d003ef6d1e9bc9d4366f80238e6ea82e608d327c40f8ba23ca8010cc407ea08434cf1f984ebe381ac2770931b31c17956bfa10692f76e49987af15d454bb6f2c8022701482dac4c61e9c0ca7a0f337ba3185bb0364413f806c268e6f331240d5515ffa4e1fafa7f072f0e7f7cfa1fe5087509ec5075b17e33f1b775f2503036d76a5c13a059c9d22"}]}, @nested={0x88, 0x47, [@generic="13fdd791bfd7247cb77fc8d4", @generic="34c20498825df353fafbfc2a5c3c38ae58cd82433708550ddc989ffdbe5c592b613ade623f111e99959e2b7ddf78f8ff07a887fbc718c69f79c2ac28439b8f9291d2989184311ae3b61e84bb8437db5f7fe5eda2070d7535a2355f066602e475b25383", @typed={0xc, 0x49, @u64=0x5}, @typed={0x8, 0x8a, @uid=r1}]}, @typed={0x8, 0x34, @u32=0xff}, @nested={0x3dc, 0x83, [@generic="7f8db9966ab316e76a9bf08ac65af036f2f9c2ab003542b1672d02337b244998a9740d51081f298987442f568af9d365d39ba5c0c9b0255766110c202854c4d2f7367d6a4b94a342158056fe5f1db7d135b1939e9dafd1ffd5249be25b22b92b84754207a44a3bcf7abd20a7d82ea8facc137e510ebd577b4e93d1a8b2bb8775fb84d6ebcfdd83a17e9ef0aee4e2a6105f95062c7c860913cb40ccbb9052863123bfd64617c58abfd036f9df5e2453e4ef72b93a343572d7e776623aceb3657c6f95d9cf1d13b6de222baacc91f4a85801f23eca380b23037dc43248d7e0a35c6b52ad", @generic="8886c73897c60440754b0e101e6a0271e5c3b1b22defc89331b4c6060f2fcafd663475382c587db29fe71a63cd072a6881b511dd4189403ebb03d58f5a92aeefa2604c310139a3fb48d70651a26dde3b9c69814267f9d69ac514e37420da90e94973159e2ccf97328577ee0fcbe9645bfdd2b9f919ddad75f10b", @generic="13c00dc453da9aeaba7f67c9591fbc30738c604ea010ba3d8ccd679ddc0d0ce8cfb1080c762bf684449899b35717fad55e3b6da38afc96822fca5c41cc1463027cd23dc10faf69636a68bd9a2ace56f46cb584a196d3ce0d8b9f3548cf9c6f3a8d96de98a799eb0ee497c1075f776cbf350c56c20eaca56fe1d5e60284f0a0effc279137853e5c26725af67938fa97d08c6176798f2e4e335fdecadfef0eba396106920476964a44b220e376e8d24ac19367a65ce51a62db3366f2e8421c796a340a0fde330895030f7e3f2aa3381efe89a4fcf9c8fd0f9f74f2589eb1", @generic="830e200a167e17ca46dd1b69e4dcff26970eec89e482948e5ff242150505a8a5359c7b42676eaa83e0389eabe4054f4fde4802bf2c81ddcd66dec8ff73cd2c0d3993b6e9d6e53f10c785a1cc7177b3cdb280d65f72873816ac995d6cab8d946420f3dfb0b80b5394e24d812e767da7019f2ca33d96334b4bbe8d21e91fa0115d99b7f1531c53f375e6b9483014e31ac1494bed5ae73b6b93c0a01e3603e44e578e128ff741ad9c5353", @typed={0x34, 0x4b, @binary="a402c50a17b7c4e1279df8d0dde751eb364ac6282e928432afcf61c7f46d977969ebecf8841266865fe67dab1adfa71d"}, @typed={0x8, 0x5, @pid=r3}, @typed={0x8, 0x92, @pid=r4}, @generic="ed0b12922a3069d3b0d09e1e305445af33c41ef3a181745fe1fecdea620b5d83167061269f06c5709aec7430206b184c39e7614bb5afe5978d5d9bca4a7511b308aede1fd45abb597ec87cf1b269b1253141573f8dbb1b5bbbc1adf0f718301e06cb25577b09dbd184eaf9069264d6907f434d57243d21ccea7252586485ddbfaf2c5a54764dfdbaad93fcb51af4d730cc1db005480cc51c739fa9443f546c297580755f0bf6f4ec3d936bf38109"]}, @typed={0x8, 0x4, @fd=r2}, @typed={0x8, 0x36, @uid=r1}, @typed={0xc, 0x54, @u64=0x3}, @generic="8a23586a3477b250b71fad37d1695a962dc67268f47dbcb10f34f4b46e9458b267fa3ce63ff9697b070d5e287650f7a37bac809697f15a3b61f8e2", @nested={0xfc, 0x6a, [@generic="5139e949beb1034996da9f73e986fac6b2601bfcf709c900d75b7a6ef3a90d7f469e83e3931603cb2f91af0c2f9b4a24aecc099f13faf1f425da03618f1b44bf582014340569df0323920a6b3904c36c1c78f5fe84e49325ca4836e90a18a1e3dc77a4e65705e41ac89bf0ee7e6b49b2cbecbef46c4989c60004e261", @generic="ad6d25476b12199fde7cc5b4c6bca042e6db72a0b8e802a15e7eac075285f584bf0fd4fc8fba6d16f8e1e56600e6a078a5175c6e6abb7e3a0970ca25aacbf3b72cabd9cd78d469814a8cad33588fdb9bd97a785acfd67218f80652670baec4532ac883d93dc679e61d63ba795c68d35fa8e4", @typed={0x8, 0x55, @ipv4=@loopback}]}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x10}, 0x8000) prctl$PR_MCE_KILL_GET(0x22) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000d40)) getegid() setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) 13:48:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'btrfs.', '\x00'}, &(0x7f00000000c0)=""/148, 0x94) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x9}}, 0x18) 13:48:28 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x100, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x7e, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], 0x0, 0x400000000000000f}, 0x48) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)) [ 148.831145] binder: 9525:9531 ioctl c0306201 0 returned -14 13:48:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) clock_getres(0x3, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x46, 0x43, &(0x7f0000000080)="0b1a62cb60f15ab6865a5db31d72313a1ee4d57357f6c27922f7335958dc818be43c48fe2038f9c5e88d558b2929a0fc0603c8340360fc8d7b6fc06b5b992c405b5beded758d", &(0x7f0000000100)=""/67, 0x4}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0x7, 0x3}, 0x14) 13:48:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0xc000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0xeb}, 0xffffffffffffff60) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x800000000000}, 0x48) 13:48:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], 0x0, 0x9}, 0x48) [ 148.920246] binder: 9525:9562 got transaction with invalid offset (0, min 0 max 24) or object. [ 148.953332] binder: 9525:9562 transaction failed 29201/-22, size 24-8 line 3199 [ 148.965612] binder: 9525:9531 unknown command 1074036998 [ 148.965621] binder: 9525:9531 ioctl c0306201 200001c0 returned -22 [ 149.009423] binder: 9525:9531 ioctl c0306201 0 returned -14 [ 149.015853] binder: BINDER_SET_CONTEXT_MGR already set [ 149.021160] binder: 9525:9531 ioctl 40046207 0 returned -16 [ 149.021868] binder_alloc: 9525: binder_alloc_buf, no vma 13:48:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5190abcebdb9d197e125ef7d3e09d8df7d28815910a85c4498c7c9c17e7506ce75ee0eefd25d457bdb765fb94b2fbfcc5d8cb9e0b1b7b2cb28274d7b231668eca324"], 0x0, 0x0, 0x0}) 13:48:28 executing program 0: openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/context\x00', 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) r1 = dup2(r0, r0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x1, 0x1, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37c60f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf587ff070000000000002e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000006540)={0x0, @broadcast, @dev}, &(0x7f0000006580)=0xc) bind$packet(r1, &(0x7f00000065c0)={0x11, 0xff, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x2a000000000, 0x800, 0x1ff, 0x2, 0x1ff, 0x6, 0x7fffffff, 0xffff, 0x401, 0x75f}) 13:48:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x10000000005, 0xc3, &(0x7f00000001c0)=""/195, 0x4000000000, 0x1}, 0x48) 13:48:28 executing program 5: memfd_create(&(0x7f0000000000)='$lo}GPL)\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @random="ee1a6619a4ee"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000100)=0x1) 13:48:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_ima(r0, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x6, "a1"}, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000180560000008f6f87699039fe0c906bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bc359427dca0c6a24b686b21bb5df218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54ef4c3ddceb95099c94f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10d000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) 13:48:28 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000140)={0x401, 0x4, 0x4040000000, 0x8, 0x174, 0x8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x200000000000005e, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5faee37860f1a3eb067493c331cec8bcf218fe598f974f49c6f9b398f192352eed6f8c95cd2ca3584cf58704be7925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a63222012bf3928c263380900000000000000723f767ab6b268b3feeb24c1cdf4fa0e5f44a462127bc27a"], 0x0, 0x5, 0xffffffffffffff4a, &(0x7f0000000000)=""/195, 0x4000000000}, 0x48) dup(r0) 13:48:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x4000000000}, 0x32) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) 13:48:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 149.021888] binder: 9525:9579 transaction failed 29189/-3, size 24-8 line 3136 [ 149.022005] binder: 9525:9578 unknown command 1074036998 [ 149.022022] binder: 9525:9578 ioctl c0306201 200001c0 returned -22 [ 149.081109] binder: 9587:9594 ioctl c0306201 0 returned -14 13:48:28 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0x17, 0x75, 0x2, {0xc, "ebff2867544c9e3469551d8a"}}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES64]], 0x0, 0x5, 0xffffffffffffff6d, &(0x7f00000001c0)=""/195, 0x41f00, 0x0, [], 0x0, 0x800000}, 0x11) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000002c0)="44d30a0e39da7cc8bddadb85340c5aa29eaf09451135fc0d8096e76cb7e1934fa3e169e25da55603e20e821d869485385d91cf5117104e773bb980538d266d36d3c383ebe3b49add678a349e59fbbd810254778ef43e88173df3126c7585081f58aa5f93dee57fb4bac11ffbfb308929336fbba18f4e272081a7fcd655734f78403a0fcb959de6caec7f85a1a501143e168be96603d8e6db35138a398e79bf1d7201263218cc24cc49ae39a6159bce964464846a9113a9be6bc6f7e2b337aa1b67945750f870facf08fe63806cf0d61df824db81c38c75cae519c035201555") [ 149.167575] binder: 9587:9619 unknown command -827617199 [ 149.181427] binder: 9587:9619 ioctl c0306201 200001c0 returned -22 [ 149.875963] binder_alloc: binder_alloc_mmap_handler: 9587 20001000-20004000 already mapped failed -16 [ 149.885669] binder: 9587:9619 ioctl c0306201 0 returned -14 [ 149.891522] binder: BINDER_SET_CONTEXT_MGR already set [ 149.896858] binder: 9587:9627 ioctl 40046207 0 returned -16 [ 149.902742] binder_alloc: 9587: binder_alloc_buf, no vma [ 149.908234] binder: 9587:9627 transaction failed 29189/-3, size 24-8 line 3136 [ 149.915822] binder: 9587:9619 unknown command -827617199 13:48:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = dup2(r2, r2) write$P9_RSTATFS(r3, &(0x7f0000000080)={0x43}, 0x43) tkill(r1, 0x1000000000016) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x8, 0x2040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x20) getsockname$netlink(r5, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02a0e6bc2efd11fa218727cecea23d000000"], 0x12, 0x1) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/132) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x7, 0xa96, 0x8, 0x2, 0x3, 0x122d, 0x28a, 0x40, 0x3e5, 0x7e, 0x4, 0x38, 0x2, 0x200, 0x26da44df, 0x9}, [{0x0, 0x10000, 0x20, 0x9, 0x9, 0x5, 0x736, 0x101}], "2b5350e28c6d7cbfa5035a734bd6acb2f30b158b163324659d4388a4dd62d78ec7ccbc81b6228cd626f131bcbceac4c9eae9876720dcd2b539ce5f73b07516f868ee1db335", [[], [], [], []]}, 0x4bd) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x2010, r0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, &(0x7f0000000080)=0xc) 13:48:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8000000000000001, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:29 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='$\x00'}, 0x10) ioctl(r0, 0x100000000, &(0x7f0000000300)="ab0ac2cbfa8243cf7bafb8646f65ad28ca2f1b5499674bf234e2f913cee4616a4cdb4c395fdd0ba9ab06ffdab934f49668a6ca44d6f21a8fc93b41755ed5d6543d6f6dc956ec2955e5b28e77d78d421c3a1a959f3298d2d1f8572c014f0ef900fb147bdcabd5b778e4f5ea1a90c054b1fe5a5f29e02b4a34dcaa5fdcfb37d9d0c130ac42229163e32768d3faf0c5be134308403e8e662c73fd716e8ad39d906dc1f7a8cfe2f1256c6b682bdd292f4a3f03914ba318e5ab8d3473c156036a7f9b1c7ca965f7bf1c812b53eddded021940688e3d47279d9677ed175d4a324ce34de88f28854fd4e38c0f65788969ff49796243c8628273b5e067cf119635c244") r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000240)=0xd9ab) 13:48:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000090000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b85cf02ff3439d3c5d412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x8000}) 13:48:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e162aafe8a3405d81e54f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:29 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) unlink(&(0x7f0000000080)='./file0\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x22442, 0x0) 13:48:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 149.916157] binder: send failed reply for transaction 303 to 9587:9594 [ 149.921701] binder: undelivered TRANSACTION_COMPLETE [ 149.921708] binder: undelivered TRANSACTION_ERROR: 29189 [ 149.938507] binder: 9587:9619 ioctl c0306201 200001c0 returned -22 13:48:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000100)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r1) 13:48:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) 13:48:29 executing program 4: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x118) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x3, 0xffffffffffffffd9, "026945d54ccdef43e0f2c277c9ae25a614518c1e92531fff9beac014b8b1d81f9bac36bfa7385573209747e1903f47d8cba3bfc0ff44806c04bfc1bee1ce5ec937740a90a3a967161f7caf4c64aac2ff0121b9fb0e9dd3b0d7fcc65bc01f7211242ffe6404c292f4fe20bf9e5e1bbe71adfa7dab0a346d0b3e3e66cb81bd0bb65e6a2e42bc7ee61b94ee7bd143052b4dfc00ba2481c5acd0ea3a96590b3d379c13ed42b9a89397fb6f10de49ab1d66304dd09fc9"}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x8, 0x7, 0x1ff, 0x1f, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0, 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x4000000020}, 0x421) 13:48:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xffffffffffffff36, &(0x7f000000cf3d)=""/195}, 0x48) [ 150.097460] binder: 9635:9642 ioctl c0306201 0 returned -14 [ 150.821721] binder_alloc: binder_alloc_mmap_handler: 9635 20001000-20004000 already mapped failed -16 [ 150.831481] binder: 9635:9671 ioctl c0306201 0 returned -14 [ 150.837687] binder: BINDER_SET_CONTEXT_MGR already set [ 150.837760] binder: 9635:9673 Release 1 refcount change on invalid ref 1 ret -22 [ 150.850635] binder: 9635:9656 ioctl 40046207 0 returned -16 [ 150.850716] binder: send failed reply for transaction 308 to 9635:9642 [ 150.850731] binder: undelivered TRANSACTION_COMPLETE 13:48:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x1f, 0x1, 0x6, 0x80000000, 0x2, [{0x200, 0x10000, 0xfeb, 0x0, 0x0, 0x4}, {0x8, 0x8000, 0xcb, 0x0, 0x0, 0x1100}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:30 executing program 0: prctl$PR_SET_DUMPABLE(0x4, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'ip6tnl0\x00', 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:30 executing program 5: getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], r0}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2) syncfs(r1) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'bridge_slave_1\x00', {0x2, 0x4e22, @rand_addr=0x10000}}) 13:48:30 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs, @dead_binder_done={0x40086310, 0x2}], 0x9a, 0x0, &(0x7f0000000240)="b1cc8f687bd8b3a9135fec08730c1e08d5e6760d3e8d33879cd16191ad42e4e811a606e20e32eea514a2d6e5217878fb203d7825f9a2fea29ddb22274c6339357469a56744e58eea3fc02f7875740b2c85cc126f967a31d03a24a58ae98407d84aad11b0d3c817ed3e6763becc1e2d77aa4923452516b31246cbb22fc364fd719f041564b2108590a1bc87d9b31c1a20cd08c079d7d40ac997f4"}) getsockopt$inet6_int(r1, 0x29, 0xdf, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @local}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @empty}, &(0x7f0000000200)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000070000000000000000010000180000000700000000000000000200008500000055000000950000000000000014b2916c6162714e26ae007afb96495fb31e6e1907ec9fb1cb52a49a76d150eb3a0aa53d4bf15012a169b18bd3cf7ffd8e139af8b605d58c3543e19b870c62fd82b07aa0efd7741d07de7521982d0e11aa4e828944953afcac0fac4319be5bbd2a811f1676693e860100000021a2935410e3a57247cc470fbfc3b6a3457de059136c5ebf"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xa0, &(0x7f0000000080)=""/160, 0x41000, 0x1, [], r1, 0x1}, 0x48) 13:48:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0xfffffffffffffffe, [], 0x0, 0x1}, 0x48) getpeername(0xffffffffffffff9c, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000200)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000001000000e0630100080000000e55732edac792369500000000000000000000000000000000"], &(0x7f0000000580)='GPL\x00+\xad\xd5?\xbd\xa98\xeac\xf24\xf1\x8b\x02H\xbf\xb9\x0f\x8d\xea\xbb->r\xb1g\xd6\x01\x0f\x1d\x96\x8e5,\x8231\xe4(\xa8#\x02\"\xc0y\xeb\xa6\xa8a\xc6d\xe9\x7f=\x9e\x81\x15\x19\x16\xb7\x8f\xbe\a\xfd\xf2\r5,\x02\x00\x00\x00C\x82\xfeRm\xe1\xe0\x14\x86\\\xbd\xd3\f\xeeG)\xfd\xa9o\xf7\x1bE\xfe\xd2p\x01,5\xba\x84yk\xd7\x19\x9f\x00\x00\x00\x00\x00\x00\xf1\x90`\xb9\x8c5\xf1#\xa7\xf7\x9f\xc1J\xd1\x90\xadGk\xf4\xae\xc1\xa2\xf3\xa9\xba\x9f\x15B\b\x04}G\x95p\xdb\vO\xc4\x94Y\x91\x9e\x91/\x16\xa6\x1f\xcd\x97K\x05+\x10\xc0eX\x83R\xe6\xbd\xa0\xa7\xab|\x84\x035;#\\\xe7wn\xdd0\x86\xa2\v\xa7\xdf\t7\xd9\xf1S\x9c4\xd8.\xa9\xd5\xe0\x9d\x84\xc3\x8f\xb6\xbb\xbe\xebT$\x89\x12\x8eP@\x12\x91xVXl\xfc\x80\x9e\x8bz^?z4\x1f\xa0\xbb\x8e\xec=\x15\xb0\xef5\xac\xaf\x84\xe8\xc7Q\xda\x8d', 0x6, 0x83, &(0x7f0000000080)=""/204, 0x41100, 0x1, [], r0, 0x3}, 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={@ipv4={[], [], @remote}, @ipv4={[], [], @loopback}, @local, 0x10001, 0x5673, 0x100, 0x8e6b68bf3d447d8c, 0x8, 0x400000, r0}) 13:48:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x2) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044001000000330c66534970e9982c2a148d1291fd67c241cb8212cc40b60004db60e440f06bde08ac32fd6cb3b9c61bc7f03512f4f99871a125eddc64e0dd8108af85deb2ef1d3272d6e6a9d7cd5d54000000000000"], 0x0, 0x0, 0x0}) 13:48:30 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, "c7eb044c9bf2e3df7b4566ee5e9f7af2380ac2bd3dc40160cdd96af7cda5d15b9f1f4bc2806834bb9fffa5275090b1d8262302b1603a959a06bc257ae78d50f0712f1a4f0e864ab042502d8a747338f0ab097f35d98693cf1cbeaf56666ed884638389f980601470c853d2058a53d0f140abb3c7b01607476578d1f30ef961a694949171022e460c67a077fa9c8c2d576b2052242e07a2dc9b9b4c5565fb1b8fc11518cb48ff984cd816f840fe929aa19ecd4df3ea88716c1306b5cba04691fa58af804d2c44f8b3dddf7c1b057b24f9796d89d1473f94f04465a18b1016021b21e0825d0e377418f95b1f9d1dcd23bee31296802ecb9d4235386f207442f148901b690ae95374450f23717d691586642628a591818c168ad71b06b1bfef4cc25d2cb8835f316dbcffe31b72fc4aed66cb7b2a9b8714c1c55a312ebbce6f5e49242b4f1372c59318eded79c6229209d5f4a66b3dabf6feb88e73d6d0961b52412885fad3d10e5ec278f19e4dda2afd8f40226ede1e0a72a2c00865647ee1ab3ceec14a3f410f55817b85198c82fb36775783c93d2186170d5d422e2b9c6782748169c9c21b494da1ae0c9d47359f4eae4243169cbd73c618f331cab1b0a8b111f82ddca266196339fe4a6c7642e3e8f19a3eae8b78b9bc450e8fbb4e39d0fb891e5e2adf0d4cd93e20033c677b1da5e650c37f5ef3384e112593b050715a8271ce387b09e465b2afc45793732e704833e8fd3427a6de5d47d2fef3311de9221cd5585a32ac29871c450cdec8f9994a17576ec532d36c2ce2abf799a97ca476703e44ac03de7b630167b3ee3e14db6dd295acb7686efddd6199f4d97e039628d1c0f9f2062f8ed679fef461346f110d8a4bea423797d36e2c9be2e96bf2ac859dae8ce5ef4652c612a26530b5f52fb9d160f173aa79d7aa5c3da1ff0019d3eba7a671d3d8c36b36595d8acda29ed4582e7e009fa348af19695f5e6204b60d23b131cc3c97fcd1e38f6bc6375404819af2bdacf48cb96d60c8b1cf3d7b6fa4897c852bafb0b9bec523e5858958da672767a9708259e6b02974d96c58a26397ac67fb698ec75d8b8526271ed4aee30cfc203f1c2b659256d2c5b67a2233babf6aa1e2684a616b9e923a264e1af9ad42e29c8a5e2aa271411acc81e797efdffbb46cf8dacbd46a4884253ecb95b777a0625a82d5c4dbcf7bbe993ad7d362800624fdedffb6a1bce342ec840a71439389fa4ef9658a74924619ad9504a62123bbd36bb6046ea26904906e0fb755e6b5e0125118d9276c0308182043d021ff255379defdaf04e5700cef9749b768229323a8e04e11ae7ecfc124c4cd345b63bdf01580b478d371b1a771925bfeac3d2eb39d64d4a0aa5aa16f74a498d12ab535b0bd88b307eb369b0eefdc4ecb5cc076a61ce0004f69d036d0cb226613b125bf5ddba9d073339ea33352d88077b38d42b145efaa12054c3b24a47957f2cf8557941df54d1bbe927ef58fd01022f06516a2b005df91f3c21a27e4a0c9e29c54c9a9cc01fab53d37ef4a7f3ad0be4e130c85e205307838bf0cb859aab9ee1b0611f9123193fddfa940812b82f0cd4b02d2c9390cfa21265d7f192a15eb783c8f2db6a6d0a65498379e1a625eb974cd9fba6ed32bda7c37420e95e73b65a961d28a2c505196c4dd06e8670980d4320e36da93250e8ab51872e34d6e898c23356bb8bbf469d94118de0da53b23b92e68ca75cb7b616bf6b06b4420d40d7545699eeab4504bf0b98ff0ad67821609c9871fe5ef821d7927b2650d466b2c7e4ecb7593624ec352d3282c3c6d2a29ad33b650f9178c59aa6f167c4ebd9db237e37b6a9b656377bbe7aa021d1fb4103f8e46d306f186daa142a878ffdfbe41a04d9e600aa01f36318e42ad80df4bc926533a77bbf11075727d0f23e818bf59a72960b2aab9ecde6fbe40964b91df81c98d9cfe120d19524dbe6371001347e2fc130005c13d6b1c74458392fc115451640672e9d21052312ed0f60979b9e7e4465163ad9a6fdacc05a650a18a93bb2506fa60d872ed87d3265ba0ac82a6004357a8948f3cfe90130d4156d456253af394fd67c9f5b30aeecf64b5aa242653d0275f4f8c8649373266d9981970d48ee4c4ca2b1f7efd066925172693f9c588c6e72bc8ad735ecd7fcd7d0c2272fdddb5e3e6705f993c429cd40051f7ee6132f75d089774410f9840d27de0c824bf4ff9b0e321a91e38c9371865414b7292c34ce26a447c84c37a3ae28d794486eebb0c0cfc0e140626801f859a5f797d4c02b1ddd778f9d4979ae0e9a51cb3573af13fd05bb6a263f0a896f0740b7bbbef0a37739812f4933002676d0c50e1678fe35705ed7817a771424aad68079dbae0b11d33015b3c939e114de76b08e554f8f4b7a294646f327d740a443e655c5ae43e7414220172d1851e1ad10505e02ead28f111a2aa6659750a8b35349ed6ed803b266cd08d94809b83b043679c54c587840c44f5fe0afa5a7412ae9d1ca6af5710f48d259cb64ccf4e9c2e021d0efb02455cf8f561a240996d5834e5f0ef70e08769d81952281a8ea51cdeeddf5e9c2a84eb26c5d20c3fbc70033683e925e9f8ccc43f19820b5d6e84b9f1a856efb3f5a9cd15698a296c06e1f36194f2868af21b395ad872a17655e9d2f2aec79be7a875afe59428721160f14450ff216a70f5ec28234cc55208c667647d9a77299b6fff4ac6ba6c18e51a0ba4aa168450c025d184a5a34d82b7c7a873d9f015887c05a9d7706e78162ea31483cbf68ff0fe13529be002460e281e5be3c984d5b0ee39660702b1211480ebd76cd9347705f37690250412a86ba4c4927fd1b8c79ae742d29f2cdeba60a4d2cdb1813a71150dac6bca5ea7a29979d5267ab8fe3fa73a6a7d17eeeefd0fa3d3a375f7ceaf9fb4fb469d048c859da1d1ad7b9a8aba4615abd31b673fe348db257c758194970484effaab4b7652585576eed6ddcf9c59f978dc918f6a39010863d8a9d1173b4fb53bbb90f8dd17fd883985ae716eb7648468a7ff20ca370cdeb9f1bed344a5b5fc199fd2b87c086981a9a0c4c230c8452ac0ee9d0c45f5e38bd2fd7fcabfe6eabb5ebce1b40a36f0dc6054ed31235a0b3f7c32dd81b3b754a838e62d0d396993d57fb787afe9684caec983fd28e7aae72bef5323f797a5aafed1b54c58d50090a0f871d99f15a5b544835245782915de95d7cd95127d2950dde60f3fe8d955817a995f05a0871b4dffb520b41d8920c50e02640d5fc217d416ede06ab91e5b998b78df923af060cf94c2ed747bfcafde4ddded5740aef3de13ac5de2af3860a7c750d140ebf5d463e45fd5c0dd1de85d8b09fc3fa04a804db3ca889d74f9764bb10a6c6ab62b2186d0570006acef253652fb97b3865a805897f592ba94625d27450bd2801873f3529a84d6cfabb3a242df8005c6988a884726f2add747ac55b13ef6842eb78e5053520f8cef2720ae99df642cd14b3e34a2f6be53b68124aae5fd5ab68cb6f4552ea9910bd9dbd5d4503c4a2e9c1bd75b79ad9f0ed4fd4a521bdc1818766fbceaae70663532e7d0fe9b009f4337940c2e8bcf5027fc5bfc7ad604665c733860ffe117855ae830fe61d2862471d074189e49f11339ebabac7a1ed8619d4510a6d040f372d1aaef8ecf49d3f27fe1435c04e0ba6b2ec7a9f202a354dd03f16ae81a97a2a52b2e9b77d348ea99effe1fa6557836b11057fa4e33f60af7d45ae743e3f922d945419bb3a1b0b62f225b58b43bc45974ccf7d45c8fda3299989c3f0bf8212944702c454ea973d219263abffbbbcf7716f9576443b72731da2c503ceae3debe14c98aa6e3054f291b871499f08f59b72ab95e06637064d59af524af623cbcdc7c6dc52439882f4da559d757ee0033e79b50df1d818ad16adb1de6182340dd234e64d104c5907cdbcbb524bb65a075806ee5fff2cdbab9fabc81f742cbfd0aeb243d5920b508ba523644dd26efb4a81afdb368219a9237513eab21badc654d12741162d35593a50e2b8494ddb651cf11a8be297ff01f6f4245cb1ff6e81149630cb1a7f0bed1977a2272156e9338f77eb1e51407f1f84ee2499f8f863af4542e56662de01a1341f86e05341dff18fae60344fe60f64d2d2895c15c4bb883cf8747e947f4833bdcb81ff0d84a33e90bcd86262065a6f670c3a359122f945f9f2e4dd7d6754ca043312e1acd9bbc3796a947b13d841c2fb75a95853e3fba7660b1b730664d2b9ac35f6d4e7b7f30bad3b26f3601278260cd3a1f25724a4b409ab8bd6bfb92c0c36a516fa2b571a16b66cfd126ab7d5a76ce7360f96cb30cb8f2850d5d0d20a1679a1e268ecc36766df3c93fdabf7dca9b051508c3fad17b1d5d3a25d68f3df6ebce8180dac7f8155612ed21490eac25706fbd26a2f451c764c23546dba5f97d8b1f0f857c602b2474e0998b090ca36b95d5fdd695ab766e754f7dd89a161369c47f72531a13a82584e568684111da5b38eba295b416dbee3f0b6cb8ad338c2f3f211fa87604b84f983e3bb60e923af6268fbabb115bc165cb8cb1f9b5c29738eee00ab3a278b9850c95513fa4d124a842aa3a068902107fb55a70ee894df125cde6e67cf1ddf27a7fd0d57daf05c3dc05cc5cf7098e867751e417229b7b50d0f632e66159e56e061ab8b1b115cf3e4ae8f5457ec0dea055802a7b985bcc8f83a9a0eafb74925d43666f1d3e6b637191053d34134b3d2f72334a703604fff806f9e8ab6edf1be8d2af05f88a04f410c8c755aa9f67f2ea39f2796151f24dd33da24c3b734b5d5af13ce5311b46ce73b43786dc907cbe2b282f5f04d6e429c2ac25e70c42b4bb9b2a178f4d3141bcb0a5a015bd1e75d5f00d72975a79ca14676d004717272a91cc2cbd50b42be12d23ac9f8166ebc76dedca98fc4bec5dff510b8ea1b12dd180effa5c493e970ebcb38f86d12aaa4328b3adda3bebb76d85ec38ea3a193f3aa60128799c5eb4ece9433f52f67ba8d93c95764a0618bec4a488feb9beec4dd054c170831f6b3e4200224641bad640748979cda6490688888a1bdf8d1923604c5b9ad8ec29712dd6e0e9be3a04366f39b44cd4a417274ea5b98f0b5464aa828eca6eea46e5b9a6372b8258d43408d0e12a66296d67c3648697b4d43319c44c54d99456a0c24a87fc6fa74a0c15ac34dffe6a12e3c2f38e29666fda4e55ac6a5db335981cf89edf9662f45db13af0cf3d8637b88852b524c07eb39b73229697e66deb46205fb8a388763ad7ddbe6db91c7b5831eef39790d1dbabafcbaf07e34bf39261aa318754f9016be6e18c7846d847ef644ada22d9ad2126770ff92545beeb4e379242a32dc847e025238dd0ce5516944134e6540ce879198360729ff2ad928c2eb486bc2750fe9baf8e7379fda891b98cfd35192001da3910274c6d79b82d0e8662f788ab5aad335e8ac81fad635cda4f335c17fb7ac706b7a42180274c2c2ecba47995d753689595d7b15bb3111541bfcf5e08552288fc788bbb9561b54f3081e21e19d833c4e19cc97898852af52e14801c5ba6548bf251eaf61020c63d42d18201015ef29af774188369f7a88c2569e38c2fa2de8e69ee455ca9d0ea2658e7be81ddba18d1467af01dc1fd8ad0a7dec081b0aaf05bb4dc241932b917766d95171f0edd5e4490e235a83f84a2761bc1c1af086c7ebbad91ceedce2c02737206f4970b63965dc6c78dcc189a1aaff8c0cfedbc6e4130b5e16c3bb5fb5f22435291e81236390b25b905c75d665f9a5c252aff731a26a1", 0x1000}, 0x1006) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0x800) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={r2, 0x1, 0x6, @random="3fa159bd0f58"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 150.850737] binder: undelivered TRANSACTION_ERROR: 29189 [ 150.850780] binder_alloc: 9635: binder_alloc_buf, no vma [ 150.857287] binder: 9635:9671 transaction failed 29189/-3, size 24-8 line 3136 13:48:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf59c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1ffffffffffffe03, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xfffffffffffffeb4, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$smack_current(r0, &(0x7f0000000040)='\x00', 0x1) [ 150.932392] binder: 9689:9694 ioctl c0306201 0 returned -14 [ 150.932910] binder: 9685:9688 ioctl c0306201 0 returned -14 [ 150.933324] binder: 9685:9688 ioctl c020660b 20000000 returned -22 13:48:30 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x3ffffffffe, 0x1, [], r0, 0x2}, 0x48) 13:48:30 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="b4000009e5954016a285bd749110fb6c7e0009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @loopback, 0x0}, &(0x7f0000000180)=0xc) ftruncate(r0, 0xfffffffffffffffa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="dd110800d1fbffff"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xa0, &(0x7f0000000080)=""/160, 0x40f00, 0x1, [], r1, 0x9}, 0x48) r3 = dup3(r0, r2, 0x80000) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x105000, 0x0) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000380)={0x18, 0x1, 0x0, {0xffffffff80000000}}, 0x18) ioctl$TCXONC(r4, 0x540a, 0x6) recvfrom(r5, &(0x7f0000000280)=""/85, 0x55, 0x40, &(0x7f00000003c0)=@un=@file={0x1, './file0\x00'}, 0x80) getsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000540)={@multicast1, @multicast1}, &(0x7f0000000580)=0xc) [ 150.985978] binder: BINDER_SET_CONTEXT_MGR already set [ 150.991509] binder: 9689:9694 ioctl 40046207 0 returned -16 [ 151.014774] binder: 9689:9694 ioctl c0306201 20000440 returned -11 [ 151.034011] binder: 9689:9694 Release 1 refcount change on invalid ref 1 ret -22 [ 151.069228] binder: release 9689:9694 transaction 316 out, still active [ 151.081009] binder: unexpected work type, 4, not freed [ 151.092194] binder: undelivered TRANSACTION_COMPLETE [ 151.712116] binder_alloc: binder_alloc_mmap_handler: 9685 20001000-20004000 already mapped failed -16 [ 151.721655] binder: BINDER_SET_CONTEXT_MGR already set [ 151.721668] binder: 9685:9702 ioctl c0306201 0 returned -14 [ 151.732665] binder: 9685:9718 ioctl 40046207 0 returned -16 [ 151.738457] binder: 9685:9718 ioctl c020660b 20000000 returned -22 [ 151.744921] binder: 9685:9718 Release 1 refcount change on invalid ref 1 ret -22 [ 151.744973] binder_alloc: 9685: binder_alloc_buf, no vma 13:48:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x80001, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f0000000000)=""/195, 0x41f00}, 0xfe5c) 13:48:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b5215b5fa6aee37460f1a3eb067493c3c66fc8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea402a6322200000000086c5df3a9c4b5644ce3d3262fb09eb2f1dd5cae8a7a2624fa46eb5edd9e4e0c5cd1b3df14a31873e4a2c55206549d41311e6e8aa4fa61782a54cd8c206f8c216776c4e9d3367ce60e73d224e2d8bfa514fc54f81e56351cca67a94b56a16d61f2748a00b"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:31 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = dup3(r0, r0, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) connect$packet(r1, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x17594c1d, 0x6, @random="c08f974aae80"}, 0x14) 13:48:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000040)={0x100000001, {{0xa, 0x4e20, 0x38ccc6b7, @ipv4={[], [], @local}, 0x6}}, 0x1, 0x1, [{{0xa, 0x4e20, 0xffff, @ipv4={[], [], @loopback}, 0x5}}]}, 0x10c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xb) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:31 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$notify(r0, 0x402, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa68ee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) getuid() lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20080, 0x0) syncfs(r1) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000200)) 13:48:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x8, 0x0, 0x1f, &(0x7f0000000140)=""/73, 0x49}}], 0x8000189, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) r4 = getpgid(r3) sched_setscheduler(r4, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(0x0, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x31, 0x3, 0x1}}, 0x14) pread64(0xffffffffffffffff, &(0x7f0000001880)=""/229, 0xe5, 0x0) pwritev(r2, &(0x7f0000001400), 0x31f, 0x0) r7 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x3, [], 0x0, 0xfffffffffffffffc}, 0x48) [ 151.744992] binder: 9685:9702 transaction failed 29189/-3, size 24-8 line 3136 [ 151.766013] binder: send failed reply for transaction 313 to 9685:9688 [ 151.772726] binder: send failed reply for transaction 316, target dead [ 151.789344] binder: undelivered TRANSACTION_COMPLETE [ 151.803686] binder: undelivered TRANSACTION_ERROR: 29189 13:48:31 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x1, [], 0x0, 0x10}, 0x48) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffff8) r1 = add_key(&(0x7f00000011c0)='asymmetric\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)="b860891faca15832d4265de7ab6e5c92cd25b933c3307f5cc72170e4decd54ec92084f8059bde7f2e358bfea7e2cdf903d392666094bbda0d4e8576ea6d93a7dc3e7188b", 0x44, 0xfffffffffffffffc) keyctl$reject(0x13, r0, 0x1ff, 0x8000, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @remote, @multicast1}, &(0x7f0000000080)=0xc) 13:48:31 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067499c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c70717290dad96b38e272dec33ffa197428cc924285076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], 0x0, 0x3}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) fcntl$getflags(r0, 0x1000000000406) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x67, [], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=""/103}, &(0x7f0000000200)=0x50) 13:48:31 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getpeername(r0, &(0x7f0000000100)=@hci, &(0x7f00000000c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f5a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80100, 0x20) timerfd_create(0x7, 0x80800) r1 = request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='@\x00', 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="6c3bb61765aaae6f4a53e9dbf8fe5a32c2cf86ba231b883cac50321ebe74d212b434d04518cf7c7493230e1ff51c096c3891a852803a01de617791ea1a16366194ad6f7cc35d8790efeefb6a62abd110bb646e2cf4f7840ad50b804df08ac4e72d3b3b45d4b613303fd458bf51d4fb67dd0f2858058b5fed5b5f4183d1d881d49e2ff0d3a860f1e4253f8108fa14cd2b34c218", 0x93, 0xfffffffffffffff9) r3 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f00000003c0)='security\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r3}, &(0x7f0000000440)=""/161, 0xa1, &(0x7f0000000580)={&(0x7f0000000500)={'md5\x00'}, &(0x7f0000000540)="d69a", 0x2}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x6, 0x9, 0x8}) 13:48:31 executing program 2: sched_yield() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0x108, 0x9, {"0599a0255876983c3bd9c9fad1ed49a67a029f1c3fbf9e3b030319b42c12f2e05c467443806d53e3f2f9fc8b1f443d8f25018ef5a101e97263c8d04eb40db77f7e9af1cbae640004893b1cae90f05828837b86bd19dfb965192ab4ee20e15883cff68578e02837bc71203510ab801db8159b9d1bf21b647585020813e0e012f91c22763a1e64d4bb5a618536026ff51e8e37d7f5ce063846bae53afe9b8f4d189d199250940c2f42ec96c98bc08cb89b58b2d9c0e36c220d3c7d61a8333ad9e9d85fbb255e29c6061e431b4b1387e4b66fad2aef2df76a9813740db460ca2f58048acb650a1d574a2e507baca026"}}, {0x0, "fa28bcaafe1485d79f4f59e27558f37fa10054c78154d20c0f3eba27e8ddb8cf60b3618053bc18f5d6a0300431f8ac89153711c9b49a2f4a928cd566471721"}}, &(0x7f00000003c0)=""/4096, 0x149, 0x1000, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f00000013c0)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8fcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229be5606d7039dca9f2e1629c7067e060844082f0c072a6b4d1977870a8ea412a63222096d62f3cfceb06db6f7dbfdc982d56ace31819fad03dce53446a99f9a662fcb334400669a2c6520eeeba52136a30866824fa13b64bdf549aa5a7fbfa797729dbd3c5d4359c4b82e317bd70524c4823fe564763ca24d50056a7c905b5d26331ad1e031404e3a0778fe8f2f971fe3a195feeb120bec4a7639f368617d7da517567fefe5294c7f4fed31a018f8fe0790b0416ae3065e3ad2daba5c3abd83d21bb1bc71c0de1bc536580b2f81cd17c5e8509e3ebead285462b3c0872696ce64a074c6bacf2b52ec2e1b0dbc97e8636e530c413618dc3a23b93e8b2111ac8be0cf169c98ab0646a0d22688645f3d5f6ca9ddc492c0fb4ce8efdc00e02"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:31 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="fc94bac3090000000000009500007a560000008f6bc96c5d2c9f55dc31b57b75fce132138f9f215b5fa6aee37460e5a3eb067493c331cec8bcf218fe5d02ffff000000000000a288eed2d245c1cd2ca3584cf5877e1a9219bf27c2412e229fe5606dfb62a6e1037e962665e2dcb50e49f7199c70675e6674f8664d19fd72dec33ffa197428"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) [ 151.812691] binder: 9727:9732 ioctl c0306201 0 returned -14 13:48:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @remote}, 0x18f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in6}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) fsetxattr$security_evm(r2, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@ng={0x4, 0x0, '9'}, 0x3, 0x1) [ 151.882317] binder: 9722:9750 ioctl c0306201 0 returned -14 [ 151.951021] binder: release 9722:9729 transaction 324 out, still active [ 152.601800] binder: 9727:9749 ioctl c0306201 0 returned -14 [ 152.607679] binder: BINDER_SET_CONTEXT_MGR already set [ 152.609188] binder: 9727:9771 Release 1 refcount change on invalid ref 1 ret -22 [ 152.620521] binder: 9727:9749 ioctl 40046207 0 returned -16 [ 152.620849] binder_alloc: 9727: binder_alloc_buf, no vma [ 152.620868] binder: 9727:9770 transaction failed 29189/-3, size 24-8 line 3136 [ 152.620935] binder: send failed reply for transaction 321 to 9727:9732 13:48:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 13:48:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x9, 0xfffffffffffffe6d, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memo\xc7\'\x8f\xd8wap.cu8\xf8\xd8n\x1e\x14', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001980)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000007d00)={0x0, @broadcast, @dev}, &(0x7f0000007d40)=0xc) pipe(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="96f0ef4f254107dad10e474e732ad410d476fb029e12ef29965988574c1c2ac9dbf5bfc4aed5fb56d5a89885afd559f5a1ab5cec2ac593f63565913d437bfe3886503ffac7f2c26bde1e98", 0x4b}, {&(0x7f00000000c0)="9d32f11ae3fa2f0325971f871f0bd4f8884d1f9da583bd0287679a27e806deee934fab70efd94fb24f676f7c5e40efab7663e4f0127c020387d970c1e06077afedd52aacf3eb2177fdfd92a2b2679ca7775500481340915f36b61892f96fa78eba7bebad1830dfa002dd710f5635f8bd68fa60400b36079e82f612a45240577421e9c9706a6dd99475dd3669781c894a241f13badc70c7ec99e7fd8fb1b15afcaffa87fac0d5cd5e7c27cb20ccd6a1242c5f7567ad63d1f150448d8eca239ce7269d9c9511667d1d8a924a4454cc4e767c87f6e19bf1d366ccc1f19f32a0a6b8", 0xe0}, {&(0x7f00000001c0)="d155522a5f717643d4efb6f87b230cd9d2f5b0797291da779b6a77a7a1e53198a776c94ba2630ce689352e471b0b7fb6ea0397bb4e650b2fcbb4063f9b193dc690b1f16877ea278f05aff1507ca0e7d48ea1238078a2ddb359d96b0b7817f5ee304e6c3ba03a19cbf45ce271985daabcf86140fb632f6a21b5fedc2a6649dd57d4b40bb6bd02949891d3189ddf6748ad78a3fffc", 0x94}, {&(0x7f00000003c0)="54824accb806707e0908e44f20e3d1ccba0456eed5a31be604ebb0edaae4590930d196e3390fbf3eff4c430470fdde675a94b40fd4e7c9a81434b8d23251c8a276c21cf28ff6ec91e22643bcc86f97c09882b4a481ab473ee9117fb39abc3a26438570adb0ba0c264506c921b464e7cbd8d9fe1720debb27589c853fb0843a87ecec85df6c8df2865e4c5e8122424bc73ee38baa0f51ed7c2188f79b0a537d341b2dd8a8581b2bdff6b1eda1a9ab77fb65b82201226a64f532855560c764cdc0", 0xc0}, {&(0x7f0000000480)="5ec7a9714292317bcce9146ed84245961de70ab09e452d2b155efe0c1937647a6ac30eca4fc49ff3904420fa4ef240c1d2d5b3b4687bfc57710d3d259cbc8197b206312f13b99c52f2b24c16bd3db3c23a772e69546e1b84e752a8bc418d9a64cd9dc2784693f8d7d265a7e2ebabe339338ab165bf87128dd563a7b4f6f953045c9e8e63b5562c65977335", 0x8b}, {&(0x7f0000000540)="ccf715aff7f04dd1ed5c4a5a4a66a965eac30c19a39411ae537f58480f997190bca1faf8d5d920e12177910e4e4ce45b8a8b5913cfd843221972539e2cab05a8b8c3270398ed68ed0baf30737386d8550906289235ee8a1133ee74b995e5c77870fa271fd5a322c191a2c107756c699b9758c9bab605f9c687d87fbf39da1195bfdf83daeab64a1488e1f43f7aeee673adbc3ebecc3b4845bbf776b8c10af2a36d92c185ce8e813ac736aedea92c2a1aa6", 0xb1}], 0x6}}, {{&(0x7f0000000600)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000680)="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", 0x1000}], 0x1}, 0x8}, {{&(0x7f0000001680)=@ax25={0x3, {"cda94a98866758"}, 0x4}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001700)="2863c0c319a2312e14b458a15d3d921db49cef3ba661f69c290e3eb6c71391a7ada359269e1fce6255990a84945342929a35cc949e196a0e47cbf1cd7ac18a00423deef02b53c194b23714af83f5fb49240b66c7d0207fd1fd4206e20411221c2dab7e9c1220415831d9297024de690a6daf6076a4a3e017dedb64d4601cb779b3cce30799c653f7a5586c5eefa077", 0x8f}, {&(0x7f00000017c0)="38e1323e1afc70cdf6e44045d230e92161bf88d3dead5ab05c1f29995938538ce0d9338e61de877258a64bc1e8b5a6bca26a28216e793ced7ada9f24cf73746e219b2be2976898982c007c7b8ecf837219c3fd38c0332963b4c57b46c7bcaad013aaa4faa41d4707f2127cc36b61c09cc1b68887b76485557cb65734cd998e38c0149057ba01f168e0910ef11b12c23709db02e94e0021339e11628219109f7c804a", 0xa2}, {&(0x7f0000001880)="0f920c", 0x3}, {&(0x7f00000018c0)="80aa9ccbb39d00be0cfa4ed991fad9a4f62c5b8b8c2f675f249ee490eef374b4a4ee7d1870b999375010612abe", 0x2d}, {&(0x7f0000001900)="05caf32cf5b984e9e71d3e62ea191a06be42858f980d", 0x16}], 0x5, &(0x7f000000a680)=ANY=[@ANYBLOB="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"], 0x248}, 0x42}, {{&(0x7f0000001c00)=@rc={0x1f, {0x2, 0x9, 0x7, 0x0, 0x3, 0x5}, 0x3}, 0x80, &(0x7f0000003240)=[{&(0x7f0000001c80)="025b8b023764fdb9906acebbc0fe29c330d1dd7c3799eb1cb08228e06ebc13645c759758e2c2a1d4a3c1b533e456f97fb7f9baa7f4516efec5b3c62b114033a56ec4e352cb0e84a5b0fb1a7178bb5741ead3c621b1ba199493a587af465a1c1089a747adc5cc9833bfde1dc8b8c50d29b786fc70bb23f91c1e92c67fe65de819b1472c14b7dda7", 0x87}, {&(0x7f0000001d40)="587c20c0b84b9fbdfedf87016e1f90fb1529b24bde2b462de0263654ae57fb3bbaf5176e11b5e1fbebde7910945a33902c32dc7cc4025697b3d28781bf3ec2070cfd83f1db3cd31ce2047574250f8f59217d4e5e4101bf0bff65fadc8ee53c06298988edf0a46fd4cd5d8e83629579cca323d71662be9bff219e20c928e88c94c0b1523f90a311f98b8a17602a8617c2af7b5744bf5795f67743a3c15c8bf4275ff1e3ac00cbf292316f9c4d70050cb51ea355fd8d567e0db1993635d77aca706514c5a3fd96470b5676c17091b62d980978ec3b22c5bf2186af9013216a710ee8204d75", 0xe4}, {&(0x7f0000001e40)="0d433a546ecbad5b464ede444f052a6aa49ae38c67f0c677b6ab0fa3e1d471d7f35d58e0e30036bb30cceb7fdfe4a620374e977b6f04f16e629ceb9288ab9bdc6d7446037be0a993208fcf47dec1f623dd5701f3f03dca7af8a535ffb128e37e79c291bacd742b25d6948b5e62919fce18385b7e14b6f26714334560fca78b30ce790ddfd15d459d89fc415aed1b986b4c5375272ab27b7b955cfb7fc3ce24103c98e2c01105da363dc96982fdbff9ed2bdfaffee02de08e8c65adc22a1791e6917b5433e050ea1ef893f63fcfd261c1e3b20762e87660eed35f883e10d085b0d4e2343c2c9cc3c1127748da042b00f1d30d8edabe2a2120", 0xf8}, {&(0x7f0000001f40)="7615ff52979d9dbe487b2fd2ed99ee57dc61d90f248f6626fdf5436f6f117932343dcebc23254b8e34fa65b6793de1bc4fd6864236ba4628676589b132d6a244a6d620ce7ae658ff5294049896f612e245ae993442241a3a129bafa088b0e947955508787c204e1225ec0c5b5c40788b92e7cada2bab8e796f6194cc0f7d53b54b16ae315ccdf7c05ced3346ed7c3ee6903f28eeb911f4b0628d295880577e13b06ba3fd93562acd85bb85e60ca8c7397844c524bbc30f20637f50c7e1423b4c5b5d3a9316cf2f552323", 0xca}, {&(0x7f0000002040)="af0ab30b032cd79ce5f67531c1c58cf148811ce4307341358f41418bc47def2c92f6369ea1ce6c85d17303fe6415285882c3c9876aa73cf97d", 0x39}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="b2d9746412227d283079fcc165bde8f46d3b80632ba47e0c9cbfcb3bcd7a0a54fec6f4491244caecf96b0b7b35eca5d3dc0b2dfa789a5aa26704dcc9b47ff68ae96edfca488e2def357166ea82f3fa275dd937d10b7d02113c4e7bd5fdd312726125d47776764fa5e4e6779b065b0a6cc278abb9d0c752c2ec5242def0c1c62d072140e7ffb9e976324cf1480af195831918cc4a671e67ae6c725a8bd283b9b7f9b1206fac647c3609c9bda85e63226fd661f3492e7b49d7a8a3ccdee4061dc2e71eccabfa72c15aaa82fdee", 0xcc}, {&(0x7f0000003180)="936e89a3306fe74548fa2b590b7b94ce50d996d47655dfca111ffc82cac0918e6153898215fd7f526c91b42a62a3025b4413ff60acf42405972df0db9a7a6b13c637ef78d1d03d3b148236d4222cb8eabdb877bd4aaf8c4953cc532a8906cfb2bbf26280255379186bb41a128842e8becda6b858441b06f50af1a9d2997b12171dc49c607cd2b77cab9e5d67f8be16fa1770de29e2543c1f531f", 0x9a}], 0x8, &(0x7f0000003280)=[{0xe8, 0x107, 0x8, "443e7664795dcc9aa13bc2bdbffc1583f83383d4ddb96d46a5ce72a23f5bf99113290c9c5618728e5fdf4e8110c10dd9fae46e00d0449b8306ec4d8b8074798550db4c7426dfad5bb1d706d67818eed1c1a191446780eb44ddd905aac24060082483d956ea70f485ae329b9ad5d4e493959c4dfb5a50685d8dbad1f5aa411c0bc554d60dea7c1dbb5251991dd35eca2e5df4df11cfaf95ca763d485028d9ad1ddfabf9b68d88e824ce19d32954fcf45a789d04f8c5faaba60fd8c54f0dccd530e162f06839bde26e6a6c5cb09677ef43c22cab0ed0f7ce6f18"}, {0x90, 0x100, 0x100, "9b5c32dfc9f63901739f4fdfac259a1fccb5a70b6753f0415487d248bb12eaa7e3c62c3e9a1d4e229f016178d3b04af1996502a077ac68bc365a57b7eafc0f4c885caff83014ad3deace89e8c7858ff61f4a1299eb38161f8d8dc31f16485f44fda3570de52bc0c402f6c31f693652e77b81ea191d2a83bfa73f6bb1bd14e47034"}, {0x100c, 0x29, 0x8, "29d73a71752261db05779ec6ffe601f43c92ff07f7d9cdde0920573eda41a10ebd53148f117f6b4e9e8c91b344e24b4fa8a1d600c1bdf6d5cd58b2950af44b9a9b08c862a9e8e1d5227b9357bd03983b413c54a4f60f735ac8fb7fa6ac3ca4ed97e64fdde4ba29cb4c43c2f4ef72ad16c95cd577570eb2d2531282181da7a819e3701c3eb3cefc0770f816b96f0bd1b0db6461e2f9bd4b859f65c3df103bf1e1d125140f3d74aeb378e730fd9d7475181acd2cedc3d2348223d0462f04acd83d4f62a994cfa9c79b74ccbdcc742a0fa24a348725ec88b535442a0aca62f973c9ac163e815eab66e73fae67beb77e5b8ed0085ddf9acc44481c8b55e0e743bcbcc263e440e8c229a26fece7bea15a48a30d3d00470dcb3ad36a6556ec480fa70fcd36776e07c71d69610f0ca5ca5bb51a930e2e6004385f19a94f639889bcfb3a2169436744293ee219ab31b83fcc34aca2bf8ba1b99358d65ad1ad2ff292d87dcfd7d9a29f505fdbb755b5519b567ec1f85d3b26ebcf3646869e955b11c3d177442651b48926be479dc94fcb6946805637c31b15f44057e42c3e12eae3c407c50a530166dabfb8f62baf3d882f1d07c611b288047776329021e3548dad34ec655cddf9d8fc93ca02f23c8e41e3fa8ab12b9d3add166b05fa7a3ec3f6cde7c95f82f7592244b93d5c40ac7dfb0cb78146116829292941719326dacbb6e15780bd06a4b8a7d1343247e89338bd9d1e9d1474ad60f38d701fd89a9f0094fb8c29d18cd5c28f3d2c164d6d559e6d0cd59d6b2ee37fd6b3056b7476473bcd69cc52793afd44814880b94a32c779e75730fc66ebdf7e27d7795285fa64a94ca5e9485e83dd3000c41a6e5e4df998ad15f4871410ceded07b6d2e69fc0f9490923d643c150dec4da5571dd5d21852d93e5d137a191b2712717ffb8c9f4f5f59c0b4e01b5e0026c4fdd6167a60c096cfee7c0049025ef7f8764d1980f2ab56eac5d40b9ead61906dbfa1427ed4e4d744005b4ab5c1315450e7ae651d147554ace88c146e2147dbedab127376f391f832029e98a4c4e4da53df8f3fddc1048c8d36fe98526b2577669dd7f5ea7b57d7682a576f9a8a33917b7a06b756172fc33c6a755bed771d422f9d540b94a4586c75be0b2e740613faaf17f2625a7777200166809e4a826c65de8219ecab23de06f34bc45a228198dcdf4e8cc9d6d588a7612a14edbfc9d02066ea011bc272e1224ba7ee8d569b83243eccfeeed8c4a4e6e0bcbd03554b873de69898d6907808b45eeb4758f84a446ef1850570c72536b0dc96399734e45c826c3baf611437d1089e26f46182dbe9a2df5756ac704b0def8962c7facf20db009748d629d1d6a8fcf241439503fbe9877b3cf5e7c81d693fe807d1d38edc12e5dd77a6f502e76440bdf269e24c323c5cd02e03f6a0b5067cdcf70964a2f8c54ab41298866a8dff8cbbab3dc5aa04f42aefddcf6716cdcfe5859c16bccc77840c8d0f4509a992a670a737f526868bb1fa589ba24f86d2684f395c886bb06b5f353f69554fa307f4722db8e8c6b0b2ab958e1ff3ac1285ee95e74acc8260c63a3fae1481d3b16a0e45447fc828616c2ac4add609d9b66273761ed7d0bf192b5e13626be24b5b2e6212f2b55a283138cb5ef0eb030d4dd8b3d61e2a3dc092f58ec5b6723f4fa38f9f1d080d93a0831462845ae58e355c79e11dad886e52e4600cea66fac6b4fa6ae3bb047de9db0a9efeab7b04773f25e06b398e2fa67fab11e8362dd25acbbae16f437e461b4beda90425575d7232945246bd0072d284414c58015aa7447d56604cd56a58f7526601efbec0022b187916e3ea528fb6dc730c9461e9901f4e3bfba414e5e0e6cc7dfdcbd5f43b74621e1fe75259334b6347cd669ea66a0e194218cb9b51d8f52c2f9445b315cea83311a79382a82b513a32d52a12336615de28695c56bf3fba660c9458b6bab5cbd7ebe02d4bb0badab59f7eaf596102e29d7e0ecee835290644c52d260d2b55ce3dc3d24f64797354a5ab9e9ea9e109d7ae302cdea622e38560422ad26e14433b15252b3700471cfa526a5334c86e5b0150a73e9c2cc49b16c4ee67844ab764e89f789f50c377c2813f2792dbe54414db08b72e95ca24d6879ec9ef7fdabb334222f0f0914bdab7dd502f492c706107bf8669655ae5e3f5d355602aee3759b154b5c9644fd5383153c77341028707972bfdef2112d52b9525b9d85c94109ddf77e76ba53b8d1cb6b475a990e2a94c9a31774a8260a544c2169795842a37cda961aece4994a7925b3c9724f5dffac5ad5513c011344f2de6f1fc3f260019ef02cd2cabf74ee1f3d6fb86de91a0e6c5ffbe756a9151d482a6e06140517907f404516970e65e0745bd94b6b02562657780a47144b7457c1c613a045757332dc9d4b6ea341ec1c6f0ee65e5277d6a81839516ed7f33717b8010445bbf9417e29f7735b8b21ab5ba04945b30f04c7be6b699b043cedbb14379d2ebb278f3f1ccd0472228e06b04b3f562971a9458b5364cfb82e6b18f0e9a586d58616491ce8756ef3c1bff4b83076e5248b8b66c1554321f664f1fac1f5453220d5e6571ed7e8b7ed651de5a5ba104d114d0cbc193c2e2f8aa31c9dbe8b9d33702a11faeb53a06becdc5c9913f6118174757e3ee8585de1126b80e1a1fff008aaea39914b3a0fcf1c6cf29a4fb86dee3c26408d487e9a90e510927500c34c2daa37983aa6695223962dc9552e4ab08cd09282ea7f01f72031d94823b81afe03ae9c34bf5d9773420b4b619d83aeea86e9c6cda82696693deb3de5490758105ab55717a7f3325364f6d02cead7e21365bc6e4da6eed79e48215b3c78003eae30ad9215d165aa63c84d773161e402bb7cd779650169dd2d6a8f65255bf1227967ac2da4466c7c9798810a711e89056b653c0c2b499593ce3583fe35a9b7747a3841636203ab7ccb91abfdeee70709716d46135f04157329267878e7f73257f778c70dec04a9b4ff5251b9a225b27c271b18731eb4b1e1641c645372b23772356ec6da782d126df3632c7f01c5def5731535121e59b9bba3728efb5f13c79271c049d9bc09ce425c821f6bcaf62de28ea774f4d096653b33053b0ad5ef5f8286d1e649fad59debdc8d3b1ebdd17e2140a1dd20eb92bf09f25893474c74e2767d5996adb93da9b5869610a5ed6a3726857013133031a65f824f4c5d7931f8200c716bc06355376e27d35eb859a258848a878c18947c07bd227e0f61b2b5c9b5c8cf1d2cfed844466a78c932a7116860315fc5fe957afe74a5f907590da82641066faae7f56cc7bf9b41811f2fe0f567bdcfeb407839b216d66695d8dbaa0b3ea690287d929e20d2779b58f68fa84271ae10ea604377581e84a770bcc2a30f58030c913ebc3b9d375067ee14582ae2be5759fa42313972658fe9c81e79c3cb2437a3fb1b793d31a27390d79cd104cdd7ef831d5685c545fc61e7253bf98971bb25fec186efbbfa05a71fd197a3e9e561040b475478d33debccfef8bc005fc16e29eb8c06c226ccbec90eb585e18c2d5064a97fe73af1bc34566ba6b31afe2d73542fb7ab4dd69af883287d05a2a77ca8aced13febae2572e8e59aca6ec01bd56883913c0d7f2037aff2db960ff4654a43cb285dac5157ebd7455a6be7bbe7978cae6b6dda688ad41d99cc92433d59a49a6c2cdf89ee44465f7bc9ccd87201fa3a86b51f121dde415df13ddd74acfacb6ab8e198d8f0c6b4e3d07008e4280cabbe94a4e8eb6bfe3ffa705b1f1cb5ba86abd3f08cc8851df5b6cd45623ce0faf6ce6a8cd6c45eca64df72be7b70570dd3c817db75a2f9ea05ac8ec09bf84135cb550b690f95b3f7a354ec390d751abf5a8d64e61e04ba1ad5e220b735449db5c1adfcad5cf719b41215ef96dfa81df5544836f0d9a607be27021580a0499a92e9f10ae833bf1093408c665c771a948d0bc2ac9249841b311ce0dbe3342f4f22a038a83271ed458ce23bbc9786a885a330df85559ff5386fbf5c3927505e5e1bcc1fdd3503f187edaf54394fb9428b2d4fef8ddf9e70f4ce83f9125ea42662c05a6cb1293314dc6426c395674e66fefb4aa2b2473f67d299b0693ee75909d04757585c8ab0865c342d5c70639b79fbae0fc0baf48d3f9b53489f8ae5ebf99f1acbeda68170e2950016aacfde38604c3776d2cd1e935a608038ca49d04c36100bf73dca9fb59e8407117f621e29957c6850ad63b26d460b34e0edcbf70638a6103f8a5677d2e2bd8e8fdc6002fcb8f3c99b374ca1d16f8f400c11b2707e7ce4cf38ce87e7a76c7921e5600f8e4db1957810e222e0508f136f5a5fffba1c0fb1b0406aafc5014443bb8c8eddf55d73cda533e1ed1e7aff202349b12b47578ca49b86ce9846c1c262035c504892856920332217b7dca9b30c4b32160fa4816825636392ea08947cdaa456b580e2b8ce9e2d4a283df114e1394f4d0c5e60d50f82d363cd34ee54bf870a49a344d5f74d6e1b8b2280ba3702dd470c72b6dc4b5661923abe2c28cef6ca6f70e26b1c29295343b53819850b5e26db6091739cb7aa624671fc88ed31b138a1dd29072645f831dc76af1f6377a66439ebe1ef6a0351a22727e4524c9dd9454b2e5048ea14bbf22dbb127be23f57ffb3445c21c23fddb2e99805c322652f3af31f7ecf2de0d58ab89850aafd89a1567ece7421ab878ee661cd1c4c32750487b6c346990d3037ce0c3da451cec9bc5e199ead45133afb298f52308f491694b3323938480af07581f9e4bcbe71ecc980890571d0e8db20fc0a242dffea9bb9464dd7997386be16f630261025338cafaef7843298b41107f13e65f25aafde596e1c8a09a3e4085ab3b2b3e923d4e48c2e466682ca953355693b3b685884abbeef8d9c45c26f1fd684b182c79dcb99c3c54d68834110428be9adaf66614c9ae7c34d9ef6f9c203b6a5ace92344c854034ae90b1c116030153f8834d23ad0ead3db91955c448ae4feffb2e8e1d9df8c392c8deab93634e4b4d5be1a6294ebc5d458155d143b5a238b1429bc6524577cc6af72bd694f1b64f1e182f663ef609b0ea868fe31924a4104f7360f31ceb979813867a38f3e9f45d7470d96941b24b0874aedf5feb041cb2dc4c4c69fd160b9a5d4bf43eba9c787d445bac76ca366de65eb66e915001d9a71980ded470d5079af28a1acd7538f9570c6369ad5d62778d06b3b856227f627dfad24205211d5aefe7db7ceb551fb70adf639814b2fe59646908b97af144fff54888b53f2450137b70921a3abea44d84439e7436cd0324873681c02e865f9dfe0b934d6ed58762ed437115afc56ced18589097a1d129887dc0d938c4ff208ae9e31caabb58c71d2c81be7044c388fe145913a70150aa7d656a89d7056d55f5e38f78af634e89f4aecb0b8a7d0b0f30485d2852544535508b5678d9cc58f941395ce573215c766060047934aee9b959be42c1e1b617d6b93becc67b8ec7a535b3804032011775b7caf3a8f4a17c1ef1f7e175dca89c2378ff398f33e12198a9c118ddd0b72692d0735e4bada0ac187ac81d36529397a83540065ece845e483c7647c03daeca49fe3d6e909e8cb7662f1516e0054af9c27696231b7f017c04170f2a6daf640bd1bae17cf95fd6797f06ffb5fadb852dde0bb7e05e1bb1631a85ace7560f869a05ce1f66bed4f9b9d7701d01f1f27309d37cf9cf0c21afee15e2985383cf29df1f625b622741656e5255e17da6c33033a382fc155b72dc6bc576665f613020ee0a36b9ca3"}, {0x1c, 0x11b, 0xa4fb, "3a4eafa093b3a9aa32bba9690da8"}, {0xb8, 0x0, 0x7, "521d032a6ce5b13ae192ddef8f797f949a961500f44109a5bf4cb720ee205e0730f61f66b4fd3c30d4c598a38671e47a33a7d3c3eee03ffd3f66565c8d2e7d7b7e948341fad2043bb09de3eb6c54038ca4b7e296f7f3f3048d68097b26e5295b0e711297f61054272dc4df08980c4290b615349f260f55cc3d2274a299de4816b5ac6e4699a69b819a7db9abfe85316208084cf4c5a3578fe31fb2b80ea5c61920040f35ce90192c4c31"}], 0x1258}}, {{&(0x7f0000004540)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0x4, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xc}, 0x800}}}, 0x80, &(0x7f0000006980)=[{&(0x7f00000045c0)="f9a47bbc954aceaf56be1f944b056f653933b4add8bc02948466e62ac29cb6d45edb1cc9b9b7deb87956c99629281f5ac525d4062a0a9c18604d5dbc0df64e7e96ffbbed534e", 0x46}, {&(0x7f0000004640)="e08d6d69547a766a4cb9cd181644e9f465cd031bec2241124ad5c6990861d9058243e8d18702f0e7b8", 0x29}, {&(0x7f0000004680)="146386b2d1f420f5f57a40625f1291240f518c0462bc0ff6ca872bc0a714e0be625d9f4965316087bc237b59a393b8e0b0c7aed1665458c36d8632b2366e31856e48f758", 0x44}, {&(0x7f0000004700)="f89d926c2a9524", 0x7}, {&(0x7f0000004740)="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", 0x1000}, {&(0x7f0000005740)="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", 0x1000}, {&(0x7f0000006740)="7379daa24e3b35f947f7", 0xa}, {&(0x7f0000006780)="56571a831e07405fcab5e50c073e2a467585e1967d3efd10a6b9079bee8bc102ae581054702a9aa994b38be3709a27d0d11298545117a05814937094e7c0840be73a933ee879c869223d87ca86cb590392674e785c7d4b0fcc6a4e2e84befed094d4d0465b72238c43cfe65cabbfdbdca76ab0173b77c599c4fbb06f7387d8750136e7d38963dd6d5c0f20ed0a3a8ef14059bb34dad62ca90f55b5059e8f54ee25bf3b28816ae529be977141b66aa9049d137a28861a03118c9f9190282c7637605d900307e2071527bc9bdfee4af08513c815a96075c4f6f607c0ac4802cc379ca4fe2f7f7da5ac413da36f7429c176e9069186aba86e59", 0xf8}, {&(0x7f0000006880)="72b425d9e90839a30b496f93b0dc10e389f7768ca3253f9c207f5fc46d26f3db18ae26b7b6a3713fb614260dd02dff721f7ab0fd0e8b5823d6fac604469c233b9b6cada47cebbda8bf90fef31753f26152520ca8786b31aa8c2613f18a50542cc431cd4f8f6956b6114902e5f63f023405aaf7f088a9debb587d8f621a8f6e3a973a462190b21a505b0bf08d3cb9a134902548e0936b28d13a35be0ea15fdab38c2ddd7f7082679914cf65b4678ce4b201ac204f0fa6a0f27279b0b9509c239b58ad8ec344ae10208d5deb03bdd3cc9acd1f8c94ec4dcd84fe825ba78bfc41174ec9331949bf5dbbd86f099e8b1fb4ecbf87f8282286b8f6bbb6a7e688", 0xfd}], 0x9, &(0x7f0000006a00)=[{0x100c, 0x10f, 0x3, "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"}, {0x3c, 0x105, 0x1, "6c568956ee60d5c4cfba5606326efccedf79e053221c5d5f325d13a124f9c38f3c3390fee7c70d3b7337fd80a9bf8c0f"}, {0x98, 0x13d, 0x44, "71eac8d28c30dd30a4d31385bb39011a46cc9c4e2bcd5effcb2afc90217daf086401ed18212b496092898c319afc048f5dabf661aa49a9d6b9fa508bfc97069d79c268a59217d88d922446c039fbb8e03bb14bf2f2991fcd16bd2338264e8810ab3844ae1b08aaa11ee3cf704a172f341a7bae188cdcdd942ed4753d692fd0e70a3f5828502cd83cd0caafbe"}, {0x68, 0x107, 0x7c8, "d5ea4f2dd887ab960953be314404cf66315476f50794c8e09508feff393f1b635077fb5c40eadbe3d0a56778a312422301b54aa9f2355faae6b2748c6eabc99c387fff24a9fcf10f9386d30d49bcf3a3197bf20e41b4c727ea1203"}, {0x20, 0x117, 0x6, "3c651493315adcfbb9b56502a3933080fc68f5c1"}, {0x84, 0xa9, 0x5, "f3d8d91136dfbec3d1e6b35363525315c1c75cca1b685d32f048caee850dbd082fa3c6784045d3658a8fd366f9cf7e7a773d31034a715f820d8aeb446b2b6ea851bd05bd572a51dabc5efbb7fde73cc14fb70e7845e4c7e19c60151d89d97b7366e5c7f617208818537537dbd4544a4309aa4ede4ee39819"}, {0x50, 0x112, 0x9edc, "c3829f2fd908211dd0183728ecc9493c0b20ffbf254362e5fb4b1ebeb0991f267ddd1ef3117b9772f6e5bf44b9d61757597ee8a5ee1a68bedb42603e7086d1bf7215ed"}, {0x6c, 0x11f, 0x0, "d2af976c8a5e42ae825296fdb87347ccde2e566ba88fc1261928780da22cb2d118c15da5ef434befc5f61d2dd44c4ae690cfb2b80944a28684e6f0a7b98a1633e0e02f45e6b076f3780f855798feab6644f9fd833d25828e67c7bbb3535a"}, {0x40, 0x117, 0x3, "0eaddd6794bd75343a320f3d671be93e3ff3648abf1f0424c79f0589bdfa8228e3cce3cc6617dc47d2df03c8aa76af1266"}], 0x12e8}, 0x394}, {{&(0x7f0000007d80)=@xdp={0x2c, 0x7, r2, 0x16}, 0x80, &(0x7f0000008f40)=[{&(0x7f0000007e00)="7591c8f9d538dbf3505d7774daf475", 0xf}, {&(0x7f0000007e40)="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", 0x1000}, {&(0x7f0000008e40)="279765b3121dde879417accd6329fcc75066750ef6e933f3fed8cfae292cbd9ed0a04c0afe1ee5fd32659adae0aa995644452f3c9524c97b36af0582c1c07d7cf91098bab2947072df180b17f3ab4c6a837dcf6f07f55c48987bc07e1884736206e439c30c90c3f9af712e5fcb1a4f4618376d29652b497e3fde5309a00075e180e4ebd492410c6c0451d9bfbd2e5823927189d209aeab1c92b8f389ea90542a33ced028a6548a390e09dc5c6af5eec981774627407c0655b178425f7b12ec0e5ececd4c93bec28225d7fc5d861826dc28", 0xd1}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000009040)=[{&(0x7f0000008f80)="8c6a0d12c9c506b0cdf450e4c8ef25e0a789b8a6475dcbfc720b775c01b161e7c08ae875df5494a33e810cdc16e902cc4d877a29a1134a9baafccb6378122e2432b93300c046abe1e78aadffad9bf833fea3cb08316b25ab9a0c8c42bae425267ed29fe0530c9c369d215d5f57cfc8badd79240a16312383929679286e509db6e853ceb78d381bcfd483", 0x8a}], 0x1}, 0x4}, {{&(0x7f00000090c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @broadcast}, 0x0, 0x3, 0x1}}, 0x80, &(0x7f000000a140)=[{&(0x7f0000009140)="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", 0x1000}], 0x1, &(0x7f000000a180)=[{0x34, 0x0, 0x80000000, "086c62ae3275bf558b81fe427723bd49ddc4322c0a59d484ad6965fa8243bd026bc53b3c3d2ab9"}, {0x28, 0x107, 0x40, "111399cff1fc8bbe76acc62219a45211ce755852d077035698"}], 0x5c}, 0x400}], 0x8, 0x48841) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/checkreqprot\x00', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xfffffffffffffe83, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x3}, 0x48) syz_open_dev$rtc(&(0x7f000000a300)='/dev/rtc#\x00', 0x7, 0x688280) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001a00)={{{@in=@multicast2, @in6=@local}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001b00)=0xe8) 13:48:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1620000000000000800f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x1}, 0x48) 13:48:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000039c9d809008f6bc98a5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf2d42887b418fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c019305f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) [ 152.620962] binder: send failed reply for transaction 324, target dead 13:48:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000, 0x0, [], 0x0, 0xb}, 0x48) 13:48:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000040)={0x100000001, {{0xa, 0x4e20, 0x38ccc6b7, @ipv4={[], [], @local}, 0x6}}, 0x1, 0x1, [{{0xa, 0x4e20, 0xffff, @ipv4={[], [], @loopback}, 0x5}}]}, 0x10c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xb) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec43ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0xbb, "97b4ee7e3a860f8d692427564b26772f11205dd8c182b596b8dedb2b22a7b7f4d280cf3d39ad27ad8792f9df8655ee76e9660a16e0373b3f96e3d46f514b825ab3a044e36f9bd6081df9dcda0f051bd3329cba052c4b1bc54b2e304b89391e8e1487509a4c06b9443a110f5e3828769de597bc3e84c8f948b6b30325a4d067cfbaf207b1106023b79b4ffa04d4529b72a538f61e881709cdc78516e5bb9042c88042ac9fcfb227f448b04a526e35e512a98739f0fec7ee7b3765b8"}, &(0x7f0000000140)=0xdf) 13:48:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000250000000000000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6ae01f0fffffdffffff93c3d67af636903ebc060088eed2d245c1cd2ca3584cb8a54f9c2e229fe5606d7039dca9427f2eb9b81ec4dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220000000000000000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6c178689, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0xd}, 0x48) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 152.719237] binder: 9782:9783 ioctl c0306201 0 returned -14 [ 152.726801] binder: 9772:9781 ioctl c0306201 0 returned -14 13:48:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b40000000900000025000000000000009500000056008f6bc96c5d2c9f55dc31b532136409d0122da7d06c7460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d056f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x20800, 0x0) listen(r0, 0x6ad5) sendto(r0, &(0x7f00000001c0)="7948fd0f585e41567ee30694b32cc83c1db30990a5fbace8a7e5e13272b68336eba63bc94f00d9e60f383a3cb85a95c3135a04b8ff2daf353c2184003364d488ab8a26b223caafdcff8ec1bbb6f316fcc3b2dc69cb6ebf709306d48e10dbbe350b415b0fb489a2989455213fb7d4192d836a", 0x72, 0x0, &(0x7f0000000240)=@rc={0x1f, {0x4, 0x81, 0x8000, 0x3, 0x5057, 0x2}, 0x80}, 0x80) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x8) sendto(r1, &(0x7f0000000040)="33a9127ba2e579ffffff41ea63549f2c237f0650d707538e86c0eaeec8238e1f6118fe353fcbe71ea6e379afea5a3365682685b9549df65b9e4e9f40ffa0b19d051460f798b8edc728060d376713f78af4fc9cabedb2f89e2778c8557d3cf5120f8c03010dea233288f331c150c9e999fa5ff7a1535f3eaa03673da086be7212f60a", 0x82, 0x1, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @empty, 'team0\x00'}}, 0x80) [ 152.748230] binder: 9788:9792 ioctl c0306201 0 returned -14 [ 152.749982] binder: BINDER_SET_CONTEXT_MGR already set [ 152.749991] binder: 9788:9792 ioctl 40046207 0 returned -16 [ 152.771714] binder: BINDER_SET_CONTEXT_MGR already set [ 152.771724] binder: 9782:9797 ioctl 40046207 0 returned -16 [ 152.772571] binder: 9782:9797 Release 1 refcount change on invalid ref 1 ret -22 [ 152.808361] binder: 9788:9804 Release 1 refcount change on invalid ref 1 ret -22 [ 152.848174] binder_alloc: binder_alloc_mmap_handler: 9782 20001000-20004000 already mapped failed -16 [ 152.857836] binder: 9782:9783 ioctl c0306201 0 returned -14 [ 152.858034] binder: BINDER_SET_CONTEXT_MGR already set [ 152.858042] binder: 9782:9797 ioctl 40046207 0 returned -16 13:48:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) prctl$PR_GET_THP_DISABLE(0x2a) [ 152.858537] binder: 9782:9809 Release 1 refcount change on invalid ref 1 ret -22 [ 152.858888] binder: release 9782:9797 transaction 335 out, still active [ 152.889592] binder: release 9782:9797 transaction 338 out, still active [ 152.911361] binder: 9811:9812 ioctl c0306201 0 returned -14 [ 152.917654] binder: BINDER_SET_CONTEXT_MGR already set [ 152.922956] binder: 9811:9812 ioctl 40046207 0 returned -16 [ 152.975896] binder: 9811:9813 Release 1 refcount change on invalid ref 1 ret -22 13:48:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:33 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, 0x0, 0xfffffffffffffffa, 0xb0d, 0x99, "d7daddb1f8fcbd1b58d45afe7499670d8b232a22afce0726540fffe1664c1664c6613f2aec7ab97c1cd4e6b327b74215b3763d4bc881a97cef643a8303072a58d65dd53dead24ee02fea107c9726a3f03f224d0f9208925603f8fc31abcf80a8313efff8148ba530f4720d7f926bec8f9b585a5fd1833fe85163872b5e9a0f994bce912ce795c84d1e13076b27f975374ea3b93490274ab84c"}, 0xa5) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:33 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, 0x0, 0xfffffffffffffffa, 0xb0d, 0x99, "d7daddb1f8fcbd1b58d45afe7499670d8b232a22afce0726540fffe1664c1664c6613f2aec7ab97c1cd4e6b327b74215b3763d4bc881a97cef643a8303072a58d65dd53dead24ee02fea107c9726a3f03f224d0f9208925603f8fc31abcf80a8313efff8148ba530f4720d7f926bec8f9b585a5fd1833fe85163872b5e9a0f994bce912ce795c84d1e13076b27f975374ea3b93490274ab84c"}, 0xa5) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 153.498133] binder: send failed reply for transaction 329 to 9772:9781 [ 153.506930] binder: send failed reply for transaction 332 to 9788:9792 [ 153.518205] binder: send failed reply for transaction 335, target dead [ 153.531854] binder: 9815:9821 ioctl c0306201 0 returned -14 13:48:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 153.534702] binder: 9816:9820 ioctl c0306201 0 returned -14 [ 153.535770] binder: 9818:9822 ioctl c0306201 0 returned -14 [ 153.535935] binder: BINDER_SET_CONTEXT_MGR already set [ 153.535943] binder: 9818:9822 ioctl 40046207 0 returned -16 [ 153.536871] binder: BINDER_SET_CONTEXT_MGR already set [ 153.536879] binder: 9815:9821 ioctl 40046207 0 returned -16 [ 153.578426] binder: 9814:9819 ioctl c0306201 0 returned -14 [ 153.578717] binder: BINDER_SET_CONTEXT_MGR already set [ 153.578724] binder: 9814:9819 ioctl 40046207 0 returned -16 [ 153.584819] binder: 9824:9825 ioctl c0306201 0 returned -14 [ 153.584964] binder: BINDER_SET_CONTEXT_MGR already set [ 153.584971] binder: 9824:9825 ioctl 40046207 0 returned -16 [ 153.585828] binder: 9815:9828 Release 1 refcount change on invalid ref 1 ret -22 [ 153.586009] binder: 9818:9827 Release 1 refcount change on invalid ref 1 ret -22 [ 153.628673] binder: 9814:9829 Release 1 refcount change on invalid ref 1 ret -22 13:48:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)='mime_type}}\xad\x00', 0xd, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 153.631496] binder: 9824:9830 Release 1 refcount change on invalid ref 1 ret -22 [ 153.651463] binder: send failed reply for transaction 338, target dead [ 153.658197] binder: send failed reply for transaction 341 to 9811:9812 [ 153.665137] binder: undelivered TRANSACTION_COMPLETE [ 153.666365] binder_alloc: binder_alloc_mmap_handler: 9811 20001000-20004000 already mapped failed -16 [ 153.666604] binder: BINDER_SET_CONTEXT_MGR already set [ 153.666612] binder: 9811:9813 ioctl 40046207 0 returned -16 [ 153.666659] binder: 9811:9812 ioctl c0306201 0 returned -14 [ 153.667081] binder: 9811:9812 Release 1 refcount change on invalid ref 1 ret -22 [ 153.705983] binder: undelivered TRANSACTION_ERROR: 29189 [ 153.711594] binder: release 9811:9813 transaction 360 out, still active [ 153.716614] binder: 9832:9833 ioctl c0306201 0 returned -14 [ 153.717035] binder: BINDER_SET_CONTEXT_MGR already set [ 153.717042] binder: 9832:9833 ioctl 40046207 0 returned -16 [ 153.763530] binder: 9832:9834 Release 1 refcount change on invalid ref 1 ret -22 13:48:34 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/155) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) 13:48:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="6b00000075020060000000e9667d65872e5c70319e077bf6969437a260fe155c0229fc60c36767a84e7fa2e6333f5076afb74d55da442c23a2bbe6c040c846158e8ff50a608a183aa59f16dc520dfc7a51020900c00cb7ba2b174961a4005adea45a5bf370c499996062c51ccfa220df981aefdaa2fb6b62c63b2561e1c6a8a61f5915b54ddfba5051c5cca879719fa045eb8d6d805f65bcfa380ea47d0666f71ef644f0c735476d771180e65bb8d54c310cd5bc87"], 0x6b) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r4) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000006c0)) lstat(&(0x7f0000000740)='./bus/file0\x00', &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) getpgrp(0xffffffffffffffff) fstat(r1, &(0x7f0000000880)) getegid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000900)) fstat(r0, &(0x7f0000000940)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000a40)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@multicast2, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000b80)=0xe8) getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003240), &(0x7f0000003280)=0xc) getegid() getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getegid() 13:48:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="6b00000075020060000000e9667d65872e5c70319e077bf6969437a260fe155c0229fc60c36767a84e7fa2e6333f5076afb74d55da442c23a2bbe6c040c846158e8ff50a608a183aa59f16dc520dfc7a51020900c00cb7ba2b174961a4005adea45a5bf370c499996062c51ccfa220df981aefdaa2fb6b62c63b2561e1c6a8a61f5915b54ddfba5051c5cca879719fa045eb8d6d805f65bcfa380ea47d0666f71ef644f0c735476d771180e65bb8d54c310cd5bc87"], 0x6b) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r4) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000006c0)) lstat(&(0x7f0000000740)='./bus/file0\x00', &(0x7f0000000780)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) getpgrp(0xffffffffffffffff) fstat(r1, &(0x7f0000000880)) getegid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000900)) fstat(r0, &(0x7f0000000940)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000a40)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@multicast2, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000b80)=0xe8) getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003240), &(0x7f0000003280)=0xc) getegid() getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) getegid() [ 154.317244] binder: release 9815:9821 transaction 351 out, still active [ 154.324064] binder: unexpected work type, 4, not freed [ 154.340308] binder: undelivered TRANSACTION_COMPLETE [ 154.355478] binder: release 9818:9822 transaction 348 out, still active 13:48:34 executing program 0: r0 = epoll_create(0x8001) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f00000000c0)=""/131, 0x83}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/111, 0x6f}], 0x6, 0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d67af636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e229fe5606d7039dca9f2e1629c7067e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a632220"], 0x0, 0x5, 0xc3, &(0x7f0000000580)=""/195, 0x4000000000, 0x0, [], r2}, 0x48) prctl$PR_CAPBSET_DROP(0x18, 0x1f) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000740)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001380)={&(0x7f0000000700), 0xc, &(0x7f0000001340)={&(0x7f0000000780)={0xba0, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x160, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3659}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x400, 0x8, 0x9, 0x6}, {0x80000000, 0x200, 0x8, 0x6}, {0xffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x1, 0x8, 0x2, 0x4}, {0x4, 0x10001, 0x8001, 0x100}, {0x7f, 0x4, 0x4, 0x7}, {0x40, 0xff, 0x3, 0x80000001}, {0x2, 0x578, 0x3, 0xfffffffffffffffc}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xd240}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r2}, {0x17c, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x29, 0x3, 0x0, 0xffffffff7fffffff}, {0x6, 0x8, 0x1, 0x5f}, {0x7, 0x8, 0xa, 0x1ff}, {0x4, 0xec5, 0x3, 0x800}]}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x7, 0x8000, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x9, 0x1000}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x80000001, 0x9, 0x5a, 0x6}, {0x100000000, 0x2, 0x0, 0x800}, {0x0, 0x7ff, 0x8000, 0x1}, {0x7, 0x300000, 0xff, 0x100000001}, {0x9, 0xfff, 0x3, 0xffffffffffffffff}, {0x4, 0x7, 0x10000, 0x3}, {0x80000000, 0x100000001, 0xa7, 0x2}, {0x20, 0x401, 0x2, 0x3553a5}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x48000000000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x1ac, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4a}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x298, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xfffffffffffffbff, 0x100000000000, 0x4, 0x4}, {0x5, 0x8, 0x200, 0x6}, {0x2, 0x9, 0x5a404205}, {0x9dba, 0x0, 0x800000000, 0x2}, {0x5a, 0x1, 0x81, 0xc594}, {0x3, 0x78ba1627, 0x0, 0x7}, {0x4, 0xf007, 0x892, 0x8}, {0x3, 0x0, 0x9, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0xba0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) connect$packet(r1, &(0x7f0000000680)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) [ 154.374772] binder: 9842:9844 ioctl c0306201 0 returned -14 13:48:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffeb1, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000080)={0xc, 0xc0, "887193b117e5070348b678a614ca71cc65c6ad94c12889e046aacea37426107a742b541298f5dc27505b485219e92ec6eac0ed8270eb33ed1a6007cad73baf800bcd12b3c32f6c3fc5f60925555af39ff72bc04d3ce6633d088fa3fad9f84532805995a2c5ecee39194073b107699e8cdef6b27f64e8fc3551b8f22f729353531941d389fda995f4d0a3c6560ec3c8abfbd3f0a7883027fa79d10c2d7e848d7ef06ac4b4cc1dee2073e903127adefdfde3416ea9f568c94b5e49ea32e65995bc"}, 0xc6) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000180)=0x7) 13:48:34 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xa8040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@getqdisc={0x44, 0x26, 0x5d31e553f4e99e5a, 0x70bd25, 0x25dfdbfb, {0x0, r1, {0xc, 0x10}, {0x4, 0xfff1}, {0xffff, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x1, {0x4}}, 0x18) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) [ 154.381345] binder: unexpected work type, 4, not freed 13:48:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="ea1da72c2a46cbe708a95c00000000000000d600"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 154.381349] binder: undelivered TRANSACTION_COMPLETE [ 154.381473] binder: release 9824:9825 transaction 357 out, still active [ 154.381477] binder: unexpected work type, 4, not freed [ 154.381480] binder: undelivered TRANSACTION_COMPLETE [ 154.381675] binder: send failed reply for transaction 345 to 9816:9820 [ 154.381684] binder: send failed reply for transaction 348, target dead 13:48:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x144, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_NET={0x74, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2c9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6fea}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x14b4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x8004) [ 154.381690] binder: send failed reply for transaction 351, target dead [ 154.381697] binder: send failed reply for transaction 354 to 9814:9819 13:48:34 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) sendfile(r0, r1, &(0x7f0000000080), 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d66df636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e2267e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a20cf462676ea53401e17a84daf0c5631348c171341b86bf136f98530530fc64c0e7e0c9d5bd91ea91079b0f3c4c14365b72603a023518da6a781124414c0766db59e1209c4a0a6e0c9ebe98307c29cc72176db1cb9e80db182"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) [ 154.381705] binder: send failed reply for transaction 357, target dead [ 154.381712] binder: send failed reply for transaction 360, target dead [ 154.381720] binder: send failed reply for transaction 363 to 9832:9833 [ 154.383859] binder: 9832:9834 ioctl c0306201 0 returned -14 [ 154.383963] binder_alloc: binder_alloc_mmap_handler: 9832 20001000-20004000 already mapped failed -16 [ 154.384175] binder_alloc: 9832: binder_alloc_buf, no vma 13:48:34 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) sendfile(r0, r1, &(0x7f0000000080), 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d66df636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e2267e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a20cf462676ea53401e17a84daf0c5631348c171341b86bf136f98530530fc64c0e7e0c9d5bd91ea91079b0f3c4c14365b72603a023518da6a781124414c0766db59e1209c4a0a6e0c9ebe98307c29cc72176db1cb9e80db182"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:34 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xff, 0xffffffffffffff80]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f000000000000000131b53287653cb88104ad54ce39ea138f9f215b5fa6aee37460f1a3f21afe5902d67af636905dbc87a288eed2d245c1cd2ca3584cf587046d36a408a54f982e229fe5606d7039dcd41c36001da8a99560844082f0c072dec33ffa197428cc01007df56f5f3389b8a6b41cdc26978fc8d9dc66e2cd113b29a5be4de7bd977b801032a28ba3856da15516dd2a5ac7ec50a8be96a301eec0f7ce57bf383b1986cd9532620ff6830e2f435d18cbea69e56cb56d7be31d0488ffe64b80a7dba90d4dd08f643580985b866ab859e1719249"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xa82, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x579, 0xfff]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x0, 0x2, 0xfff}}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000140)={0x1, 0x7ff, 0xffffffffffffffe0, 0x3}) [ 154.384192] binder: 9832:9834 transaction failed 29189/-3, size 24-8 line 3136 [ 154.463077] binder: BINDER_SET_CONTEXT_MGR already set [ 154.463095] binder: 9842:9852 ioctl 40046207 0 returned -16 13:48:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x9, 0x3}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x80000001, @remote, 0x8}}, 0x0, 0x1, 0x0, "47b27503deb65f7d81a20fad177dfd3476170d04d646ca57f355efcad873f8b8b0e3db2bd232e4685a182833686ff32d3a940b0533a764fbb25d380cea91b602f1144ffa520b525869a1d23c413761a1"}, 0xd8) [ 154.463522] binder_alloc: 9832: binder_alloc_buf, no vma [ 154.463541] binder: 9842:9852 transaction failed 29189/-3, size 24-8 line 3136 [ 154.463791] binder: 9842:9852 Release 1 refcount change on invalid ref 1 ret -22 [ 154.579271] binder: undelivered TRANSACTION_COMPLETE [ 154.579279] binder: undelivered TRANSACTION_ERROR: 29189 [ 154.579982] binder: undelivered TRANSACTION_COMPLETE [ 154.579988] binder: undelivered TRANSACTION_ERROR: 29189 [ 154.625041] binder: 9860:9861 ioctl c0306201 0 returned -14 [ 154.647043] binder: 9863:9864 ioctl c0306201 0 returned -14 13:48:34 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mkdir(&(0x7f0000000700)='./file0\x00', 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)) open$dir(&(0x7f0000000100)='./file0\x00', 0x511901, 0x102) 13:48:34 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x700, 0x0) 13:48:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f0000001700)='./file0\x00', 0x200001, 0x30) sendmsg$key(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x1018}}, 0x14) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$inet(r1, &(0x7f00000016c0)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x0, 0x2, 0x3c}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc1300003900030426bd7000fbdbdf250f000000b8114b0008004d00fbffffff08004d00ac14141373865b8e00c4d14364ea19d9ba0b65fdc9a8b801582d435341b3c5174003f6c11cc98459c3e35f442e3b50d70709f301e4727dddd8ef71796f72d4473cee688816c0ebcbb65287d8601c0c7ce2773d79244bf8bf71fb76cbe007b7cff7fe046b4dfd9da31fc2fd1919ef59979b644914b7e97ddf37e52db286e01b572ab2855a7567b3439e5a77f69c07cb5fffd34019a8e1f06cb3107dee26beab95e8d5ec858e6b44f6c1cf77799efbf81ccb4bf6783029d6060334e69dd334f26c515d14aad5118def97812b06921e08de130657381b681442004a27843b895afdcd2373ce71215dfc035c28d8f81df84818825a4968763ba7ea20decbe17d6d2ff9faf5dfd66eaf46625c56efc87016f023f11fca744c5b82fcc483009042f99176f60165daa4ec825336e6250ce38713b685d36cc9d6a43d73b08dfb44ced5bb11b55122084414cc8a39b12af0f675317dd2aa9f0c003b0016490000000000006af511d5d2cd88ffffc02e98a97e41c13871ae1b03de518aab5d52feaa7e3330b88786d5bafa8bc0c17197dc92d924f2202106d3493fd51c17bed4faf12aeeeb2b7751cf8cf7727d7dd3fac8dd14ef70e2abf9394159e20bdd1ce9d4941fe7369efbbd6139c39c5556f747772741d1115931b85c0705e58e05dbdbc401803e52c78c78a9482e88a3d4b6eb8e94a566cb151fae5c3e40c50d1300a2151e705cff5c4a702bccb7a60294410ceef617a2c023f650337d576fdcdfb49cbd4ec4b0978d6618765fd3f17000017077a044d81935103379ff47c8c6c68b64663d45723e14a19fa232f556c0f03bcff392c33dfc21a0efbd8c05e46d57a4042d399fed466e4cb9cfa231c82b00f067de581a56a2b9aba8d6ed12d07ec11b89b2f26c62a10666adfff30ae7448c8fcfcfdb836ea4aa27f95b1df7e9f348d73183a8482cabca813e124f2bb612963b0accba632664b70c7e099e83f677e8cad1976bfdd6ec89fb9a52d0ddbd2c20940567b4cc0414e924dcd8b9637621afcb5efabac69b4807f53883bb06d926a7aebdcc31b590bc40ed4b233e3104742962212f845574de45b31aa6790a8bbb864329781c22a5429c307e63971e14bbad69529add8d98cec6b5145812905ec715fa1db0004e0fd71cc9f072742cf6643e7223f6ca0fa1d41d91390c721c3f11df49e5adceb3801a29347f6b83b06285baeb31aeca0172845f7df6df86fd1bd59048c4cea286fb6f4232cfba5fe52a59a1f6f1cdb8fc06d8f6f092cde3d199e43547eef67bc9119f14b6f3a943c1dfa35641e0f2d720973a2ee3d8244b146c1a711b82d0ac1d73137a7f4bb4cf162eddd2bc92ccf51ac99059c9e150d62783f53716637a16acbe0f5e38179d31216868897293b0e5e7fcbc9b70fa96d34424379247a8f1d4dfb8bc6a0dc981c39123f1e47ba8aff61fa1bc3392bcd71bb1ae8148232bff4473c657893eec5c005c1569d77017be970358433e5a92b82733736bb2f4e07adbaf9ef2ff7f121c5ef71f63a2f0be1f303fa0d664947338a1fcd0cb1a2a00b79c31dbb6f3cbee774c372a5212815e041d2bb2dd6499604c222ab2f6c7c6d927c56dc2957ab0b07336f5dafb8a2c061292521d89d65ba82f8e50552b5b116d921190163be82a6a9114ab97607099ad2b3bee082540b359269e9981d0de253573b5141db8db1ea165293081c3bf7549bc709a63e15f344eede697412ecd399beae64bbc833c01a0ce63a7a64511c0c856e7794dc4750c370aa71966f4f759426e33538ba7e495cb178ebc386c0fc3ca503a008b833da81f19ac7aa4ba2cee4863121c8359c8b29b5b5b1128964c19ba96fc1a6050532491bd3abd8936fddcd7cb8a9c1842681a324c1b9d55233611ef9b4177f7a6e83803cd23381dc61160bcefd5c1fce1c3afb8b269a570f92e3b5a850d111020690d726782d7f3b1963cf97b26c36e4f0ee3fdf86a37e55f601a61b7b55e3b884b8f09c30494bceff5a7dd0760a2293953c6ce1c5c84b4939d7e0838a2b26533cc2136dcae54bd77a955467cdfbc08315ac01edcd7001f3bbb10d4007427997c36d1fd27634505110c8343eb426c0aa6132feeaed311f0e225bf0753e7ed23b374cece83a0fc8bdb8c00b64420f818627b69b57bcb87bcbc36d84c198fca8eba8abdb9172bfad7a9889194766dae140603895def2fdb587676beba3d7ddbaddd22aa027282de075fadb094d143bb29bf896ac2c2dea22612a8918dbdb28759b4b262b105903fd4e76bde02c37af93361b3b1b9c65f46290142ba0fb30f767d30738086d3641826b91c593b9ef9d3689a5e566a72c39840ca21adfa907f7f06aca9a19b242bdea2975440943d6653503b085dac68ba23f85fe0b4c60e4701788ecec6ff6f182c50cebe9e36a56a7d6958feba998314d8a7cff8085a64a7929a6dcbbb0c41068af7e6029537996d36bd142de745341c3d40903d1396d63d60f5e001bc5f7cfe283d4bf4935218e4fe290bddde60e32f385dfb743a2cf233281e5916d49053144d579be26c4c012eac836ad92c23e347acbe961fd14d0410d190743a52774386700925b011a9a1883a5eeadec27965192824182076067c4a91809fccc1746adb45971e6cea00c0103e2e3d497d7a3fc1c9ace3aa352e3cc3057c710ad3ca6640030156f08b1d21d092cf46e20edbe1e48daf73d3d7f038b95a24bcbeef13a42f4cce3ea7f979852c97c16fc7dcedb7c18102d8a843dbd6b45efa38740b2bcfa0d8ea09bf9ca49bcf43e23c3d8678691589257f0a182343b77a9ed36670221b5a07893e0bf183802715e2a850c9b37778ecea5700634decf8a9bf09a336aa49c8d82d36371b1bf778679a48a7d0d8bb01b2bcdbcafdccf5cb4a32f62d14ba0e38edaf0651bbb70baf3c5a791935b06854348912abb66cc028c729ba3bd75386284dbdcb1a63bd90701a77a4a329004a5577532fe5b765918eacedd2b8ad461962a503b018d6ba267463f3fb09813c3ff19702cef6b8048f8b9ff9b9fb0394a53a997335753eac9bead70b80fa67c2f94299797815aac89afc7d6ff2f1e4805dc0ebec5c2367a834f4e219ad2681b2f247565f77d034b62c0d864b73d179e17ef796686db7aa0756cfe8bfadea2dd18a16cada2cc4ce50b3124d7355bcc459dc813c4342d946b71c172015fd2ad1e3e5b49bd1abec068203002ec28b4aebeddf551b833e9895a0b34049e5c8664f9e656dc0380debfe2962f8f0f5690fa63ff1e852817a7900a3367335a231b0c697cfe7e0bca70eab1f5e9d49a926352676b7f24c1b8ca8e350daf7e6db56a1810b70c369ddfbdfb139fbf166fb796002a5fe7292c347c338cf4a8fb7b7cbb119917551c0a178eb44c9ed4f93bc0acf9ad5518d4833e43b42ba323b0f09d2e51ee6dc52f92f9306c343bd6c7a4b46d271ab496a4bbf2989bf4b51d45b674eb56a4a9a85e4040dd22ae3f2c57482e66e9aeb8e38df74cc61d0f5c66b3cc395f14bb8a347a47913a2e5e7ca5b4c5ac981b594128e1721cab8e2f02046e294556498a53e6a30af1619ca7e70763bdcd3ed3d75123282da79a4658caf9ac19d896737a3af6057f42c82746b55113a8259d3921f3f3d57caf7a98f9af8a5db2d33ef880f547b0dd18b939d435ab1110809a2d3e2f2d6711ec899922c46747ff2f9efe89defa3dca41cf0f5d04883b7ef7f8d4bcad349f09f1516faa8b2628baea24939bea7b12e6d8d458f2d9b94c2ade5e06c28c96200c6f333a24f7829a90dd63f80022a85165bde9ba703e2fa64c945a939a40f2a10c54af6c453b4d7e41eef6fd2bc00c0bd7ba4e1ef50d9fdc22e20fbfb83ad3f89951ce48d515855b96f8b68aadadc263aad6a85665f806664f5bf9886f1f33cbbd9ee524f81d2a267cc553143afd6ab088f3675807ded9eb6d5853ae5f5662a578dd37ec1fe725390e902559f30bd6891f9aaad5a929a35e6356e0249b59a45c8c5abd789ca3b3dd1e86c87a41d350a18848ec6fa43ad461931eaf749659191be50aad14bba5b7ac60e32da85b8968ea81d0acf1b952c75360b3ce5dcc7f30a271b3cb291a91091687f56cf2bb0379481fe8a143f5da1a358f5be49892aa6f932a9e78de8c6a0d037f35eac773b0fa91fa7d59f5301edc1d2cf42fcb638f476a0a203c2ec81fbc8d5bb6ac6b5a96878080ca4fb30bf441ad35e7ff215d02e9383053eddb13ae091b58ddf398c70d46de1028060ad7ba0ec12c33f263dfb6724591fe9ad3f989b8f7037dbdd7e6244ed6b4ee0b1950cee4cedad9ec7dc8c19226a3119f5c0d2514806048aef85807b4a2e6460fd62b4c3e6d676579d402d689cdd5d5b7aa321fdd6f97c26babbecfd3ebfdb6891be542588989b6a211cb7ab4c2be33c70b71a898fda6f95829d88cfc140d4697550bc3196579afb705097ea196821c1705cca30ee12c07374888b274bff539eb01ee6bb4b13c253e8ee6bee8f5e79a81aae38027dd08ce44659dea5b4cbbd3d84d14378b2d94095318e6a1181c7e84168cb9a756db4ccbe2b9aa5dcd11abc92f9923405b3b85548b69188f259171d229fa4e222d0c976a8b8b0bc815d01104bce0a4ccea33f9a6e4b6156d2d534d43523b025a44afae802c02868817d7f38ba90b122930059b6e114818d8d54b2b644a40549e4d26bdc1c7183dd4dd79e0f1308469acf14762600857333bf05e04b48ed4ebb097c5662de02771c53a34a48e3c1da238862ccb814acacaf28b818ad2db71290f68d54edcdadd0f263b3dc6158bdeda4b940655faa7b7804b2264f13532b73c30fc18059ef9aa10d007c1213cf1c02f600172380c3bc2a22d0f010aa2b277a59248d348049f80523750713ec40a25d5c7e1caeba832eabea6f6404768f883e2cbe3fc00b1b1aea25f8ba9ed2b75cfdf80fab78f0b19bf28db003ed576e23a2a3c66e330e247467c91c7357a23162fc45857bc587bf31e356b6b406e89e3495ab1d05969d46e68671fff27d0a7389249ee777193de5b9f81dde222083faa612adea69bbc37c96beea06956156b174644a63b731eacf3141b170d0ddddecc443272b85a256608df648a1a10761acf569efa81b4096881cfede40acc233f6225a75b3f899a895930ff09c9406f85fc3c301dde43af3b4a93aea15cee5f557188f3fecbf45ef4f2ffbf44ee18ab010b5df37a9e638d7f72fc80aaaddda6e8d723dffcdf9934a3b7ea8276190cb793be97ca0e1bc299ea165afb170a0ea4f5df7bde7ec588b443d21b67aacb0386debdf446fc315d9bb7c6bb2d53f61db604214272ee7216ceb6439261ad8b0578b078c0a5eefda3086f713df56587bedffbce09bffc25507aacd1810880a8271436c6f770d5df6462bcfd55098f3c7dabe723f23990b9c44d8687f5fd4eef9dfb37d8ddb1861a3be047a0e1fb0431db384f65656861b2c2dd9a27feec30f71e128acf71011ca6a2010a2c2e4c81dd5753d845d1b0d39a2044356b0847f5cc0e57dc4a744ed750cae7bbd17219d454e4a4b9d650da7d449c15764388787c1b4def8fe9eb25f5463e64675c263bbf92f2dd29d5f70e9b3004817d96e4c1cadf426bd2f6896c66199b1a8f6e72ed1e0793df9304e7a722d36aaf64c725813644c02420c4b9b762751b835bfb52569a0fbc38c995ea25431436fc9561d79b3515275ab7c440a27450aa22fa88e5cf70ae95a82b382e62eeb245a797efd37545d6c682da1193c191b71108bd878027fec0ff801ccab9c354d1e026145bafb49529199911a70383245848cf5735b0d10d8dc504dd61f30a28794b1e378e1d73c249ac0e4e6f29bdc01e1b4ed0a86d6a477165a7f5c41a32d17610866f62934e3bb9ae0e9c6a9fb038552e0e9fc4fcd63a27d44df24d7552f5630d02b127b022732a6a5fcc001b0715f05339088a6e9f7589e91cbbc41c6dee4f6ba46d46b0a045c0190d9c8064e1805f496d034d84d8dc970281cdf89dd49befb41473b06d7ca66e7729dbdf44f585667295fa0875c6de149415a5a9c8b88356c400765baa9744b2babd44178954c3a6a1b66f91f2723912bc0021eba43d720d954ddae51b6bd87d662966c2f22c8eb14c2fcdf2eaea7f547bbc5245e012972a7b54dac8ff3ae30257ce4e1101b604b26d97ecdf88f3aab2ef2dba6419e1f54b270f12f9a75e6c02f6758dae17e207cb71ba9f6573730b7119a7cc581f15e31098c81051b0ee026e95ac6eed34f01245e8cd83c47c127ab95585228ea42079fc92b49695b24bc5d8130c16d00efb6d214354a3945e52a9b521687cb9e8cded60f766af96939c73dc2cc53914904075c09b83427dad23e1436e41487bb0937ed81b957aa4eaeedecc3247752566d76fe5f5ca31d19b0320f03000000a117bf8e97270e1d22bf4240f80dfbdfec1bb3b5cac876a3a378fe4933b261494d83820800ff03ac1414aac5dc229637c5cf93e5e7a24ffe960a0f6e374113f4f789c811c0d4297a2add7403d2f993aaf3b2164383644ca3bbf0309b46abe08c20d96e1fb069e429f6e118808b917fcf1bb21bdac11008002600", @ANYRES32=r2, @ANYBLOB="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"], 0x1732}, 0x1, 0x0, 0x0, 0x801}, 0x4000010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000002800)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000001540)={0x3fb8, 0x82, 0x9}) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000001640)={{r3, r4/1000+30000}, {r5, r6/1000+10000}}, &(0x7f0000001680)) [ 154.647256] binder: BINDER_SET_CONTEXT_MGR already set [ 154.647263] binder: 9863:9864 ioctl 40046207 0 returned -16 13:48:34 executing program 4: sched_yield() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {}, 0xfffffffffffffffd}, 0x45c) clone(0x1000000000001fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000880)={{0x0, 0x80000001, 0x0, 0x2}, 'syz1\x00'}) 13:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a383f10ee00080000000000007300000010", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x9, 0x10000, 0x3ff, 0x8, 0x6d, 0x6d77, 0xffff, 0x907, 0x10000000000, 0x401, 0x8000, 0x42}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:35 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x171) write$UHID_DESTROY(r0, &(0x7f0000000040), 0xfffffda1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) 13:48:35 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20840) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet(0x10, 0x80001, 0x7) clock_gettime(0x3, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 13:48:35 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x7, 0x3, 0x8000}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = getpid() prctl$PR_GET_NO_NEW_PRIVS(0x27) sched_setscheduler(r1, 0x5, &(0x7f0000000300)) futex(&(0x7f0000000080), 0xb, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0), 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="bb81c51dcbd399d9ede6e0e3e249b0ccbce78d8f2e2814b33ce344ab740bbd4ea4fc3d53f333ad26529a6575b704d40e815ecc1152470d2bb1ac34688f7cf560", 0x40}, {&(0x7f0000000180)="2e7afa1b30313a1fc63f936d8429b48710", 0x11}, {&(0x7f0000000200)="f0255283747370464fdb9ce241c468b6f64c9c8fa8d9bfeca6ab243db9e4d0de4a39247c16404aebdd27ed3ad842d28106377568483d868e78a79e904a3baa8db45042d1dd8c50688cda98627729f80b23819d640878892df88c870f1caa90ef131af2a6755ac1cf232a95c4ddbd360942a197123809428051b72c6a1c5ccfb3ed4cd0f97cf61cf905e2a038ad342dadf4c3334d", 0x94}, {&(0x7f0000000340)="7b63f73ee345c6b38f7eb52376c2fd7a7b9ce5c6c8ff4fe8e8a4e8a0043ac154f0435f70c9b78a76482830608ad27ca8cf4bd3d4025ff1ed37c73b035902e4b01cf652fe63bed4b8e77cad8a543d679f87cd6a6196da4ff6e6566e4883d13a6ff11125908cb35f2318ea2f92470a69a3742c26196e1528d917207a7f2ee98f431e3a0691a8acc0486bbcfdace2cfd8205c9e1e575f", 0x95}, {&(0x7f0000000400)="495e9939ddaebf892e7b8f83520a1a38d67d5596218e790c99dd550acadf8b43f4e7396a8380555672e15493201edced26e93d57636fc04dee3a66c9f84cd7e7aa1e7327c6b8cf8f953c2301f935e633836594b2720519116d5c847ad826bb15b69413584d8e8014ca9d70d5bf5badd7615ace08c5aae59add2ebc01b83460810e31502f165a81f84c0bd56396a3aa5006aede9fd4a88c2238744e8ae7742bf6bb1d0ddf2a720869e09dc2708e74741571fe26c9f72b11415deb3fa71959d7a02b1c43cd01997bfe58aee268dae560e4147710c2096f71f2b0ac92ebad5886f9fc06d010752a53196f", 0xe9}], 0x5) 13:48:35 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x100000000, 0xfffffffffffffd4f) r0 = memfd_create(&(0x7f0000000300)='$*\x00', 0x0) write(r0, &(0x7f0000000340)="51ee11aeff83d58d06", 0x9) openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000005, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2000000000000094}, 0x10) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000200)={0x7fffffff, 0x2, 0x0, [{0x0, 0x6, 0x3, 0x401, 0xffffffff, 0x9, 0x102}, {0x7, 0x9, 0x6, 0x3, 0x3f, 0x401, 0x8}]}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000100)=""/126, 0x6}) [ 155.419603] binder: send failed reply for transaction 370 to 9860:9861 [ 155.427064] binder: send failed reply for transaction 373 to 9863:9864 [ 155.434044] binder: undelivered TRANSACTION_COMPLETE [ 155.434425] binder_alloc: binder_alloc_mmap_handler: 9863 20001000-20004000 already mapped failed -16 [ 155.434973] binder: 9863:9864 ioctl c0306201 0 returned -14 [ 155.439706] binder_alloc: 9863: binder_alloc_buf, no vma [ 155.439727] binder: 9863:9906 transaction failed 29189/-3, size 24-8 line 3136 [ 155.473694] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.473708] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 13:48:35 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) sendfile(r0, r1, &(0x7f0000000080), 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d66df636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e2267e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a20cf462676ea53401e17a84daf0c5631348c171341b86bf136f98530530fc64c0e7e0c9d5bd91ea91079b0f3c4c14365b72603a023518da6a781124414c0766db59e1209c4a0a6e0c9ebe98307c29cc72176db1cb9e80db182"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:35 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20100, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0xf720, 0xf) tee(r0, r0, 0x60, 0xa) fchdir(r0) pipe(&(0x7f0000000300)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80141, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000200)=0x9) write$selinux_load(r1, &(0x7f0000001500)=ANY=[@ANYBLOB="d758b0237611766e5cbf833016557c5f3a208a4e1d8d0b9d51154afc1df4748141ef0c5bef480bac7a973f8920f7f185c95121b48c7d40163e5237a069750a51f5c092891b127721fa7fd6bcc59231759189f1edf437fd18230d6ba6c85d25c81467c0efce370f1492f4c95f6a1cd9141460326e608b277cef0f31582655c215272b852171534352ef0800fc51531eef6f03efce1ec4ec2127", @ANYRES64, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX], @ANYPTR64, @ANYRES16, @ANYRES32, @ANYPTR64=&(0x7f00000012c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="4644d220fc92b15be84316361f0852c045403d6a4c3c0be26910a8697942035ffa131e367d80687e1fdc579919b8e82c07f5933f757e30520f9bdfa01df2b57677dd404b80fee8db542af4425d30e2f8c6d9b77914ab48913d65146580f35db1b4c49e8d0a64c5697acb176a2ff00efe16", @ANYRESHEX, @ANYPTR64, @ANYRES16, @ANYRES64=0x0, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYPTR64, @ANYRESDEC, @ANYRESHEX]], @ANYRESHEX, @ANYRES32, @ANYPTR64=&(0x7f00000014c0)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000001380)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES64, @ANYBLOB="5edca680b1a0c9235f699a38ba7da986d310b454f974a4ee142b703036c1bd023477fe80517e64dbb53efe6605d2da8c0cdd793855951e45184802e178"], @ANYPTR, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYBLOB="1a91600fc25ebecd2ea8a4c25c449dbb5d2ad915e35f1dcb0b0baaf11856830302d31cd018f6748acb5900e9db42507a1c4d9d60af7cd64514306d7b2c572014711999be440fbe3498ebf1b19f268559ff2b8117853c29552f24b87b3c8924"], @ANYRES16]], 0xffffffffffffff70) 13:48:35 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x171) write$UHID_DESTROY(r0, &(0x7f0000000040), 0xfffffda1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) 13:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f00000000c0)) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0xfffffffffffffffd) setsockopt$inet6_buf(r0, 0x29, 0x80000000000010, &(0x7f0000000040)="06", 0xffffff48) [ 155.473720] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.473733] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.473745] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 13:48:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) 13:48:35 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)={0x8000, 0x8, 0x0, [{0x10000, 0x1f, 0x1, 0x5, 0x9, 0xfffffffffffffffd, 0x8}, {0x4, 0x0, 0x7, 0x7, 0x4, 0x7c84, 0x4}, {0x1, 0x64c3, 0x8001, 0x6, 0x3aa, 0xfffffffffffffff8, 0x9}, {0xffff, 0x2, 0x8, 0xbd7, 0x6, 0x1, 0xfffffffffffffff8}, {0x1, 0xff, 0x4, 0x0, 0x5, 0x6}, {0x6, 0x6, 0xffffffffffffff59, 0x6, 0x4, 0x5c1, 0x2}, {0x8983, 0x2, 0x7, 0x2, 0x4, 0x1, 0x9}, {0x0, 0x5, 0x6, 0xcf, 0x8, 0x10000}]}) fsync(r0) r1 = memfd_create(&(0x7f0000000280)='GPL\avmnet0eth1\x00', 0x3) sendfile(r0, r0, &(0x7f00000002c0), 0x7) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000300)) io_setup(0x3, &(0x7f0000000340)=0x0) io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0xdd, r0, &(0x7f0000000380)="b07084216bf1875b3c2320af9bb0a6712fc619f7ff4f6f080048d49def786e5e8d1a305c8cc09906e4f184d1a3aba23065f0648d1739417a7de0eabe88cfb748d83f926beead6c42d470145a6ac3226f2f91c025a81c57eee4bf4a30c6c8a4418bfb3d19c184ca330a89bb3ca98afd1619b9e3ab81def23b338dd199c3b26e85c31f", 0x82, 0x7, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, &(0x7f0000000480)="d4b4756c2d8087e4a836209121f0", 0xe, 0x7, 0x0, 0x0, r0}]) syslog(0x9, &(0x7f0000000540)=""/4096, 0x1000) getpeername$inet(r0, &(0x7f0000001540)={0x2, 0x0, @multicast1}, &(0x7f0000001580)=0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000015c0)={0x1, 0x3, 0x81, 0x0, 0x8}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001600)='gretap0\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000001640)=0x406e) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000001680)=0xff) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000016c0)=""/186) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001780)=""/11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r0, 0x50, &(0x7f00000017c0)}, 0x10) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r3 = dup2(r0, r0) write$FUSE_LSEEK(r0, &(0x7f0000001880)={0x18, 0xfffffffffffffffe, 0x8, {0x5}}, 0x18) ftruncate(r0, 0x7ff) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socket$nl_route(0x10, 0x3, 0x0) sync_file_range(r1, 0x7, 0x7ff, 0x5) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40047705, &(0x7f00000018c0)={0x0, 0x5f}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001900)={'veth1_to_bridge\x00', 0x8100}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000001940)={0x6, 0x1, 0xfff, 0x7, 0xfffffffffffff801}, 0xc) io_getevents(r2, 0xfffffffffffffeff, 0x3, &(0x7f0000001980)=[{}, {}, {}], &(0x7f0000001a00)={0x0, 0x989680}) pipe(&(0x7f0000001a40)) syz_open_dev$mice(&(0x7f0000001a80)='/dev/input/mice\x00', 0x0, 0x44001) 13:48:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x34, &(0x7f00000000c0)='md5sum\\GPLmd5sumcpusetlowlan0&proc]vboxnet1vboxnet1\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r3, 0x0, 0xa, &(0x7f0000000080)='/dev/ptmx\x00', r4}, 0x30) ioctl$TIOCCONS(r1, 0x541d) 13:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="5478a071e79886bacefdbe2179386b9ff021d645a4b6c60ef4767565d14da5c6cfeb42fd3957c7921c4c1d95cb27e589cc37ad208e543a48603f9a8c4aaa867b7cae3b8cea6408240d1987fbb1a68a4444232c08b570c14efd05b11edad7ef329189ace9934e0384c8cef870e934547bb5b9a68e9c3393d7dbc5330ade3a9c6f09b1a4dc41514c9f2c24dd16c3d4218d19fa0b428d"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 155.473757] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.473769] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 13:48:35 executing program 2: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) r0 = socket(0x10, 0x7, 0x800000000000000) ioctl$sock_ifreq(r0, 0x2000000089f1, &(0x7f0000000080)={'sit0\x00\x00\x00\x00\x008\n\x00', @ifru_data=&(0x7f0000000180)="adf985b8d39b968aa06e6dd52a129c452bddaf7c073a95c48fa9ec914bfd6758"}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x401, 0x4) getegid() [ 155.473782] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.473794] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.473806] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.473819] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.477644] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 155.483370] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483398] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 13:48:35 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="7f7777a5fd133e6f095bae7abd1b14f78c15160a3f0a581a76a3a15f9c89007e8da7b713178642fc618a983c65faf60d825b99fd860d0ec96fdba1988203f7b110edbb24e12228a47707349ca357ac14fffd9ba4cce135a7d204"], &(0x7f0000000740)='./file0/bus\x00', &(0x7f0000000780)='sysfs\x00', 0x0, &(0x7f00000007c0)) 13:48:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) sendfile(r1, r0, &(0x7f00000001c0), 0x326) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x154) sendto$inet(r0, &(0x7f0000000000)='u', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x3ede49b1}, 0x14) shutdown(r0, 0x1) [ 155.483411] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483424] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483437] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483449] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483462] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483487] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.483500] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.486207] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 155.509744] binder: 9914:9922 ioctl c0306201 0 returned -14 [ 155.510150] binder: BINDER_SET_CONTEXT_MGR already set [ 155.510157] binder: 9914:9922 ioctl 40046207 0 returned -16 [ 155.511364] binder_alloc: 9863: binder_alloc_buf, no vma [ 155.511383] binder: 9914:9922 transaction failed 29189/-3, size 24-8 line 3136 [ 155.513198] binder: 9914:9922 Release 1 refcount change on invalid ref 1 ret -22 [ 155.523700] binder_alloc: binder_alloc_mmap_handler: 9914 20001000-20004000 already mapped failed -16 [ 155.523787] binder: BINDER_SET_CONTEXT_MGR already set [ 155.523795] binder: 9914:9924 ioctl 40046207 0 returned -16 [ 155.524405] binder: 9914:9922 ioctl c0306201 0 returned -14 [ 155.531600] binder_alloc: 9863: binder_alloc_buf, no vma [ 155.531623] binder: 9914:9925 transaction failed 29189/-3, size 24-8 line 3136 [ 155.579470] binder: 9933:9936 ioctl c0306201 0 returned -14 [ 155.592005] binder: BINDER_SET_CONTEXT_MGR already set [ 155.592017] binder: 9933:9936 ioctl 40046207 0 returned -16 [ 155.593276] binder_alloc: 9863: binder_alloc_buf, no vma [ 155.593296] binder: 9933:9936 transaction failed 29189/-3, size 24-8 line 3136 [ 155.593399] binder: 9933:9936 Release 1 refcount change on invalid ref 1 ret -22 [ 155.607227] binder_alloc: binder_alloc_mmap_handler: 9933 20001000-20004000 already mapped failed -16 [ 155.607328] binder: BINDER_SET_CONTEXT_MGR already set [ 155.607336] binder: 9933:9941 ioctl 40046207 0 returned -16 [ 155.610042] binder: 9933:9936 ioctl c0306201 0 returned -14 [ 155.611646] binder_alloc: 9863: binder_alloc_buf, no vma [ 155.611815] binder: 9933:9941 transaction failed 29189/-3, size 24-8 line 3136 [ 155.663490] binder: 9956:9961 ioctl c0306201 0 returned -14 [ 155.663598] binder: BINDER_SET_CONTEXT_MGR already set [ 155.663605] binder: 9956:9961 ioctl 40046207 0 returned -16 [ 155.663782] binder_alloc: 9863: binder_alloc_buf, no vma 13:48:35 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) sendfile(r0, r1, &(0x7f0000000080), 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d66df636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e2267e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a20cf462676ea53401e17a84daf0c5631348c171341b86bf136f98530530fc64c0e7e0c9d5bd91ea91079b0f3c4c14365b72603a023518da6a781124414c0766db59e1209c4a0a6e0c9ebe98307c29cc72176db1cb9e80db182"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_execute_func(&(0x7f0000000440)="cd8075fcb0b06969ef69dc00d9c4c119f652007d50ee8adcc4c29dbba8feefffffd7d1b0b5d9730000007c2a0f07402ef6060a8064797f41400f01efe5e59d7d2f2f1c07c40969a8bd000fc4c16194cddfde9f") r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2208}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x210000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) getpeername(r0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 13:48:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000301ff07008fbda33d88c000001018dd"], 0x14}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\a\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) close(r2) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000480)=0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000c80)=""/4096, 0x1000, 0x40000001, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 13:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="da92600e1000a6463e452a4ec4f69e8cf207cf302b2ad5ae9b988e986d5b5f301779765c07446bc191ccec4f5754c43e255ad9096149f7ab20649ad26c28e53635a1fc20a3342cabea1be5368ef01fc9d1", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffda5, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:35 executing program 2: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$TIOCOUTQ(r0, 0x80045430, &(0x7f0000000200)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x0, 0x67, &(0x7f0000000040)="13a65c97b3c294ff50c10c338d6fd2d7cf4e152661ecc35e3d199d241ce910de8a400cbe6edd526b7eaaa7642c2d2295785d0173bba728b2c52322166c18895c53484dfcecb90bb4c13b089c849a4dde6974cc0d58b576dc240eda478ec101e0a789c73e05fcf8"}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/111) 13:48:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0xfffffffffffffec6) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x1000000100) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='unconfined\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(r4, &(0x7f0000000380), 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000380)) write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x243d44db14b1828) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f0000000400), &(0x7f00000001c0)={0x0, 0x0, 0x10000000}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="0000bf75f10000000004090000dcbc0100cdac1a37be54833f76511cea4c14084d700000421412de230766e7176d8f420a560c04b7f66c09370ca86cfb01bdf502894800c62a7836b4fe00000000000089b563196ac066ca9c571722187c6e71562427097885f019eb6718c53f13991f1540eac9970196c922808a5837a1677ba7020e0dfa12629783d7b6578bbc05b994920486132fe79803000000d7043d9cc46c4a4ce60fa9a065cee9a443e8421d98320206387efd15f48281c249c8ceb5d0b6ae5cfd7a63e542346ff12473d3b72690e5b85705000000000000000b3eaa702b407d26692ab3dbcf4f6e19a353acd3f4d93a1dc8578a701a156380e5e3d1260102b06d0f00da67e0392fc6f968607c1765b58cb23995c60300001b8ad004375231253d71bc000000002000009c7a00000000000000e9141d069b4d7b591e95829b4e6112d738c617851f434885fb01beddfd01bdea651ab98521dbfa383ae093638339a4b5afb0350af4f2ba3cbbfd2e4f181f00000056e7e2258f5d6808910a4106a27e6d2b1e2d39259a612f2f0c5760e9727fe26bfe63d2fa509526ee702a854c896fdd52208acbc220de15c78576b54594d5243fcb40000000b2be824df3620000000000000000000000000000000000000000749f7efe796302dddae373cbb20938f09e28c5a4dfa479bcf2c2c9ea9b0000000000000000000000000000000000000000000000371d50e5feb3d28e5052c4ebbeb52a2c3ee408eb0cd6ed836df462c021bce91d3e0db87ed7a8a91150cc4457bab96ce5b5589bbf27f8f15be157654d84bbffd6755f391b4031ede19b8e8b60ac1ffc0e2ee55828e4396c2d3ce48b50ed1a475d8f6947de22c59641f31b698b4c401f41e79c795ac1717017b2ae8d475f9411fa2ef888c66470781b04ed5e3a00a16cb94ccf3b489dcbcc3be276e0760c8ee40ccc1e4e07f3e0ceadacabb40de2accd4f31d6922ed9f5ab3096ad85ba5fa86dc2efaa28000000000000000000000000004447a1f3cd95bbebeb722f2d2dec3d97c3cdced7145f40b97f429adeda0ebcb278c9e7135a61314e0f05360caad2396107ec46efb35d44261177e2521d4c3720210616a041446d9764136ae618320cd762b2117da116e0da85754842b530000059fae0e19bbffffbf9323da6930ebd65b054016790213938db828f65ec7789d120a4a9566a94d0de5073224ba10d8ce14894ed166fd303aac42a99a92997c36cc88b468fe69534f86c41816ee392dce38d737318586dd4ec0f69e9ddaa9beaeadfbf4c15c92cbcb22ea6687a7b53ae2f798305c1a4edd7445872094ad5145bbb60416600fd0beb82d450034385b72b17c77da8f8b2da9ae3886db4e21405bb0dc6bec84e39ca939d92a76a5bdd8c8e0000000000003156fce2b275293e57a927e7c6d36368d936e8178cb0784191b75b4da36a26b937c57c581a06f11927112fa87a67164223e30b4e3b053ff12ee1dff66ff2551df165ecde06bdaa06a217b0ccebcc7e3b5f26599106083e225f15aec74b1e6e00f8db37985cc162f1d064cb3c83b956aadac3a39813b652578273451375b8311594789bef3918ed50e6da710bb5656214165a41f08ee5ab479675bdd44ee8d1ede3f3e7cbe88cd97005b8ec41bd4436bf1e72be9c73b2f53c94b5770a6fe418db3511b8b5138a68d796c140e0000000000000000000000000000000000000000000000000000000fc9e501f24301333d88999ab9fc5f01ed1cc658c62d8211b827945af1a53e7f5eeed972cf3bc83b892fbb88e4ca838eb895a5ebafd7cebf260124528aa0850893960c421f739ef493ad8f03cb6ccf116c1991eb5adb8c7efc213a690c6b1fd5303afeb738769b57d0bb28d765a53a7c5ba89a58cb2ccf5888077a7b7b2b63159a339c2108d546263e443f41abae6dcdc8a8febe3fdda588ba23890937319414d97cb2a7c8b000000000000000000000000000000"]) listen(r2, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x308) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001e, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 155.663801] binder: 9956:9961 transaction failed 29189/-3, size 24-8 line 3136 [ 155.664151] binder: 9956:9961 Release 1 refcount change on invalid ref 1 ret -22 [ 155.673257] binder_alloc: binder_alloc_mmap_handler: 9956 20001000-20004000 already mapped failed -16 [ 155.673355] binder: 9956:9961 ioctl c0306201 0 returned -14 [ 155.673386] binder: BINDER_SET_CONTEXT_MGR already set [ 155.673392] binder: 9956:9964 ioctl 40046207 0 returned -16 [ 155.673506] binder_alloc: 9863: binder_alloc_buf, no vma [ 155.673524] binder: 9956:9964 transaction failed 29189/-3, size 24-8 line 3136 13:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8c) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0x7, 0x3, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 156.053195] binder: undelivered TRANSACTION_ERROR: 29189 [ 156.076540] binder: 9983:9991 ioctl c0306201 0 returned -14 [ 156.076646] binder: BINDER_SET_CONTEXT_MGR already set [ 156.076654] binder: 9983:9991 ioctl 40046207 0 returned -16 13:48:35 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) sched_setscheduler(r2, 0x20000000005, &(0x7f0000000140)) getpeername(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000004c0)=0x80) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500)=""/142) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x7, 0x7fff}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 13:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'ip6tnl0\x00', {0x2, 0x4e23, @loopback}}) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 156.076817] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.076834] binder: 9983:9991 transaction failed 29189/-3, size 24-8 line 3136 13:48:36 executing program 5: r0 = getpgrp(0x0) ptrace$cont(0x18, r0, 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0xffffffffd5064805}}) r2 = dup2(r1, r1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@local, 0x6c, r3}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) r4 = add_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="1f689cd95d8b4b12f1beb0dac56614cc1d209dfd913136fc407d68f473dfe58f51fc8b74bc2584e01fc6f55057c53103715a658b3052c9f53956f129d77aa3383a5ba2d18b224dfa33ae17f54b6e6d0750eaae7401b18d40789acf27875d19265ab8f5f1ef5769f86b7adf625afa73f7603b95dc3559a0de98fd56cb9a047cd83df71ea26f9eba6156e2564c601a976f11571311f75f0270a10b4e117ad4f8669cecbd89edfcd6849a05d1ce2d8aec2e0c92cdeb5bb2c026b3948b87b0fc742a924f88d351b0fb838bdbf2d95a7fe32dea49451c8791095c011a7a269cbcb0cc454d", 0xe2, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) openat$zero(0xffffffffffffff9c, 0x0, 0x20080, 0x0) [ 156.076935] binder: 9983:9991 Release 1 refcount change on invalid ref 1 ret -22 [ 156.088449] binder_alloc: binder_alloc_mmap_handler: 9983 20001000-20004000 already mapped failed -16 13:48:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x0, {{0x2, 0x4e24, @multicast1}}, 0x0, 0x3, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @remote}}]}, 0x20c) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x125200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000900)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) setxattr$security_selinux(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='security.selinux\x00', &(0x7f0000000800)='system_u:object_r:audisp_exec_t:s0\x00', 0x23, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r3 = fcntl$getown(r0, 0x9) write$P9_RREADDIR(r2, &(0x7f0000000040)={0x2a, 0x29, 0x1, {0x3, [{{0x18, 0x3, 0x5}, 0x18f, 0x7, 0x7, './file0'}]}}, 0x2a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0xffffffffffffffff, r2, 0x0, 0xd, &(0x7f0000000840)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) setpgid(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000007179436c08b7ad2bb2798643aa583d9e10c4a40653216358b4a5f8f8464f31318ef1ec227ac72f401a0d8cb81b0"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000058000000700000000800000005d7d09ebd976d0c7ed3c280253b6f0b9cce01b261d3814f311857dcc7799889431e8ddf5de6f069fe7a66711ccf7fac41df79297dc537c155b912c92157b3ba593caf9e4c33b41c8bb7448e6d06bb4a0b2e2515000900000030e78e18272072212d86950aa86017fd1dacfe7c28b9d40a4cc1ead3cfbe501bd268a87363e50d23596f8182ae321110b3fbd224394f02a100"], &(0x7f0000000380)=""/179, 0xaa, 0xb3}, 0x20) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000480)={'filter\x00', 0x0, 0x4, 0x10, [], 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000002c0)=""/16}, &(0x7f0000000500)=0x50) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000008c0)=0x80) [ 156.088540] binder: 9983:9991 ioctl c0306201 0 returned -14 [ 156.088592] binder: BINDER_SET_CONTEXT_MGR already set [ 156.088599] binder: 9983:9993 ioctl 40046207 0 returned -16 [ 156.088704] binder_alloc: 9863: binder_alloc_buf, no vma 13:48:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) shutdown(r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 156.088720] binder: 9983:9993 transaction failed 29189/-3, size 24-8 line 3136 [ 156.120082] binder: 9995:9999 ioctl c0306201 0 returned -14 [ 156.120389] binder: BINDER_SET_CONTEXT_MGR already set [ 156.120397] binder: 9995:9999 ioctl 40046207 0 returned -16 [ 156.120533] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.120574] binder: 9995:9999 transaction failed 29189/-3, size 24-8 line 3136 [ 156.120683] binder: 9995:9999 Release 1 refcount change on invalid ref 1 ret -22 [ 156.126109] binder_alloc: binder_alloc_mmap_handler: 9995 20001000-20004000 already mapped failed -16 [ 156.126193] binder: 9995:9999 ioctl c0306201 0 returned -14 [ 156.126342] binder: BINDER_SET_CONTEXT_MGR already set [ 156.126350] binder: 9995:10001 ioctl 40046207 0 returned -16 [ 156.126450] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.126465] binder: 9995:10001 transaction failed 29189/-3, size 24-8 line 3136 [ 156.183748] binder: 10009:10012 ioctl c0306201 0 returned -14 [ 156.183811] binder: BINDER_SET_CONTEXT_MGR already set [ 156.183818] binder: 10009:10012 ioctl 40046207 0 returned -16 [ 156.218801] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.218821] binder: 10009:10012 transaction failed 29189/-3, size 24-8 line 3136 [ 156.218922] binder: 10009:10012 Release 1 refcount change on invalid ref 1 ret -22 [ 156.227526] binder_alloc: binder_alloc_mmap_handler: 10009 20001000-20004000 already mapped failed -16 [ 156.227670] binder: 10009:10012 ioctl c0306201 0 returned -14 [ 156.228023] binder: BINDER_SET_CONTEXT_MGR already set [ 156.228073] binder: 10009:10017 ioctl 40046207 0 returned -16 [ 156.228370] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.228389] binder: 10009:10012 transaction failed 29189/-3, size 24-8 line 3136 [ 156.257140] binder: 10021:10022 ioctl c0306201 0 returned -14 [ 156.262890] binder: BINDER_SET_CONTEXT_MGR already set [ 156.262898] binder: 10021:10022 ioctl 40046207 0 returned -16 [ 156.263040] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.263057] binder: 10021:10022 transaction failed 29189/-3, size 24-8 line 3136 [ 156.264062] binder_alloc: binder_alloc_mmap_handler: 10021 20001000-20004000 already mapped failed -16 [ 156.264199] binder: 10021:10022 ioctl c0306201 0 returned -14 [ 156.264364] binder: BINDER_SET_CONTEXT_MGR already set [ 156.264372] binder: 10021:10023 ioctl 40046207 0 returned -16 [ 156.264476] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.264492] binder: 10021:10023 transaction failed 29189/-3, size 24-8 line 3136 [ 156.290758] binder: 10027:10028 ioctl c0306201 0 returned -14 [ 156.290920] binder: BINDER_SET_CONTEXT_MGR already set [ 156.290927] binder: 10027:10028 ioctl 40046207 0 returned -16 [ 156.291217] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.291236] binder: 10027:10028 transaction failed 29189/-3, size 24-8 line 3136 [ 156.291654] binder: 10027:10028 Release 1 refcount change on invalid ref 1 ret -22 [ 156.292267] binder_alloc: binder_alloc_mmap_handler: 10027 20001000-20004000 already mapped failed -16 [ 156.292352] binder: 10027:10028 ioctl c0306201 0 returned -14 [ 156.292377] binder: BINDER_SET_CONTEXT_MGR already set [ 156.292384] binder: 10027:10029 ioctl 40046207 0 returned -16 [ 156.292924] binder_alloc: 9863: binder_alloc_buf, no vma [ 156.292940] binder: 10027:10029 transaction failed 29189/-3, size 24-8 line 3136 [ 156.322914] audit: type=1400 audit(1545486516.141:38): avc: denied { read } for pid=9982 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 13:48:36 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) sendfile(r0, r1, &(0x7f0000000080), 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d66df636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e2267e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a20cf462676ea53401e17a84daf0c5631348c171341b86bf136f98530530fc64c0e7e0c9d5bd91ea91079b0f3c4c14365b72603a023518da6a781124414c0766db59e1209c4a0a6e0c9ebe98307c29cc72176db1cb9e80db182"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 13:48:36 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x100, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000540)=""/175) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x1000000003) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$getown(r1, 0x9) open$dir(0x0, 0x100, 0x200000003) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000020000000000000000000000000000000006000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\b'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="f465183ffd52e1c0c298e8b9eeb8d14b4c1f67e6883c3bac52330018005908bf2f32848c6991d6c53adffb7d9b3d80cfe0ab09d942b9299d662d77fd7067ceb894420b0eb04cd0ed1dc5ab7471116c7695e6c7a6c0cc13f274c0e509c4d484c0694ebccd07bb7a9ea345a9afde3b", 0x6e}], 0x1, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7400800083e325be2d5d2c000000000000ff9aff7f0000000000b6d5ecf7501db9370000f3a3f8fffffffffffeffffff00000000050000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x90) write(r3, &(0x7f0000000480)="6973539462363633aef1f39a3a0be77854181540f3e278ff070fee6f649694c6111cac6452f13eaaabc919e0c3a0e75ecaab7a95566b1aefb069a2549173e0746210c689dde114ba885800e593e875cd29c3c4cdc1df268047ca35fe13a73504f89244d3aa90909d", 0x68) ioctl$VT_WAITACTIVE(r0, 0x5607) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x200, 0x0) clock_adjtime(0x7, &(0x7f0000000380)={0x4, 0x1000, 0xffffffffffffffff, 0x0, 0x6, 0xffff, 0x0, 0x3, 0x2, 0x5, 0x6, 0x4, 0x2, 0xffffffff, 0x80000000000, 0x2, 0x7, 0x0, 0x4, 0x1, 0xc872, 0x80000000, 0x6, 0x9, 0x84, 0x7}) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000600), 0x4) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0xb) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="d94dc7db032d28"], 0x0, 0x0, 0x0}) 13:48:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) shutdown(r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:36 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4c) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) accept4$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14, 0xcf84dcf6adac33ed) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000740)={@loopback, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) getpeername(r0, &(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000e40)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000e80)={@mcast2, 0x0}, &(0x7f0000000ec0)=0x14) accept4$packet(r0, &(0x7f0000000f00)={0x11, 0x0, 0x0}, &(0x7f0000000f40)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f80)={{{@in=@loopback, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000001080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001140)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000001240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000004400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004440)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004480)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000004580)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000045c0)={@remote, 0x0}, &(0x7f0000004600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004640)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004780)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000004880)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000048c0)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000004900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004980)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000049c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004a00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004a40)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000004b40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005580)={&(0x7f00000001c0), 0xc, &(0x7f0000005540)={&(0x7f0000004b80)={0x9a4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x11c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xf4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x238, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x7, 0x8, 0x8, 0x5}, {0x7, 0x1ff, 0x5, 0x10001}, {0xfe, 0x5, 0xfff, 0x10000}, {0x9, 0x2, 0x10000, 0xffffffffffff7fff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6f8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xb6}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x6, 0xa63, 0x913, 0x318}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xf8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa23b}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x1e8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffa65c43d7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x20, 0xfe3, 0x1, 0x2e}, {0x3, 0x1, 0x5, 0x3}, {0x100, 0x40400, 0x6, 0x10000}, {0x80000000, 0x1d2, 0x9, 0xf3d6}, {0x1, 0x10000, 0x2, 0x80000000}, {0x200, 0x100000001, 0xffff, 0x100000000}, {0xfff, 0x3c, 0xffffffffffffff7f, 0x7f}, {0x0, 0x80000000, 0xfffffffffffffffe, 0x9}, {0x3ff, 0x9, 0xffffffff, 0x400000000000}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}]}, 0x9a4}, 0x1, 0x0, 0x0, 0x40000}, 0x44) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r27 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") prctl$PR_GET_NO_NEW_PRIVS(0x27) r28 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") tee(r28, r27, 0x2, 0x8) 13:48:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000301ff07008fbda33d88c000001018dd"], 0x14}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\a\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) close(r2) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000480)=0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000c80)=""/4096, 0x1000, 0x40000001, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 13:48:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0xfffffffffffffec6) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x1000000100) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='unconfined\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(r4, &(0x7f0000000380), 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000380)) write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x243d44db14b1828) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f0000000400), &(0x7f00000001c0)={0x0, 0x0, 0x10000000}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]) listen(r2, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x308) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001e, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 13:48:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x50000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYRES64=r1], 0x76, 0x0, &(0x7f0000000000)="f2a944c08ff456eb179b79492ed0e947eb67e575763592b0c2e02f9cc2ba21cec6757ddf8bae9492eab87e7ea109060a6f371256c8663c44313d8666b3164c38c1707b7a8182a2281ea67f87d44ac6f2451a52fb42c2fffe93b2f7cce55c3d9d4fde1daa6155c959026153881b4cd069decb51b928ec"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 156.987282] binder: 10038:10044 ioctl c0306201 0 returned -14 [ 157.002108] binder: 10037:10048 ioctl c0306201 0 returned -14 [ 157.004218] binder: 10037:10048 unknown command -607695399 13:48:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r4 = open$dir(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x100, 0x0) r9 = open(&(0x7f0000000080)='./file0/file0\x00', 0x400000, 0x2) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/null\x00', 0x200000, 0x0) r11 = eventfd(0xfff) r12 = syz_open_dev$mice(&(0x7f0000001b80)='/dev/input/mice\x00', 0x0, 0x8000) io_submit(r5, 0x9, &(0x7f0000001c00)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x3fc000000000000, r2, &(0x7f0000000140)="9eace44aa7239340afaf8d6284f74b1169f06347de9e85fb6d", 0x19, 0x1, 0x0, 0x1, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x9, r4, &(0x7f0000000480)="fb760e85317d24551bc33c135bc28962c92d4557d9ebfeb4b9cf94eab7da33fd921d35d51514c9ff5735993e2d8759777ab0ca21af3523fb36a7442152174bc41cf137e4e656993ab9d83e1feacc00f93c19adaee2e9149670022c7a7ec91baf6054c6fb69168ce687cbe99eb39653e0564218b37d06be007d401d0eaec756825ffb8343e15b4b316f04654540339512e37c026b38bd5d9e2c028a279fffa6796bd81844d10e5e720c20447c0178f59ce1ee149b498049abbe10b1bcb580bcbce60b3cdb27c432f621b3f325cf11d177672e1bb71a6c8fe1154f3fbc3552aadfe848b7d25fec447393", 0xe9, 0x4be, 0x0, 0x3, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x10001, r0, &(0x7f00000003c0)="83021109d2eaaeadf591d9649369d39d7c692fb465f1fd01d2701e8e494acadfa6518f964ca180533fbeb55ca33e6cf6e573ab78e6fb343bf7191efda8", 0x3d, 0x1, 0x0, 0x2, r8}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f00000005c0)="3512d8bb7985313dc9776330156d31673d178a736988e729746f51f3344159d3dd7935580e0e2a0654e9a2753bb0416b51504e4d73776e9728b91024a9831f39c190df9a6155fc761c67b2907a19e473ae1cb3dca368706914bdd9dd8909630246ead33c03ecfed08f4c76d680381db73b6463", 0x73, 0x4, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0xe4, r3, &(0x7f0000000680)="0f656b1825b8639c1dfde4da64c821993649144bdfd3ce63280ead4971b6ad872b25a54981993c1079892576fc5937e45a08b4afd21fe8495752998fcd21372b9456c6248955a6a61fee07d769de089db1587839acd66f0c653107f81f103e729325e6d3b240263562fcd6b17a0ffdd064fe504bd19fb92a4e421c3edb28c816bb2d75ca6bab16e901dea9b7794285df4a912c9de45bacc681d3ab4565a735da8bda948cb5b85543da0e24426e97505724c5d8dc547cc8cc3d931df77d7f0c8ec00f06c08d797e4ef8a8dccd", 0xcc, 0x8, 0x0, 0x2, r9}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x200, r1, &(0x7f0000000800)="f47415c764bc47d2965cd1f1b2a2c1bf0d2a8e71344c58112929d775181dd9bacbe5a1a4485e694035fed2f89d75f98615788c6ec8f4bb06ba98c156726224680dbeb32c96d19f7b47b1d6542084837e696b42a2e7371150549edea446432dee42991ae689b9f472d8ac3492da7b950412c25d9440839cf8d1825f36b80fc78f4085188c670018634249d2722949dd8c6609bacf19a65179164abeead59e5e82e8246f27f98ac27828d11f52c6e57e7cadfea6bd376b42c998a09057c8b6c35befe8661051f4b7c6e2abc7f0d7eae95010ea7e266f043445", 0xd8, 0x0, 0x0, 0x0, r2}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00, r1, &(0x7f0000000940)="330ea8a35e26a73dd6fa56808a9250a9e70c338b62022e47be910599bf4b84f5086275f63346af19de26c0ba098a18c0072edd057ade8886ee78a4c32aaeac60b02b083bd6e59b4589d28b4e0ca7e5acf66b1db87046d0ebc06590516015f65bdb08bc63002043b0bef83e550eb14da32a760d017bc1432708530abab41dd3cd3f51ab7a98bae829df75c970e5bf6628e57a6bbe6faf41343d8c9abcfde66fb5c83661321bca7be26c598840e663706c76026cf16509c3a5", 0xb8, 0x9, 0x0, 0x1, r10}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x9, 0x6, r2, &(0x7f0000000a80)="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", 0x1000, 0x3, 0x0, 0x3, r11}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000001ac0)="c4dd99a9861796bea961776401d1ef6c40a1502c3979cee1460311b6f559861ba6b87b3996aa1d718c91c46cfac2fc48591408fbca9dbc644dee778c3ffc7dd0a77c579c8cd85ce47dd918c0457d4cc454d05eb980d8469fa6046b78f12179571e6434bc66a82da4d1e3312ef0b6ab66b95631a118118c55addcb9bbd5411cdaeb8530e146823a3a852f1e1f327a6b9fd976fd59dc521506a7b90585bac17543422f008d8de708ce", 0xa8, 0x6, 0x0, 0x2, r12}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="06630440010000003e4e2a631dd37a1cd8fafd27cad1a1667d9af36570f4cbf1abbbe95801f2d102000000000000000fc72ebebdd40ea86580034bab834ed070332836f0cdc3badac7685da60364"], 0x0, 0x0, 0x0}) [ 157.004226] binder: 10037:10048 ioctl c0306201 200001c0 returned -22 [ 157.009297] binder_alloc: binder_alloc_mmap_handler: 10037 20001000-20004000 already mapped failed -16 13:48:37 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4c) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) accept4$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14, 0xcf84dcf6adac33ed) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000740)={@loopback, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) getpeername(r0, &(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000e40)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000e80)={@mcast2, 0x0}, &(0x7f0000000ec0)=0x14) accept4$packet(r0, &(0x7f0000000f00)={0x11, 0x0, 0x0}, &(0x7f0000000f40)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f80)={{{@in=@loopback, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000001080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001140)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000001240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000004400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004440)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004480)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000004580)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000045c0)={@remote, 0x0}, &(0x7f0000004600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004640)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004780)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000004880)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000048c0)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000004900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004980)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000049c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004a00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004a40)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000004b40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005580)={&(0x7f00000001c0), 0xc, &(0x7f0000005540)={&(0x7f0000004b80)={0x9a4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x11c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xf4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x238, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x7, 0x8, 0x8, 0x5}, {0x7, 0x1ff, 0x5, 0x10001}, {0xfe, 0x5, 0xfff, 0x10000}, {0x9, 0x2, 0x10000, 0xffffffffffff7fff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6f8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xb6}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x6, 0xa63, 0x913, 0x318}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xf8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa23b}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x1e8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffa65c43d7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x20, 0xfe3, 0x1, 0x2e}, {0x3, 0x1, 0x5, 0x3}, {0x100, 0x40400, 0x6, 0x10000}, {0x80000000, 0x1d2, 0x9, 0xf3d6}, {0x1, 0x10000, 0x2, 0x80000000}, {0x200, 0x100000001, 0xffff, 0x100000000}, {0xfff, 0x3c, 0xffffffffffffff7f, 0x7f}, {0x0, 0x80000000, 0xfffffffffffffffe, 0x9}, {0x3ff, 0x9, 0xffffffff, 0x400000000000}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}]}, 0x9a4}, 0x1, 0x0, 0x0, 0x40000}, 0x44) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r27 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") prctl$PR_GET_NO_NEW_PRIVS(0x27) r28 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") tee(r28, r27, 0x2, 0x8) [ 157.009455] binder: 10037:10048 ioctl c0306201 0 returned -14 [ 157.009674] binder_alloc: 10037: binder_alloc_buf, no vma [ 157.009692] binder: 10037:10049 transaction failed 29189/-3, size 24-8 line 3136 [ 157.010789] binder: send failed reply for transaction 395 to 10037:10048 [ 157.010844] binder: undelivered TRANSACTION_ERROR: 29189 [ 157.083252] binder: 10052:10058 ioctl c0306201 0 returned -14 [ 157.083366] binder: BINDER_SET_CONTEXT_MGR already set [ 157.083374] binder: 10052:10058 ioctl 40046207 0 returned -16 [ 157.083508] binder: 10052:10058 unknown command -65533 [ 157.083515] binder: 10052:10058 ioctl c0306201 20000100 returned -22 13:48:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0xfffffffffffffec6) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x1000000100) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='unconfined\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(r4, &(0x7f0000000380), 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000380)) write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x243d44db14b1828) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f0000000400), &(0x7f00000001c0)={0x0, 0x0, 0x10000000}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]) listen(r2, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x308) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001e, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 13:48:37 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4c) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) accept4$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14, 0xcf84dcf6adac33ed) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000740)={@loopback, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) getpeername(r0, &(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000e40)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000e80)={@mcast2, 0x0}, &(0x7f0000000ec0)=0x14) accept4$packet(r0, &(0x7f0000000f00)={0x11, 0x0, 0x0}, &(0x7f0000000f40)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f80)={{{@in=@loopback, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000001080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001140)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000001240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000004400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004440)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004480)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000004580)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000045c0)={@remote, 0x0}, &(0x7f0000004600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004640)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004780)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000004880)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000048c0)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000004900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004980)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000049c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004a00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004a40)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000004b40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005580)={&(0x7f00000001c0), 0xc, &(0x7f0000005540)={&(0x7f0000004b80)={0x9a4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x11c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xf4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x238, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x7, 0x8, 0x8, 0x5}, {0x7, 0x1ff, 0x5, 0x10001}, {0xfe, 0x5, 0xfff, 0x10000}, {0x9, 0x2, 0x10000, 0xffffffffffff7fff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6f8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xb6}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x6, 0xa63, 0x913, 0x318}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xf8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa23b}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x1e8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffa65c43d7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x20, 0xfe3, 0x1, 0x2e}, {0x3, 0x1, 0x5, 0x3}, {0x100, 0x40400, 0x6, 0x10000}, {0x80000000, 0x1d2, 0x9, 0xf3d6}, {0x1, 0x10000, 0x2, 0x80000000}, {0x200, 0x100000001, 0xffff, 0x100000000}, {0xfff, 0x3c, 0xffffffffffffff7f, 0x7f}, {0x0, 0x80000000, 0xfffffffffffffffe, 0x9}, {0x3ff, 0x9, 0xffffffff, 0x400000000000}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}]}, 0x9a4}, 0x1, 0x0, 0x0, 0x40000}, 0x44) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r27 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") prctl$PR_GET_NO_NEW_PRIVS(0x27) r28 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") tee(r28, r27, 0x2, 0x8) [ 157.083618] binder: 10052:10058 Release 1 refcount change on invalid ref 1 ret -22 [ 157.091003] binder: 10052:10058 ioctl c0306201 0 returned -14 [ 157.091029] binder: BINDER_SET_CONTEXT_MGR already set [ 157.091036] binder: 10052:10061 ioctl 40046207 0 returned -16 [ 157.091137] binder: 10052:10061 unknown command -65531 [ 157.091145] binder: 10052:10061 ioctl c0306201 20000100 returned -22 [ 157.154797] binder: 10066:10067 ioctl c0306201 0 returned -14 [ 157.154867] binder: BINDER_SET_CONTEXT_MGR already set [ 157.154874] binder: 10066:10067 ioctl 40046207 0 returned -16 [ 157.208992] binder: 10066:10073 ioctl c0306201 200001c0 returned -14 13:48:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0xfffffffffffffec6) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x1000000100) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='unconfined\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(r4, &(0x7f0000000380), 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000380)) write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x243d44db14b1828) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f0000000400), &(0x7f00000001c0)={0x0, 0x0, 0x10000000}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]) listen(r2, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x308) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001e, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 157.517772] binder: release 10038:10050 transaction 401 out, still active [ 157.546148] binder: send failed reply for transaction 401, target dead [ 157.552886] binder: send failed reply for transaction 404 to 10066:10067 [ 157.560634] binder_alloc: binder_alloc_mmap_handler: 10066 20001000-20004000 already mapped failed -16 [ 157.578360] binder: 10066:10073 ioctl c0306201 0 returned -14 [ 157.607983] binder_alloc: 10066: binder_alloc_buf, no vma [ 157.613948] binder: 10066:10067 transaction failed 29189/-3, size 24-8 line 3136 [ 157.622125] binder: 10066:10073 ioctl c0306201 200001c0 returned -14 13:48:37 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) sendfile(r0, r1, &(0x7f0000000080), 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000009000000250000000000000095000000560000008f6bc96c5d2c9f55dc31b532138f9f215b5fa6aee37460f1a3eb067493c331cec8bcf218fe5902d66df636903ebc87a288eed2d245c1cd2ca3584cf58704be6925b8a54f9c2e2267e060844082f0c072dec33ffa197428cc92427d076f5f4689b8a6b4d1977870a8ea412a20cf462676ea53401e17a84daf0c5631348c171341b86bf136f98530530fc64c0e7e0c9d5bd91ea91079b0f3c4c14365b72603a023518da6a781124414c0766db59e1209c4a0a6e0c9ebe98307c29cc72176db1cb9e80db182"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x4000000000}, 0x48) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000301ff07008fbda33d88c000001018dd"], 0x14}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\a\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) close(r2) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000480)=0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000c80)=""/4096, 0x1000, 0x40000001, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 13:48:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000ffdd00f975ea40dec6da544e19c9211e612391c9d34260a52359b8bfbb87d6265ea3ce2c074d6faa34d2a316d37b0632dee83c5f299a33a7ca87acea"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000040)={0x5, 0x400, 0x20, 0x3, 0x1}) syz_extract_tcp_res(&(0x7f0000000100), 0x4, 0xb2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 157.844274] binder: 10095:10098 ioctl c0306201 0 returned -14 [ 157.870204] binder: 10095:10098 unknown command -1 [ 157.881884] binder: 10095:10098 ioctl c0306201 20000440 returned -22 [ 157.898079] binder: 10095:10098 Release 1 refcount change on invalid ref 1 ret -22 [ 157.943055] binder_alloc: binder_alloc_mmap_handler: 10095 20001000-20004000 already mapped failed -16 [ 157.972973] binder: 10095:10098 ioctl c0306201 0 returned -14 [ 157.973044] binder: BINDER_SET_CONTEXT_MGR already set 13:48:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0xfffffffffffffec6) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x1000000100) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='unconfined\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(r4, &(0x7f0000000380), 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000380)) write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x243d44db14b1828) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f0000000400), &(0x7f00000001c0)={0x0, 0x0, 0x10000000}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]) listen(r2, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x308) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001e, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 157.973053] binder: 10095:10102 ioctl 40046207 0 returned -16 [ 157.993835] binder: 10095:10103 unknown command -1 [ 157.993846] binder: 10095:10103 ioctl c0306201 20000440 returned -22 13:48:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300), 0xffffffffffffffeb, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 157.994367] binder: 10095:10103 Release 1 refcount change on invalid ref 1 ret -22 [ 158.130836] binder: 10109:10111 ioctl c0306201 0 returned -14 [ 158.164389] binder: 10109:10111 unknown command 0 13:48:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 158.176712] binder: 10109:10111 ioctl c0306201 20000440 returned -22 [ 158.183978] binder: 10109:10111 Release 1 refcount change on invalid ref 1 ret -22 [ 158.193159] binder_alloc: binder_alloc_mmap_handler: 10109 20001000-20004000 already mapped failed -16 [ 158.216418] binder: 10109:10111 ioctl c0306201 0 returned -14 [ 158.222431] binder: BINDER_SET_CONTEXT_MGR already set 13:48:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="ec64749b8a77c2a6d5c813e8adf8206019737fb5fd7139c67dccb5534b9b1bb1ad825d819d800caf2c124865cc68a24fde1d458adb39bed63bcf16881cc1312dd6c5a749f136dec8951278e20a69e41bcf8d0f4673979e4417a819df24588b2945ab9566ef2d2f10d0b7b82000b48a8e053bb61a01a2d313d40667acc5b0d48641f27c048e377dd8224b29deaf55d3ac76abceaffc6cbf86531e02582ad871d4958074f430706e7660eef1379a27f3c6c7bb75cee9187602f995ccde14183e9f40c3eedab8675738ca3a19", 0xcb}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0663040501000000"], 0x0, 0x0, 0x0}) 13:48:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r1}, [@NDA_DST_MAC={0xc, 0x1, @link_local}]}, 0x28}}, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$getenv(0x4201, r2, 0x7, &(0x7f0000000000)) [ 158.232214] binder: 10109:10114 ioctl 40046207 0 returned -16 [ 158.245931] binder: 10109:10114 unknown command 0 [ 158.250898] binder: 10109:10114 ioctl c0306201 20000440 returned -22 13:48:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4000010004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x40800000000031, 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x10000) r1 = memfd_create(&(0x7f0000000100)='@lovmnet1vboxnet0bdev-bdev^GPL)}$bdev\x00', 0x5) write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x5}}, 0x18) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000001c0)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200)) keyctl$set_timeout(0xf, r2, 0x200) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x8) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0e05403, &(0x7f0000000240)={{0x3, 0x0, 0x7, 0x1, 0xe904}, 0x1, 0xa29c, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0x9cc, 0x200, 0xee8}) 13:48:38 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = gettid() r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400100, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @local}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) write$P9_ROPEN(r2, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r0) fallocate(r3, 0x1, 0x2, 0x10001) fcntl$setsig(r3, 0xa, 0x12) dup2(r2, r3) tkill(r0, 0x16) [ 158.291118] binder: 10120:10121 ioctl c0306201 0 returned -14 13:48:38 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8e) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') sched_setscheduler(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8200) ioctl$KDSETLED(r1, 0x4b32, 0x10000) r2 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001880)=""/229, 0xe5, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x8, 0x1}) write$P9_RLINK(r2, 0x0, 0x0) pipe(&(0x7f0000000080)) finit_module(r1, &(0x7f0000000040)='\x00', 0x1) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) pwritev(r0, &(0x7f0000001400), 0x31f, 0x0) [ 158.356252] binder: 10120:10128 unknown command 84173574 [ 158.381786] binder: 10120:10128 ioctl c0306201 200001c0 returned -22 13:48:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000480)=0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffffffffffff41) r4 = open(&(0x7f0000000300)='./file2\x00', 0x600000, 0x29) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e21, 0x0, @local}, {0xa, 0x4e20, 0x1fd73c58, @remote, 0x9}, 0xe6a2, [0x3f8, 0x7, 0x800, 0x7, 0x2, 0xfffffffffffffeff, 0x8, 0x2]}, 0x5c) recvfrom$unix(r3, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x3f00, &(0x7f0000000100)=@abs, 0xa) r5 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r5, &(0x7f0000000000)="641c508c0eed24018a921b24aba9e5afa50bc61d177ee50316ee964196cf924eac2b5586865f3bbc1008ed776c94335f2825c44e2aa9131bd425c50504167ff5158a20e34c0043702ecd94985ef59c1464cd72956ea5c37ef8d63a", 0x5b) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x80) sendfile(r5, r5, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000680)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000000fedbdf25024f0857968f9da1c0000040020000"], 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x8) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xfffffffffffffffe) getpgid(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe8\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="11", 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x1) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000001840)="07b5446ef8c0f9690411810c35c4fd7d6b") renameat(0xffffffffffffffff, &(0x7f0000000280)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00') rename(&(0x7f0000000600)='./file1/file0\x00', &(0x7f00000004c0)='./file2/file0\x00') syncfs(r6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'team_slave_0\x00'}) 13:48:38 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) sendfile(r0, r1, &(0x7f0000000080), 0x7fff) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:38 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "24b0eb7946c64808cb757347a4ebf52dddc47b4969c2dfb993300525cff83cc7e9"}, 0x2c) ioctl$int_in(r0, 0x5456, &(0x7f0000000080)=0x10000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000140)=""/69, 0x45}], 0x2) 13:48:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x200000007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000740)='threaded\x00', 0x4000000000001) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000280)='./bus\x00', 0xaa) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x200004, 0x8) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:tmp_t:s0\x00', 0x1b) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r7 = getpid() rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) sched_setscheduler(r7, 0x5, &(0x7f0000000200)) lseek(r6, 0x7fffffffffec, 0x2) write(r5, &(0x7f0000000e80)="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", 0x1f2) ioctl$int_out(r6, 0x5462, &(0x7f00000000c0)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x2a1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400}, &(0x7f0000000340)={0x0, 0x2710}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) 13:48:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x201, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x1ff}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64=r0], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r0], @ANYRES64=r0, @ANYRES16=r0], 0x16) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCNOTTY(r0, 0x5422) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) gettid() time(&(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 13:48:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 13:48:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x201, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x1ff}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64=r0], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r0], @ANYRES64=r0, @ANYRES16=r0], 0x16) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCNOTTY(r0, 0x5422) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) gettid() time(&(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 13:48:38 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="2000e6ff"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_access(r2, &(0x7f0000000240)={'system_u:object_r:var_lib_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x6}, 0x44) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x411, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x100000001}}]}, 0x34}}, 0x0) 13:48:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x2000000000000002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @mcast2}}}, 0x84) unshare(0x4040000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) unlink(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r7) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') getpid() sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="44862834850fe882e198cf4500752bf51a1c9c4d3f83c7c5aa7e30be04cf75d455619c7abd6742be3388ea9522ffb36a20bbbaf22d614fa57f45d5059468b46ea82b19fdb2adcaaa27ff56faee8a45f24444fd8ac17be272f7379b094de681b19c409be90f71d81929d9af85d249417fba8d12cce9e624d81b580d"], 0x1}}, 0x28000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={r8, @empty, @remote}, 0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffff25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r3}, 0x10) [ 159.075505] binder_alloc: binder_alloc_mmap_handler: 10120 20001000-20004000 already mapped failed -16 [ 159.085170] binder: 10120:10128 ioctl c0306201 0 returned -14 [ 159.086609] binder: BINDER_SET_CONTEXT_MGR already set [ 159.086618] binder: 10120:10173 ioctl 40046207 0 returned -16 [ 159.092126] binder: send failed reply for transaction 412 to 10120:10121 [ 159.092615] binder: undelivered TRANSACTION_COMPLETE [ 159.092623] binder: undelivered TRANSACTION_ERROR: 29189 13:48:41 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = gettid() r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400100, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @local}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) write$P9_ROPEN(r2, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r0) fallocate(r3, 0x1, 0x2, 0x10001) fcntl$setsig(r3, 0xa, 0x12) dup2(r2, r3) tkill(r0, 0x16) 13:48:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) r2 = dup(r0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0xbc, 0x0, 0xbc, 0x0, 0xbc, 0x17c, 0x17c, 0x17c, 0x17c, 0x17c, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x98, 0xbc}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x7, 0x3}}}, {{@ip={@empty, @rand_addr=0xb7, 0x0, 0xff000000, 'team_slave_0\x00', 'bond_slave_0\x00', {0xff}, {}, 0xec, 0x1, 0x6}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000000000, 0x3, 0x2}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x26c) 13:48:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="ec64749b8a77c2a6d5c813e8adf8206019737fb5fd7139c67dccb5534b9b1bb1ad825d819d800caf2c124865cc68a24fde1d458adb39bed63bcf16881cc1312dd6c5a749f136dec8951278e20a69e41bcf8d0f4673979e4417a819df24588b2945ab9566ef2d2f10d0b7b82000b48a8e053bb61a01a2d313d40667acc5b0d48641f27c048e377dd8224b29deaf55d3ac76abceaffc6cbf86531e02582ad871d4958074f430706e7660eef1379a27f3c6c7bb75cee9187602f995ccde14183e9f40c3eedab8675738ca3a19", 0xcb}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0663040501000000"], 0x0, 0x0, 0x0}) 13:48:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000480)=0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffffffffffff41) r4 = open(&(0x7f0000000300)='./file2\x00', 0x600000, 0x29) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e21, 0x0, @local}, {0xa, 0x4e20, 0x1fd73c58, @remote, 0x9}, 0xe6a2, [0x3f8, 0x7, 0x800, 0x7, 0x2, 0xfffffffffffffeff, 0x8, 0x2]}, 0x5c) recvfrom$unix(r3, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x3f00, &(0x7f0000000100)=@abs, 0xa) r5 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r5, &(0x7f0000000000)="641c508c0eed24018a921b24aba9e5afa50bc61d177ee50316ee964196cf924eac2b5586865f3bbc1008ed776c94335f2825c44e2aa9131bd425c50504167ff5158a20e34c0043702ecd94985ef59c1464cd72956ea5c37ef8d63a", 0x5b) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x80) sendfile(r5, r5, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000680)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000000fedbdf25024f0857968f9da1c0000040020000"], 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x8) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xfffffffffffffffe) getpgid(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe8\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="11", 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x1) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000001840)="07b5446ef8c0f9690411810c35c4fd7d6b") renameat(0xffffffffffffffff, &(0x7f0000000280)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00') rename(&(0x7f0000000600)='./file1/file0\x00', &(0x7f00000004c0)='./file2/file0\x00') syncfs(r6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'team_slave_0\x00'}) 13:48:41 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r0+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x2000000000000002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @mcast2}}}, 0x84) unshare(0x4040000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) unlink(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r7) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') getpid() sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="44862834850fe882e198cf4500752bf51a1c9c4d3f83c7c5aa7e30be04cf75d455619c7abd6742be3388ea9522ffb36a20bbbaf22d614fa57f45d5059468b46ea82b19fdb2adcaaa27ff56faee8a45f24444fd8ac17be272f7379b094de681b19c409be90f71d81929d9af85d249417fba8d12cce9e624d81b580d"], 0x1}}, 0x28000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={r8, @empty, @remote}, 0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffff25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r3}, 0x10) [ 161.376388] binder: 10196:10205 ioctl c0306201 0 returned -14 [ 161.376434] binder: 10200:10204 ioctl c0306201 0 returned -14 [ 161.399933] binder: BINDER_SET_CONTEXT_MGR already set [ 161.405652] binder: 10196:10205 ioctl 40046207 0 returned -16 [ 161.464714] binder: 10196:10213 unknown command 84173574 [ 161.470367] binder: 10196:10213 ioctl c0306201 200001c0 returned -22 13:48:41 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:41 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:41 executing program 1: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:41 executing program 1: syz_open_dev$mice(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:41 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:41 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) [ 162.171132] binder_alloc: binder_alloc_mmap_handler: 10200 20001000-20004000 already mapped failed -16 [ 162.181200] binder: release 10196:10205 transaction 419 out, still active [ 162.181206] binder: unexpected work type, 4, not freed [ 162.181209] binder: undelivered TRANSACTION_COMPLETE [ 162.214956] binder: 10200:10211 ioctl c0306201 0 returned -14 [ 162.217133] binder: BINDER_SET_CONTEXT_MGR already set [ 162.217153] binder: 10200:10244 ioctl 40046207 0 returned -16 [ 162.225777] binder_alloc: 10200: binder_alloc_buf, no vma [ 162.225797] binder: 10200:10245 transaction failed 29189/-3, size 24-8 line 3136 [ 162.225946] binder: 10200:10244 Release 1 refcount change on invalid ref 1 ret -22 [ 162.226314] binder: send failed reply for transaction 416 to 10200:10204 [ 162.226325] binder: send failed reply for transaction 419, target dead [ 162.226702] binder: undelivered TRANSACTION_COMPLETE [ 162.226710] binder: undelivered TRANSACTION_ERROR: 29189 13:48:44 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) io_setup(0x4, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:48:44 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x2000000000000002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @mcast2}}}, 0x84) unshare(0x4040000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) unlink(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r7) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') getpid() sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="44862834850fe882e198cf4500752bf51a1c9c4d3f83c7c5aa7e30be04cf75d455619c7abd6742be3388ea9522ffb36a20bbbaf22d614fa57f45d5059468b46ea82b19fdb2adcaaa27ff56faee8a45f24444fd8ac17be272f7379b094de681b19c409be90f71d81929d9af85d249417fba8d12cce9e624d81b580d"], 0x1}}, 0x28000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={r8, @empty, @remote}, 0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffff25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r3}, 0x10) 13:48:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x2000000000000002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @mcast2}}}, 0x84) unshare(0x4040000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) unlink(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r7) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') getpid() sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="44862834850fe882e198cf4500752bf51a1c9c4d3f83c7c5aa7e30be04cf75d455619c7abd6742be3388ea9522ffb36a20bbbaf22d614fa57f45d5059468b46ea82b19fdb2adcaaa27ff56faee8a45f24444fd8ac17be272f7379b094de681b19c409be90f71d81929d9af85d249417fba8d12cce9e624d81b580d"], 0x1}}, 0x28000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={r8, @empty, @remote}, 0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffff25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r3}, 0x10) 13:48:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x2000000000000002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @mcast2}}}, 0x84) unshare(0x4040000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) unlink(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r7) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') getpid() sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="44862834850fe882e198cf4500752bf51a1c9c4d3f83c7c5aa7e30be04cf75d455619c7abd6742be3388ea9522ffb36a20bbbaf22d614fa57f45d5059468b46ea82b19fdb2adcaaa27ff56faee8a45f24444fd8ac17be272f7379b094de681b19c409be90f71d81929d9af85d249417fba8d12cce9e624d81b580d"], 0x1}}, 0x28000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={r8, @empty, @remote}, 0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffff25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r3}, 0x10) 13:48:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8a}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c8, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x50000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xda}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xee26}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_LINK={0x104, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd05}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x140}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1c8}}, 0x8000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000580)='veth0_to_bridge\x00', 0x10) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffde0, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x18, 0x0, &(0x7f0000000100)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="92a29f6100104039", @ANYRES64=r4, @ANYBLOB="0200000000000000"], 0x0, 0x0, 0x0}) 13:48:44 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) [ 164.402446] binder: 10251:10259 ioctl c0306201 0 returned -14 13:48:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 13:48:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) [ 164.475036] binder: 10251:10267 unknown command 1637851794 [ 164.490635] binder: BINDER_SET_CONTEXT_MGR already set 13:48:44 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:44 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) read(r2, &(0x7f0000000100)=""/250, 0xd8) [ 164.490644] binder: 10268:10270 ioctl 40046207 0 returned -16 [ 164.492808] binder: BINDER_SET_CONTEXT_MGR already set 13:48:44 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 164.492816] binder: 10268:10270 ioctl 40046207 0 returned -16 [ 164.665710] binder: 10251:10267 ioctl c0306201 20000000 returned -22 13:48:44 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) [ 165.215831] binder_alloc: binder_alloc_mmap_handler: 10251 20001000-20004000 already mapped failed -16 [ 165.226015] binder: 10251:10267 ioctl c0306201 0 returned -14 [ 165.232131] binder: BINDER_SET_CONTEXT_MGR already set [ 165.238706] binder: 10251:10267 ioctl 40046207 0 returned -16 13:48:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x2000000000000002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @mcast2}}}, 0x84) unshare(0x4040000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) unlink(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r7) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') getpid() sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="44862834850fe882e198cf4500752bf51a1c9c4d3f83c7c5aa7e30be04cf75d455619c7abd6742be3388ea9522ffb36a20bbbaf22d614fa57f45d5059468b46ea82b19fdb2adcaaa27ff56faee8a45f24444fd8ac17be272f7379b094de681b19c409be90f71d81929d9af85d249417fba8d12cce9e624d81b580d"], 0x1}}, 0x28000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={r8, @empty, @remote}, 0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffff25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r3}, 0x10) 13:48:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1011, &(0x7f0000000540)={@broadcast, @link_local, [], {@x25={0x805, {0x1, 0x5dd6921f, 0xff, "585704c04439dc4b9924e77e91866b25fc29db718e532bd53ffcab1ec37e37c7509e5cb08d8de0341884b35b47ac696b5ee21ea46f93d7d6e632155bb461b398a14026147db25f5534c0e2981bfbc018e3cb6177bfbdf56a3eee819b940a6ddde9e85d56ce519e26c1375d60445fa52116322dffe0ca3e2e52a92c92472665b0d77a957d290b71e6245409c7ac911fbb3cc274e58cf79f83f042ee10260cd5206ca2e54030276e46ca2c8fb128ad3947d9a71d6c0fa6556dd3b75268e608c529f6169baebe92beed415e065ff605ed697a1aac0d707cec358736c2bcbf7fca19d2575bcc0e4c325e81ab0d01942780b196e6264499cade18b02a705ddc99c38524ef7fb2d182b48a8b441c0631b6cef6d61484cc887ee2deee3fcb804d545da5075e61c314e1f6b0f63e995e2376169062f0b25821ea7b489e71def9b9ce0b71c6abcc7214450e0343701461e8422654288054c1928477a5a7147e924da92627e0ef4e54b877d81f8509b8a701146acdcee733e21e9dd9ea2568cdef718b47d7bfee1ed06440044afdebcb4760b3c9fbbea72d57e288135e4633de75e47131311158527864e3c808a68c6fc0b9cb3ac1542f75114cc841a44ad5119507ab160530be62690d401742b3accd3c461d4a1267ca23363afc09c2dfface9bb8f8bd60fda29418d81b28a32b602a2b0fe0904635a2f832fbbd96431f60034dff5c77e8ac4e6c1bb1988ef424ffc5a9374f20dae11a86a8c4146fc3049ddf5f9a376cf3587c3efa33127de169994666cffede021ed570bd987e17fe0c5d5e9a4d62ae5d7738a50512d41de4cc176442dbd74e40f684e5e9d4f679da757b1bf06df3077eab2c4098fb6ed011ca8f920f19b9cf2251bc60dca7e34c171c30277c2539dbba6b2b98c06ffed1f26ed9c4149bdaf6a5b9dd928e643c16eb7c124680a9134c6a3ce4bbab0941dd471f29ccf970a48915fc72d011355a4e06f6272703ca26a823a9b2854363ebef03dca73656f5accc2d375dbe43344b6e69ebe03f1563accd218dfc484d41abe32e16e9c17a2cd8b3fa2371872010789e19e61a715037e401fde81be329596903606fae112bfa39a4508fc9bb7bc1060661ab7668abb1fd7817f17cc8453a8201b0210afcd56588a0e70d048aae771f4804182b5605e69918b05979a17f0acadc99aa1a5ff3c1ce1345439e7c3ed0f0eccd0f3d7441dc9e5d722f7636b76b8981041f91824ca63be9de9230f9c917dd4cbe50960fe063765ed681b27f74be9e944256b68f4bf23bc93eab1e83b9abeb476f644dd27de3a74cbc518650a7d4723f5a5c91742fc2cf6774ea91a64d3081e7855b9dbc1aa397cc69044ac788880e7ad410afcf291835f3760bdc94a4e03dd5146ba997a7e13c838b1b562d228439956c55b7279fc92ca88cc9bb542ad5540a2961f45ea6eb5e09c55275e9ec04d88045a556da2a1b72a6562d5d2c30f19b0d4d36814318d6113ed40ff233c8bcd949ba0e79b2afc9fc0fdfe214b202414344e1abf0a5b5ce23e89d8aa11d62caa0c37464425765e677df4d5352ac9c3ca00dfcf9ad685e4f39b6c094afba2dd75ee510cdd5e6ac91fc793e8cb51efbcbda4c85a1fef11c84132e425bd12b2cdb94bfb65796fddedf42787dacf27017f3d59da1a0b550ddada19941765023968dc8d01487c98fad5531e74241376f249e4d4cb4d57881e123ca4d12a02b29a1bc0092b214eeacd5d373ba1d2665276f6cd5269705372bf463f4ef5fa2a39d04a3b22f43ed2fbe3382d8e23d69aee4915e9a24127f9b37d1b21696e47184665d6cb29b29532eeecf4b7573063823871f4653de776ccd5aa551c4954f08b3a18f1be09ee9f56dd738c4a33e7632cd3667132b43359a4d8f155b961e9cdc2a61f3ae24715aca6c6ad18d811d0c0f11c22dda69b9a98ed5928e4ae775c769377b060640017daa0bd96398f48a4689502b7b34ddbf9087368098a90a146bba54fa587dcd8b6e909ed457a524fa3b46e580a24c2498d7e2ad9ce377f7f2d2f64d717ae2d06f47bcffa812abc1e6dcdff38ef4877a96df51fb0b6c4cb2a417b878eedbad1f516c4658c4281c0ca8e04399f4407f09bfe34824ce104b314a3cd0a5dae50e01187c4d94831e302c339b7d255c48efea229490c0ada1dace9434c4b955b8049ef481a4f4cafaa01a8a817517d297df5337f7c60f48926617df7751ffac102ec127ef273cf772da453ba12b9d5882ccf0f509928d14b975482f5acc5ff0baa0a99798ecc2ec59420322e75730543748b84ed34f2912562f97477082f9fec6055bae5eff6800ae00f03da22595676da1138e38ffed23b074d7c99939bc18e7557d97ce0a39e54a94b9e9f67f6c573c9cc2af375e3553a27a8ec284dd63484a420f98fd1a3912825b57444624a3eaae1bf0cc68f5245ef84b62817b8b992065526c8a64b437a89c68c6f030cdd673bab6faa4f36a3775483b4b4e03b26ec6d0d43ebf177a4502ad52c3aef62e40bdcdbaaba3b8329d7231bfc96ea9eba1bbea11bfffa95d206e02d3c211d66b34def3065052caf926d6edc4ed2d2bad9fb98e9871054ce673e41c05203505dc786f19e654582d2753305a67caa5dd44c9a1fb34fc34e33851c0979158869808b1f14f55c5bc173324939f6fd9e8946cbe8ec0e9e4e2a1023ef85ecca39d7f930a194519e4d31b2c590e5173963f4556c725824e3ffd83a5d726e853b34dfb676f242c1298b3311b9a4f41e0b355c620e16005610e1d7aa3c907e124989ad2969f9023b4fbb826d3acc85d69d01eae7da0a9f1ee1c6e7773ce87f7edd5a80bcbb615544312fd119b35d051a67d31aa85c82ff188426835913f8e1a6d368695e9321012f56d16a2c416297aa54596a544a0ba9f9e29f25fb8daaf1df2a6a54e9c7a954264a89f50a5688cbbb477d9c94f5a108c1357bd9823bd4ef2fa6dce70c5a2e0389857544d70b5832f4d505c05abb65d7d1bfed1a5c2aa7160869a652203a11291e65790c5a3e5f29b66268c4b525e6af5ed4a46600bfe1e33baf95b5eab3f566d1421dca9b14ad05e75ab1aef7f401a470641d3fb5723cce897ae376be3ae4af27244489011ba909b31820d1a5a572ac4d5aa309ff307f39244039badf77518a8beafe16da3b62037786c081dcb9466957e625ab88fd35bc84da6734443e40e4a047d546d64977efbceb66fe1c8e49d6bd2dae0074b817f650a9073b117dc04ccb43779c66ae5e209a82fba64f8327d52228d6a30dbd79884d1e98bba482f4fd5906b92e88317d3fb80742131e7bddfe8afef0d54884d05f581a5a7a6a0c314c686b84b28cf98068a3e497080de8b73b477576ece937363d6f3fc468b4668841828beb7034334db302af54451c4be8b2351e500ede512e8c55d77fcf87f315270463f153f87e2ebe221e72508fe65cdeedf1a6ec21c9566d67fabb1f767ee59009c5e6ffa4e877d34b33c8b7c3485a97feea62781e1d15121f3b81b16cb4ca67f8992c164c487a7626b2d97076c8536028da151e3ab9b14ecda15eb9c27e5da8079527d86129e25ce5f8cecca0b69665c890201fa458b80d1af1cb1d651ec10b003860cfba29bc260186056949278e265dad1b11d8f72c607a1430250048955314edbb43edda3340255f098095bf1203ef2fee206b60a0ec0d1297fede8fd1222faac01a889589eac72b2502d6ecfb49c08eeeddc675eb374c0c5de5ab3ef9e68228efa33e5bced081b89a18b2c000823421b1e70def352ced6cf43e0cb5a01f0ccf136a55672cd9d3c37404c5290bd65c803d838fdd6d4e64fef58eaabde9e66453367de78a0c5b426dcb05caec56b74ff6d0431a5bfe804cf185e8e1d461790d67f6bcb67d36db84880036e75354193c9cff2cd62e2ba615cc68c4346c2f34b24694a022e7cf98a98f5046adc422de0c14d4dd4a9df86bc7c96f8d078555bd9a0d29212b4d526b154bc360c2e7bb1e65a34250003952d0764b30e4d09ab21a015bb3e54d3b0aa3e73a960cde56a1fd493a9934412386c82a9c935dced693c25bb476c479d3406dc76410a47d18568e4fddab44c2909bda93ce6636809739b68d482b558c24a675ca37a29d78c3042c0f68dbed50a7e41bff2a744eaba7bd6988fd503a287b2eed242f8002a9eaa42b1dfda45bff35c684e42e4dee10f6756441d132ba7d10460132fc07037761e9216beb402fb51db77b8b06d67f6c533de9433b671476680f012f91369234da96a6976d66d51dd4f99cb2f4578839fc7a687d3df0f7aaf4dc5db4981cf8aa914b1d265922c67989552783549ed6c583643c93f31479c5c261339f808122c5522d44a80c85474e406f71a6970d30258d4fb3a781c98ea87abf89934fcba7bd340aeae42669fe9f0e89c85545e4688b3bfea9826112fa6e23807cb0e9693414554c6c627bc42b1d31d06b5f828175c34e2366c6a0ad656e8ec69d60a937af6e0ecd8763a869f45ca885208a0a6cb2d60e162909babcb9c793f8097b08ab09fdcdab9c99771dbb9ad9572c0fbc2e5e828b0cd3d5de182cf189208da0092114db1c4045f320af09306847820d80e1b23261587b5a4b8e7e7b83fe4934252f894f7cd5621af51274f3bb84fc7e23cf4347e4f9a365aac7cc3c4aaecd6027091cb135d2d6e8bab170d50843315cba26c7b68477af606cd70a5075d4a7954e6a69c32c4aa42364462ec5b442ae252579730736cb2abc9eb93bb4851be3f9a6ddf48389968c40a6beafacc410c5460c040013ec68bd2188c69ce65e973347a59c923cae0a0ace574e6d88569f4836207660c97a12d6698bacff787f9cf5b722f3445d8e5c890a0900ad9ec16f3ce8918e184a1018dee3178da73f575c6c5b20174b1977fb5f6392ff0ddd4e6c12a60e5669e0918ff751104b978eeb472e901060ab76e9195cb17112dacd8d63b45c064fa1bc04d2cd8e1e862b2dd6de11c9b01e5a75468d67e42628ef265f9ffd63a863cb20fce66e5f6b3f4ae01298b91bfe36792dfc00079119f6c6f202cf92fbbe151a0336aa14a82b653e811b09763d63bd9e39afb5d38ab08c8c2817f16fbe6bcdd6bcf1058def9a78cc86d4c5723f5bc7be5d9ded52882363d700be11cee8513f07e10de213ca41ae69a48911d56d6304ae915ef99f06544f30164b862a97e68c522590ea9e0dd2d1042ff98a3ed8c7534bb2e6cebad2eec2eb3fd7e1439cb46328c1ad32041ad387a9185e4af27ca4494b4c450afcf55d162ca5b91fa1b24f98927718218dc0769d5d315dbb1d0c0f427acf2cfde273253b58c96f4696b1119633e99a5feffd5ee68169842ac45d83b5adb0799c3665e812d2d3a2f7681c2672e4689b7f972290efe0832e690af61eb26188cc998fe57d16ca14474ea8654a4cc8f42adfd5e5b936f84012806fac2cd2f026437c9d455724a5a6d89d16f71f15f00f921b002f093f080016512584ddf50d5392631083020f7c781bd13395feaf0f934731430d5fefa011bf8b81f5e16df04dc3d4dace8bb27361e7ca7e8f942abb23190e69fbdd6eafb5fae32b78f2504f7e60451e024401a6c872a7bf54523a5a728e017b599c2a87604bcbeafa6aa8f6a2583982aad973347d3923810e80a46d27b5022c75bbea0c8b4cec67574ee1c5407112efe50ed425b3c0a5f13d72700be4d203676e1014a3c866550dc9b465e3b2362369e90dfc8542c8c10365eb9bffcdc9488f5df39f422a201f528823618c6c53fad33a21aecd3eef411f195c88930318c3fa902114a5b55b75eeb8d5e5b3a"}}}}, 0x0) 13:48:45 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0663044001000000c1ff674e2566dc46f990803ee9d8fc64496f24b0a19325374bef3bc07d902082cb423256e4c65963a64e0a7288baf0f20d8060c19fcce2d3d2b66c6c25527a130d6c77dbef76ea529e658a2a4574b3f1"], 0x0, 0x0, 0x0}) 13:48:45 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x88041, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000140)={0x18}, 0x18) 13:48:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 13:48:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) 13:48:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77f7fb, 0x0, 0x820000, 0x0}, 0x2c) 13:48:45 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) [ 165.623834] binder: 10322:10324 ioctl c0306201 0 returned -14 [ 165.634850] keychord: Insufficient bytes present for keycount 18 13:48:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x16) 13:48:45 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:45 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffefe, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000240)="9b", 0x1, 0x0, 0x0, 0x0) 13:48:46 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setfsuid(0x0) [ 166.423395] binder_alloc: binder_alloc_mmap_handler: 10322 20001000-20004000 already mapped failed -16 [ 166.433211] binder: 10322:10343 ioctl c0306201 0 returned -14 [ 166.448226] binder: BINDER_SET_CONTEXT_MGR already set [ 166.448236] binder: 10322:10379 ioctl 40046207 0 returned -16 [ 166.454248] binder_alloc: 10322: binder_alloc_buf, no vma 13:48:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x120, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000801) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x3c99830876959646, &(0x7f0000000000)={0xa, 0x4e21}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="95", 0x1, 0x8000, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4008000, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='B', 0x1, 0x0, 0x0, 0x0) 13:48:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:48:46 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 13:48:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:48:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 166.454268] binder: 10322:10381 transaction failed 29189/-3, size 24-8 line 3136 [ 166.454364] binder: 10322:10379 Release 1 refcount change on invalid ref 1 ret -22 [ 166.454594] binder: send failed reply for transaction 427 to 10322:10324 [ 166.454651] binder: undelivered TRANSACTION_COMPLETE [ 166.454657] binder: undelivered TRANSACTION_ERROR: 29189 13:48:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77f7fb, 0x0, 0x820000, 0x0}, 0x2c) 13:48:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 13:48:46 executing program 2: 13:48:46 executing program 2: [ 166.581964] binder: 10388:10399 ioctl c0306201 0 returned -14 [ 166.627208] binder: 10388:10399 Release 1 refcount change on invalid ref 1 ret -22 [ 166.641304] binder_alloc: binder_alloc_mmap_handler: 10388 20001000-20004000 already mapped failed -16 [ 166.650905] binder: BINDER_SET_CONTEXT_MGR already set [ 166.650920] binder: 10388:10399 ioctl c0306201 0 returned -14 [ 166.662670] binder: 10388:10418 ioctl 40046207 0 returned -16 [ 166.669108] binder: 10388:10399 Release 1 refcount change on invalid ref 1 ret -22 13:48:46 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) 13:48:46 executing program 4: 13:48:46 executing program 5: 13:48:46 executing program 2: 13:48:46 executing program 0: 13:48:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:46 executing program 0: 13:48:46 executing program 2: 13:48:46 executing program 5: 13:48:46 executing program 4: 13:48:47 executing program 5: 13:48:47 executing program 0: [ 167.129919] binder: 10425:10427 ioctl c0306201 0 returned -14 [ 167.157194] binder: 10425:10427 got transaction to context manager from process owning it 13:48:47 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), 0x0) syz_open_dev$loop(0x0, 0x9, 0x0) 13:48:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc2%\xbb\xb6E\x00\x80\x00\x00\x00\x00\x00\x00\xb4\x91\x9c\x1a\x04\x00\x00\x00\x00\x00\x00\x00\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19\xd4/') sendfile64(r0, r1, &(0x7f0000000040), 0x1) 13:48:47 executing program 4: 13:48:47 executing program 5: 13:48:47 executing program 0: [ 167.198057] binder: 10425:10427 transaction failed 29201/-22, size 24-8 line 3004 [ 167.234915] binder: 10425:10440 ioctl c0306201 0 returned -14 13:48:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000300)=[@increfs_done={0x40106308, r2}], 0xfffffffffffffde8, 0x0, &(0x7f00000003c0)}) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:47 executing program 0: 13:48:47 executing program 5: 13:48:47 executing program 4: 13:48:47 executing program 2: 13:48:47 executing program 5: 13:48:47 executing program 0: [ 167.264394] binder: BINDER_SET_CONTEXT_MGR already set [ 167.279356] binder: 10425:10427 ioctl 40046207 0 returned -16 [ 167.286049] binder_alloc: 10425: binder_alloc_buf, no vma [ 167.286069] binder: 10425:10440 transaction failed 29189/-3, size 24-8 line 3136 13:48:47 executing program 1: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) 13:48:47 executing program 4: 13:48:47 executing program 2: 13:48:47 executing program 5: 13:48:47 executing program 2: [ 167.364919] binder: 10461:10470 ioctl c0306201 0 returned -14 [ 167.395113] binder: 10461:10470 BC_INCREFS_DONE u0000000000000000 no match [ 167.418983] binder: 10461:10470 unknown command 0 [ 167.436081] binder: 10461:10470 ioctl c0306201 20000440 returned -22 [ 167.455589] binder: 10461:10480 Release 1 refcount change on invalid ref 1 ret -22 [ 167.468890] binder_alloc: binder_alloc_mmap_handler: 10461 20001000-20004000 already mapped failed -16 [ 167.478477] binder: BINDER_SET_CONTEXT_MGR already set [ 167.478485] binder: 10461:10470 ioctl c0306201 0 returned -14 [ 167.489971] binder: 10461:10480 ioctl 40046207 0 returned -16 [ 167.496330] binder: 10461:10480 BC_INCREFS_DONE u0000000000000000 no match [ 167.496399] binder: 10461:10482 Release 1 refcount change on invalid ref 1 ret -22 [ 167.512500] binder: 10461:10480 unknown command 0 13:48:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) 13:48:47 executing program 5: 13:48:47 executing program 0: 13:48:47 executing program 4: 13:48:47 executing program 2: 13:48:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) dup2(r1, r0) 13:48:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r1, 0x0, 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) [ 167.517851] binder: 10461:10480 ioctl c0306201 20000440 returned -22 13:48:47 executing program 0: setrlimit(0x7, &(0x7f0000000140)) memfd_create(&(0x7f0000000000)='mime_type\x00', 0x0) 13:48:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/netlink\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f0000000540)=""/193, 0xc1}, {0x0, 0x22a}], 0x4, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f0000000100)=""/64, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000300)={0x0, @aes256}) prctl$PR_SET_SECUREBITS(0x1c, 0x20) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x54002, 0x0) 13:48:47 executing program 4: 13:48:47 executing program 4: 13:48:47 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') [ 167.584172] binder: 10489:10491 ioctl c0306201 0 returned -14 [ 167.687645] binder: 10489:10508 ioctl 5457 20000000 returned -22 [ 168.350417] binder_alloc: binder_alloc_mmap_handler: 10489 20001000-20004000 already mapped failed -16 [ 168.360085] binder: 10489:10508 ioctl c0306201 0 returned -14 [ 168.361441] binder: BINDER_SET_CONTEXT_MGR already set [ 168.361449] binder: 10489:10515 ioctl 40046207 0 returned -16 [ 168.361861] binder_alloc: 10489: binder_alloc_buf, no vma [ 168.361881] binder: 10489:10516 transaction failed 29189/-3, size 24-8 line 3136 [ 168.361982] binder: 10489:10515 Release 1 refcount change on invalid ref 1 ret -22 13:48:48 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x109040, 0x81) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bcsh0\x00', 0x1}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x0, @broadcast, 0x4e24, 0x3, 'ovf\x00', 0x2, 0x0, 0x38}, {@local, 0x4e21, 0x0, 0x401, 0x10001, 0x7}}, 0x44) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180000000000000008000000000000009f28623327ca45deab5f5a2c19a0c0930952524f6141d9c3e35877abc58337594ce83eb70c005fdea7", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r3 = geteuid() ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000540)={0xdc6, 0xa, 0x0, [{0x1000, 0x3ff, 0x5, 0x970f, 0x37, 0x4, 0x3c216d21}, {0x40, 0x6, 0xd70, 0x29d8, 0x8, 0x20}, {0x0, 0x6, 0x1, 0x3, 0x2, 0x6, 0xffff}, {0x4, 0xff, 0x81, 0x4, 0x3, 0x14b7, 0x10001}, {0xffffffff, 0x7, 0x1, 0x9, 0x46cb, 0x5, 0x8}, {0x73, 0x2, 0xfffffffffffffffe, 0x8, 0x4, 0xfffffffffffffff9, 0xb39}, {0x52e, 0x0, 0x0, 0x2b5c3935, 0x45, 0x3, 0x7}, {0x71, 0x2, 0xd490, 0x1ff, 0x0, 0xcc, 0x6}, {0x0, 0x40, 0x2, 0x9, 0x8, 0x2, 0xef1e}, {0x6acd7fbb, 0x9, 0x10001, 0x0, 0x5, 0x0, 0x8}]}) ioprio_set$uid(0x3, r3, 0x5) 13:48:48 executing program 1: r0 = getpid() prlimit64(r0, 0x0, 0x0, &(0x7f00000000c0)) 13:48:48 executing program 4: syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x8e000) 13:48:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0) 13:48:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0x8000010001) shutdown(r0, 0x1) 13:48:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/netlink\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f0000000540)=""/193, 0xc1}, {0x0, 0x22a}], 0x4, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f0000000100)=""/64, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000300)={0x0, @aes256}) prctl$PR_SET_SECUREBITS(0x1c, 0x20) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x54002, 0x0) [ 168.362295] binder: send failed reply for transaction 437 to 10489:10491 [ 168.366357] binder: undelivered TRANSACTION_COMPLETE [ 168.366364] binder: undelivered TRANSACTION_ERROR: 29189 13:48:48 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000100)='cpusetem1-)\x00') 13:48:48 executing program 1: r0 = getpid() prlimit64(r0, 0x0, 0x0, &(0x7f00000000c0)) 13:48:48 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) setrlimit(0x0, 0x0) 13:48:48 executing program 4: fchdir(0xffffffffffffffff) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000001700)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) fallocate(r1, 0x20, 0x0, 0x10000) [ 168.441656] binder: 10522:10526 ioctl c0306201 0 returned -14 [ 168.477094] binder: 10522:10526 got transaction to context manager from process owning it 13:48:48 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:48:48 executing program 5: seccomp(0x0, 0x0, 0x0) getcwd(&(0x7f00000006c0)=""/195, 0xc3) [ 168.511892] binder: 10522:10526 transaction failed 29201/-22, size 24-8 line 3004 [ 168.528450] binder: 10522:10545 Release 1 refcount change on invalid ref 1 ret -22 13:48:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x11c) fgetxattr(r2, &(0x7f0000000000)=@random={'os2.', '/dev/binder#\x00'}, &(0x7f0000000040)=""/227, 0xe3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:48 executing program 1: r0 = getpid() prlimit64(r0, 0x0, 0x0, &(0x7f00000000c0)) 13:48:48 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)) [ 168.552101] binder: 10522:10549 ioctl c0306201 0 returned -14 [ 168.570331] binder: BINDER_SET_CONTEXT_MGR already set [ 168.576736] binder_alloc: 10522: binder_alloc_buf, no vma [ 168.582450] binder: 10522:10545 transaction failed 29189/-3, size 24-8 line 3136 [ 168.593926] binder: 10522:10526 ioctl 40046207 0 returned -16 [ 168.594082] binder: 10522:10549 Release 1 refcount change on invalid ref 1 ret -22 13:48:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x27, 0xaff}, 0x14}}, 0x0) 13:48:48 executing program 1: r0 = getpid() prlimit64(r0, 0x0, 0x0, &(0x7f00000000c0)) 13:48:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, 0x0, &(0x7f0000000280)) [ 168.650463] binder: 10560:10562 ioctl c0306201 0 returned -14 13:48:48 executing program 1: prlimit64(0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:48:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg(r0, &(0x7f0000000180), 0x10c, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) 13:48:48 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) 13:48:48 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000010c0), 0x8) 13:48:48 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) 13:48:49 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001440), 0x4) [ 169.444513] binder_alloc: binder_alloc_mmap_handler: 10560 20001000-20004000 already mapped failed -16 [ 169.454435] binder: BINDER_SET_CONTEXT_MGR already set [ 169.454447] binder: 10560:10575 ioctl c0306201 0 returned -14 [ 169.465782] binder: 10560:10608 ioctl 40046207 0 returned -16 [ 169.472079] binder_alloc: 10560: binder_alloc_buf, no vma [ 169.472994] binder: 10560:10608 Release 1 refcount change on invalid ref 1 ret -22 [ 169.473233] binder: send failed reply for transaction 445 to 10560:10562 13:48:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800c000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x208, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0663044015000000"], 0x0, 0x0, 0x0}) 13:48:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141046, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x6d0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) write(r2, &(0x7f0000000040)='{', 0x1) [ 169.473522] binder: undelivered TRANSACTION_COMPLETE [ 169.473529] binder: undelivered TRANSACTION_ERROR: 29189 [ 169.507040] binder: 10560:10575 transaction failed 29189/-3, size 24-8 line 3136 [ 169.531972] binder: 10613:10615 ioctl c0306201 0 returned -14 13:48:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x6, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 13:48:49 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) 13:48:49 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_getres(0x0, 0x0) 13:48:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000367fb800040000000000009c6d909aeb"], 0x0, 0x0, 0x0}) 13:48:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000140)) ptrace$cont(0x20, r1, 0x0, 0x0) 13:48:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='uid_map\x00') write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, "e566489d53219c697fce740d5e40e7b8f286f8b83c3576a87874931d858e38189b8558899053ed83f1714e977591360d12682ee8d4a0a455c7863e4d835bfcfb1e9164e64a48e89ce811e5ee067328fdd955a64a571bf3502c0b0a32917c8abca09229c077a32e8e271034eea39f9b5612e56cf9bc5bf4d917bd81dd19365746748c217626943d919850824115ef0153094ab3298f888409e1a1cb12e0f7ddbd9f0c24aa528a00382d68ed038b4446a8ec388c8f31affd69893e72615306f01dee00e2fcf2131d09c8a1fb8e80c4a7e4fd9cbf929e448d41cc802a490ab29005da7eac54e4bc6c51cc94f25cf85ac9a5da675df96c8a32cd349f037321b3fe48e272bc7d40a0a0d48e7817e8d03a3b035e02b2390acc8afb1a933a9336e9dcb98ac50b75dc9aa34339fb7b70635a9a09ab26ea03188c3c0f1be70875d2fd13d88ba7d76904c3f3a7789b34aff0048daa247e4d73eebfcc389e9ae659f30d01b3ccd5c2f7b3e05ac0990f1668858f3e1d6eec1a37060251b4f4bc5d96039507dbd0d07ac6d622d1cdc608af37a20b0d2f5994ad7daf885e6587fef0566023ed0237626c8d6f1af5f39141480ecd1f2e56a663f10ca0b4ccb62f87c4327cfd9761d2ca420562fd5d9bf27d9483deb9fa08c0cef0f2ccf3ddb393d3e94707df4f42b19160442d3c9c2e1398cf24f6a65d5dcdfe9c40ff528315d1c12d8a7aed6e8e67099f13b92f689c20a9ba2933c99cf27a4d356eeb58ed6905e92817afb6ad59e97a914aafd0584b169d891521c0b7ba319a988f9cc7eba54196bb30048710d541830754bbf5bb6312f39267242eb903235f101f082a6c8b55caaa92f5261772106d1ca0948b294b0712a74599dac6f43ac58dfe2d2a88d3352c2d9bf7bea8d9a2c676ab8bf48642254253d3273aa21a44feb94f667b789853045633929f062bc0be7af8c6972446776cedf6ca8921c758deadc4a8636b21fe9b74d98a57dbcee8cf2469afcf43f3c7637668d21854aa473ec3ff6056d77459735aaeba35ff6e95e24417870a8475031615fe370832588d64bbefcdb2457dd0deaab01bd363fc69f1a9eecbff8bb17ebec4b8cec0955bc7f398d0c3b698f2db920b0d3024e78af25d4927810862b50a0177a9dc569aabf5a90d2f8f3c1124cb40e794c7b2c69239deef7d4b0919b83933f2b38acd2deb3c9e7c74deedc2f0031667b41b22779b75e0dc50bfa8fefa046cb37acc302a7675c3a6266d1f8743df42a6de2f759450b9453a6a98d06dc2ceb19c90f692c853008cca8f37c703a22a2db726d13b132dc21c68bd125a22f13487b346381f4a2ba90d3269b892d0c3e05ec5e004cb3dee9d1ad560a4032404311504fa69c87449bb03072a6c008338b024fa79fddaf4247ac1049a2231249d7d08abfdbac8645903435ff49fe5700b74f36c7622250b6abbf9f22a0ac2a5d7bf18ec77cf4a2a09605bfd49a398b6ba3843f141b66622682509f8facd20528a6f7016e9c62a2da759e350161a5fbbf589f4497e892b984b3c55ed3b6b2b6b25bd9a64dd3a250f9390d51feecfcf1fea7a66be6da0f95c94f4dcb235a3478ae39abd409b7eb715f1e9ab4ec7a9ac1103e42c8462317a8914f1060e55f6c66a9de06957c79fe630c5eb52d5d7318475ae5889e1a118076709d608e18584f32b1596bc95dc548a3e378dd33b70e77ee578bbdf1aa96c4f925b98c6aec7f5e1ded7d688a45fbbcabf78b32a19028a2dd659315eb0fbb911a2161031ae921ef343a97a03f822b49ff4382234106b159aca77a2d33c3e9dc1f325177e3c258bc42ce77861ea37ff44ec634868bd9b8e75e4a47234f177cfaa1913d984c5ad19e78b7d1eaeabc35a0a1069a6e9085951a595abfeca1ed11ec699c2899efad7209fd4bf0c9ef38087bb8425b0f745baedb1a93b03674a80b19d22798539c4eaee5b809da93f1f8d2d365423888cac75ec3c396575a5cb70bf6542074f33d3cfd00b621c055cd660b9cb257fbdfe359d9108ea35ddc8fd1e79657869a3dbcf21e04b3daee24b3d6b6e45f2a4a8537dbf7347e42e2cfd70b1ffcc26b4176924fb19e579e9e56f59e7da97c5071e3fec1be67c25bd197c66d3d54f1b78beee94b2d3f7efa40bceefa78d8164a3a3dac1e65a21966dd7322ac95ec7cdb6548bf123c5388bfeff5619755ee8ec9d334ae7f4b85b870d453d42ee023d33897e1ec8629eb27915b9772f5a3f44f4d416e0af31ad9d1f3ca21928a89d4e2e8b2bab842a8b754213b4a9c7d999831f9c06e9929abd90ab48b3781416a592253f1fa2224f7d93886854efdf1acadca782d583836882a515b8e19a80d6f3509e792d80877a963fc6a8d58c8e919aec0c9ceb9f49ee2e8b01ec114eda608c521762d5aa3aa1c9fd2da8d041a6374489f9083fc2ca9ff0ff35b715a1b8de64cbdae6805a892006fd2a7eec6c98ee6914be0f606531cda82be95d1669d18b6263abb60e2c94e3e151190627714405ba061507cb93c5c63648a6472eec6f08aef58a3bab856045da85372c296d0e7f549dfe5b8990fbd8a1aab147dd19ff86c4f1438563e111dcd697335d95ea9dfdb9c2b5e6b49720538f750cab746a73e86ce25a0406c573cd25f1469a3f9b3bdc48918751bf3c169ac555ede5e6f1e7659a8ca8361a420f1e5eea7823aa9eb0145a92f66ea7dd3db1c56237fb9d4567aec4e3ef80079a309c500e2334678c5edae004b9446335d9d91f2beac472f45dad5733af953be6766a8d034b0d8a04cf621b1078c85a1b6528527338300f1ac257d566037e4104adb9fb719ddff6352ee614b8ee62732cd0755d40639f24b7dc5853ac1c0d43333501d90b47efb9edca8b5788e368b544ca26ebcc86f6ce2490be6b326fb9e29bb5a51273f789926b58de4da099338e2844d38cbeb4632a9a1e0d4b7a5116c5ae8b15be1b9396b63701d91e89f962c450fdf858fb554ddafcbd734cd43b73d44949f44b7e1a17796411016ad085fedfc7abcdefbb5e1ecc6a6499a41648dcdcb15fdcd35154ec3b0066464d872adc810137c77ae6f7be61ec8db2528d1c748c7040dc633f78f172cca0a6f2b9b80661b6ccde396f4ac64d9035fc290f90e5efe760654f623e9f6e3acdf63077d0b57fce8134fb394cfe869f1a75f54150976b7c6be3bbdbdc8d20ee348d337de8d801c56d305e112a7f7a770b2236b2321be3fba766b523e8392cb3497744604807ac8d21648ddbf7583d944d56dd6eeab813efe5942319745638745bd447643baf7cad3ba6a5482b0d2a4a4abca92787198d17494bd1b73da0cfc3898822098ab17bf67c3340a879aaff88c2633dc940078f5833df4972017cbe1e02777962dc06079a10803cf2c64803e86cc0f6f50b30843f0d855327e8888cdbe9b837a371d26cd88a0186849832063b872a37900c8ebe92de0d5eae438da8fee946740774d10badc4cf5270eaec5be6b50c894dbdbecbd484f1cf80098a61896d7e8eb0614f21068225ba3c472590569f6883d9aeeaf78eecdf1e735cf69c36b47508ebaff775a82d3045f3d679d2879cf97023fdf0723261bd3e8145910cd951ec27f0f79651bdd4c6919fe85b2d8960a1aaf3f684ee23f7af68d8e8825d0df66867553744d3791838075c4a8471facc313a4be37db4296636174327224359315e75988afb465e8da68b34566158ac1bdd343e16cde5b1f8553e88973397ca1319eb2132f54b597f1eaccf68cfa04edc6daae91bbea1bd4023f4347c58b45bc7ba608f289a59c9139944078a1223abe9353388b93680f7ee481c1a1a4f690814a5b430f3d1debb8a3709b4fc1d896671361baf7b491b55a1104e6c8763516de71fdd0f4c9d8677a273ad2d9ed6f4c6231195d68c3e0180e255770f298225f69cecefaeb62fec2e5667c61632bde229e90603245f3c68b585916fbde44946732e8eb3282a5fa63e109a2c8948922241d57bfcb7d5e77eb1222328d03e5696fb7f91187ba975526f57f3e8b4d66f217782ebaab7eda2c13e5dd314e3e96b72a688ffae2323e542215ac44741c2a2994e7c6711a8b46df6edc442ca746d8215a223603e7d45c35b0616853135e1d5c7e420f088d5d945e531eea3382026a144fc2324d2e698976cdc64e66b1f41a7a3fe1871e2e8a9b6b1a214e45082a85ad5ac330b3fbe3a352dfc2b2ef195c41ad72c6b526ff537822a119bd3a90a30ba3c8cddeb98f7b683e32cd5de0214b58b4cbd2ddd14e940d0dc93fdf59a95b62ab2de7f5ab406a9f9178b8269d90f4130bdad21d37dfc3c74c1cb3cb51509a3dabccc705e0d77f66bea2c85d70259aa402ffb80b8dc70e7f5332a30df1b3613a91b8fc0632b5e06f7ee00d7dc606ff5cfad3564036bc765a0033f4f766645ab73a6d6ed8ad75aaf624bef6fa2c7ea5cbcf20f9ff823ac139517a3de99468cd3ce7beb3ba357093e062acbb456e1b2d09b0c7543ce54340134e652b67e5e19b83ee3be4d8745bf1aadbffd6af5ff82a4979c102d5d6fb5634cc1d2127b2992418400d45d8e096ce3f0143e49a018a7e40006f18a674a558b1fe626526ab789c95be4ea465673a1eb83dca93047a312dad00919f988d4b4b65740244fc9127e6d69e713778e6c3c839999ef2d41fc25a8d9d59b14b2e26e3d29f105d49f83f45eab38d252d60470cd1b304c02456911272d402e028b0e89c111c08b3cd34389bdfbad161a5ec7280e6d6dd69ede0db90c08703fa1553ab89c0778d0554eec89f21bc6492254b121f652cf5aa6158c99038e9d8fdcf0af36961718d081de60ab34a330219e53214d0bbad4273e0b228f1ff5105066385a2df0bcb84ceedd26200966978b075c49fda953a33e459e323589dab666aaf73f3361dcec1cd17ed9e9ed173e2410dc80929aa66e1b9659bdec34dad37d3c6e37bed9daded8811314862af9a22a51c8e48f19e626fcab83a0995e904005dacf2c4de7d1b4ca4c6968cab31ecc2c3dcc6e6c4b2233a40abae95426106800845a7616f3353caed47dc3a4807d8509a753701da36b261c34c534480f35d7a325c2cc3bf2f72dcb1fac4f99cc64b91e199b83c40ca53e956a3fe7f91509b9daf42f4707f8ea006acb3974c3e4bee7ef99565ce3b1b393fa392f5e2db9afc9e81d9f50ee95b71d0b0fbc1e2f73bf5a0dedea68a5a280449da883380beb639eb0da7ac409433fe40507594136383b85d1b392966124dfbd8f294e4d1cf0b69cfb8e7223ae9dad92f2b4ace4dea82fb0a3f08151ee96accb5bbf986936a5e026de1d33889428b24a4cb4dde691bbb0c60f20937876c403a5922e62c6e522376ee6f8a5fce5c3ff39dc7a0a9d58d7424f8d8d208e47fba6cf1fc04ceb0c624f2efa8aad82d2b90cf54620344d2ad827e5c68f8ec65a060774854eed25a8a5876f1070f1a9fc3d89917886eb4efea4f3201efa9963b7bfcea15e13c3be2a69d67db3a7ed4f3a1b4cc98d5f7cbe5562fd1c3068606ccba092da2dacc85f1c9cba5afca17bc49a0da3b96799bd23bdd8f1821bbe21101e09c5031f5078ce465db4ee5d99fb7329b7620c8171ec0df606997ab90fa1a2d277b01583e314134e3fa87a2627ed4b33699caf12de15d83f38b600bf4f40931a006d0839074045e76c46be8c94a0b8e705ae7d4c3a20449dd9d602c4313e80944efdd98958d66c0587cb002c477bc069337c5094705583cf4bb9c2754241a3a639673d7f7bad3f26328ea8f984cc54f023e7c3a09d9a35d924a0733ed60b401d7827278b9fde208205aca42134c64c9f34e4", 0x1000}, 0x1006) [ 169.539056] binder: 10613:10615 Release 1 refcount change on invalid ref 21 ret -22 [ 169.553541] binder_alloc: binder_alloc_mmap_handler: 10613 20001000-20004000 already mapped failed -16 [ 169.570863] binder_alloc: 10613: binder_alloc_buf, no vma [ 169.570882] binder: 10626:10631 transaction failed 29189/-3, size 0-0 line 3136 13:48:49 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100fffffff8) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/43, 0x52}], 0x12) 13:48:49 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@generic={0x0, 0x6429}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)={0x0, @speck128}) sendmsg$nl_generic(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000081) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x20c6a755fa5d2609, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x3, 0x5}, 0x4, 0xffffffffe1da16ee}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) execveat(r3, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140), &(0x7f0000000340)=[&(0x7f0000000180)='%&!*wlan0/\x00', 0x0, &(0x7f0000000200)='cpuset.sched_load_balance\x00', &(0x7f0000000240)='em0+\x00', &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x0], 0x0) fallocate(r3, 0x0, 0xfffffffffffffff9, 0x3ff) prctl$PR_GET_TIMERSLACK(0x1e) openat$cgroup_int(r3, 0x0, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) 13:48:49 executing program 4: 13:48:49 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x2f0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) [ 169.580802] binder: undelivered TRANSACTION_ERROR: 29189 [ 169.599337] binder: BINDER_SET_CONTEXT_MGR already set [ 169.599347] binder: 10613:10615 ioctl 40046207 0 returned -16 [ 169.645050] audit: type=1400 audit(1545486529.461:39): avc: denied { create } for pid=10647 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 169.647038] audit: type=1400 audit(1545486529.471:40): avc: denied { ioctl } for pid=10647 comm="syz-executor2" path="socket:[36306]" dev="sockfs" ino=36306 ioctlcmd=0x8941 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 169.648324] audit: type=1400 audit(1545486529.471:41): avc: denied { write } for pid=10647 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 169.752363] binder: 10613:10623 ioctl c0306201 0 returned -14 [ 169.758773] binder_alloc: 10613: binder_alloc_buf, no vma [ 169.764523] binder: 10613:10620 Release 1 refcount change on invalid ref 21 ret -22 [ 169.764933] binder: send failed reply for transaction 450 to 10613:10615 [ 169.764950] binder: undelivered TRANSACTION_ERROR: 29189 13:48:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = socket(0x4, 0x5, 0x6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 13:48:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) 13:48:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 13:48:49 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x803, 0x3) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) [ 169.827116] binder: 10613:10615 transaction failed 29189/-3, size 24-8 line 3136 13:48:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff7f}}}, 0xb8}}, 0x0) 13:48:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x3, 0x3c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0x2}, 0x1c) [ 169.867657] binder: 10665:10668 ioctl c0306201 0 returned -14 13:48:50 executing program 5: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 13:48:50 executing program 4: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), 0x0, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x8802, 0x0) 13:48:50 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @dev, @local}}}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r2 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000), 0x4) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000300)={0x3b, 0x20, 0xb, 0x6, 0x8, 0x3, 0x6, 0x30}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) seccomp(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) 13:48:50 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@generic={0x0, 0x6429}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)={0x0, @speck128}) sendmsg$nl_generic(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000081) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x20c6a755fa5d2609, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x3, 0x5}, 0x4, 0xffffffffe1da16ee}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) execveat(r3, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140), &(0x7f0000000340)=[&(0x7f0000000180)='%&!*wlan0/\x00', 0x0, &(0x7f0000000200)='cpuset.sched_load_balance\x00', &(0x7f0000000240)='em0+\x00', &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x0], 0x0) fallocate(r3, 0x0, 0xfffffffffffffff9, 0x3ff) prctl$PR_GET_TIMERSLACK(0x1e) openat$cgroup_int(r3, 0x0, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) 13:48:50 executing program 5: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 13:48:50 executing program 5: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 170.676283] binder_alloc: binder_alloc_mmap_handler: 10665 20001000-20004000 already mapped failed -16 [ 170.686160] binder: 10665:10680 ioctl c0306201 0 returned -14 [ 170.721444] binder: BINDER_SET_CONTEXT_MGR already set [ 170.727368] binder_alloc: 10665: binder_alloc_buf, no vma [ 170.733173] binder: 10665:10680 ioctl 40046207 0 returned -16 [ 170.735352] binder: 10665:10717 Release 1 refcount change on invalid ref 1 ret -22 [ 170.739863] binder: send failed reply for transaction 456 to 10665:10668 [ 170.739877] binder: undelivered TRANSACTION_COMPLETE 13:48:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='sE\xf8\xb8\xab\xf8\xe2\xee2\xd5\x05\xb4-\xca\xb0{\x91/') r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioprio_get$pid(0x3, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000080", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'team_slave_1\x00'}, 0x18) 13:48:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:48:50 executing program 0: 13:48:50 executing program 5: [ 170.739884] binder: undelivered TRANSACTION_ERROR: 29189 [ 170.783990] binder: 10665:10714 transaction failed 29189/-3, size 24-8 line 3136 13:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4783601}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 13:48:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1d, 0x401, 0x0, 0x0, {0x40007}}, 0x14}}, 0x0) 13:48:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x3, 0x3c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0x2}, 0x1c) [ 170.847250] binder: 10719:10725 ioctl c0306201 0 returned -14 13:48:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4783601}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 13:48:51 executing program 1: 13:48:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4783601}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 13:48:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0xf, 0x4) readv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1) [ 171.615589] binder_alloc: binder_alloc_mmap_handler: 10719 20001000-20004000 already mapped failed -16 [ 171.625304] binder: 10719:10744 ioctl c0306201 0 returned -14 [ 171.631335] binder: BINDER_SET_CONTEXT_MGR already set [ 171.636654] binder: 10719:10761 ioctl 40046207 0 returned -16 [ 171.642841] binder_alloc: 10719: binder_alloc_buf, no vma [ 171.648446] binder: 10719:10761 transaction failed 29189/-3, size 24-8 line 3136 [ 171.656116] binder: 10719:10744 Release 1 refcount change on invalid ref 1 ret -22 13:48:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:51 executing program 2: 13:48:51 executing program 1: 13:48:51 executing program 0: 13:48:51 executing program 5: 13:48:51 executing program 4: 13:48:51 executing program 1: 13:48:51 executing program 0: 13:48:51 executing program 4: [ 171.656318] binder: send failed reply for transaction 461 to 10719:10725 [ 171.664288] binder: undelivered TRANSACTION_COMPLETE [ 171.664295] binder: undelivered TRANSACTION_ERROR: 29189 13:48:51 executing program 2: 13:48:51 executing program 5: 13:48:51 executing program 1: [ 171.745788] binder: 10772:10774 ioctl c0306201 0 returned -14 [ 172.527607] binder_alloc: binder_alloc_mmap_handler: 10772 20001000-20004000 already mapped failed -16 [ 172.537317] binder: BINDER_SET_CONTEXT_MGR already set [ 172.537333] binder: 10772:10784 ioctl c0306201 0 returned -14 [ 172.548528] binder: 10772:10785 ioctl 40046207 0 returned -16 [ 172.554689] binder_alloc: 10772: binder_alloc_buf, no vma [ 172.560287] binder: 10772:10785 transaction failed 29189/-3, size 24-8 line 3136 [ 172.568029] binder: 10772:10784 Release 1 refcount change on invalid ref 1 ret -22 13:48:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="066304400100f7f6"], 0x0, 0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x100000000) 13:48:52 executing program 0: 13:48:52 executing program 2: 13:48:52 executing program 4: 13:48:52 executing program 1: 13:48:52 executing program 5: 13:48:52 executing program 5: 13:48:52 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff7f}}}, 0xb8}}, 0x0) 13:48:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20b60}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) [ 172.575775] binder: send failed reply for transaction 466 to 10772:10774 13:48:52 executing program 1: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffffffffa0008000) 13:48:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000080)) 13:48:52 executing program 5: [ 172.636067] binder: 10792:10796 ioctl c0306201 0 returned -14 [ 172.717431] binder: 10792:10815 Release 1 refcount change on invalid ref -151584767 ret -22 [ 173.422498] binder_alloc: binder_alloc_mmap_handler: 10792 20001000-20004000 already mapped failed -16 [ 173.432117] binder: BINDER_SET_CONTEXT_MGR already set [ 173.432130] binder: 10792:10815 ioctl c0306201 0 returned -14 [ 173.443315] binder: 10792:10816 ioctl 40046207 0 returned -16 [ 173.449356] binder_alloc: 10792: binder_alloc_buf, no vma [ 173.454963] binder: 10792:10816 transaction failed 29189/-3, size 24-8 line 3136 [ 173.462854] binder: 10792:10815 Release 1 refcount change on invalid ref -151584767 ret -22 13:48:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x4000) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000040)={0x200}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000003c0)={0x3, 0x0, 0xfffffffffffffe01, 0x0, 0x3}) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="8949c43d02048261d5964c15d40d7bb915cb7858aaebf53fdd8a234f0127c97d2e3c3b8dc779f54cdcf93578c6e36d9909e09f4b5c90bbf3ed697483d5e92c9b6f88be1928ca9f8041402231b8d31cfd35ad7937abe5141dccae92d3a32ed18fd12bdae5fcbdec8604a21bd3c66952b44092709e5aa09ff8e6adc7fe", 0x7c, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='/dev/binder#\x00', 0xfffffffffffffff8) keyctl$reject(0x13, r4, 0xee3, 0xb4, r5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="066304400100c600"], 0x0, 0x0, 0x0}) 13:48:53 executing program 1: 13:48:53 executing program 2: 13:48:53 executing program 4: 13:48:53 executing program 5: 13:48:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20b60}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) 13:48:53 executing program 4: 13:48:53 executing program 5: 13:48:53 executing program 1: [ 173.471632] binder: send failed reply for transaction 471 to 10792:10796 [ 173.471688] binder: undelivered TRANSACTION_COMPLETE [ 173.471694] binder: undelivered TRANSACTION_ERROR: 29189 13:48:53 executing program 2: 13:48:53 executing program 1: 13:48:53 executing program 4: [ 173.522647] binder: 10825:10827 ioctl c0306201 0 returned -14 [ 173.606500] binder: 10825:10840 Release 1 refcount change on invalid ref 12976129 ret -22 [ 174.305936] binder: 10825:10840 ioctl c0306201 0 returned -14 [ 174.312031] binder: BINDER_SET_CONTEXT_MGR already set [ 174.317434] binder: 10825:10841 ioctl 40046207 0 returned -16 [ 174.323835] binder_alloc: 10825: binder_alloc_buf, no vma [ 174.329477] binder: 10825:10840 transaction failed 29189/-3, size 24-8 line 3136 [ 174.337176] binder: 10825:10841 Release 1 refcount change on invalid ref 12976129 ret -22 [ 174.337574] binder: send failed reply for transaction 476 to 10825:10827 13:48:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'dummy0\x00', @dev={[], 0x19}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x200000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="005ca3a3880124f53a4d9f81f89b001f00000000510db06e9c3cb9848eadce4db8c7d8aa2848fe944bc5208cb92bce39d495fc47e4d19bb9518198713d46711cb80da1908c5a1aa73bd4bfe2b7c9efc05117e6e574f154ccc57465bc3913df55f9364dd88bd87eddd2f62cac7bb6cf0e261afe1d7cebd5e7ef18ec9d10dcd73e274e1e5335a6c8fddc01da8171529ab7e69cd34eab07c4ae8c72bc56931c52b4b0036cacbbc6e4c79509985955b448abd9064cc6b734fceb34a1a323affd94c9bd0145ab2c"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:54 executing program 2: 13:48:54 executing program 1: 13:48:54 executing program 5: 13:48:54 executing program 4: 13:48:54 executing program 0: 13:48:54 executing program 2: 13:48:54 executing program 0: 13:48:54 executing program 4: [ 174.337627] binder: undelivered TRANSACTION_COMPLETE [ 174.337633] binder: undelivered TRANSACTION_ERROR: 29189 [ 174.387780] binder: 10849:10850 ioctl c0306201 0 returned -14 13:48:54 executing program 2: [ 174.409976] binder: 10849:10850 got transaction with invalid offset (-782498748883051520, min 0 max 24) or object. [ 174.431768] binder: 10849:10850 transaction failed 29201/-22, size 24-8 line 3199 [ 174.448046] binder: 10849:10850 Release 1 refcount change on invalid ref 1 ret -22 13:48:54 executing program 5: 13:48:54 executing program 1: [ 174.464285] binder_alloc: binder_alloc_mmap_handler: 10849 20001000-20004000 already mapped failed -16 [ 174.487892] binder: 10849:10850 ioctl c0306201 0 returned -14 [ 174.493813] binder: BINDER_SET_CONTEXT_MGR already set [ 174.500009] binder: 10849:10856 ioctl 40046207 0 returned -16 13:48:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x5000000004) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x695, @dev={0xfe, 0x80, [], 0xe}, 0x400}, {0xa, 0x4e24, 0x4, @empty, 0x8}, 0x9, [0xd8, 0x9, 0xffff, 0x10001, 0x7, 0x9, 0x3, 0x4]}, 0x5c) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x40000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) pause() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0663044001000000db7281b9fb69cf5af4bf4dbae40bf80cdc2b9d7547488e0be0e0fe000000000000"], 0x0, 0x0, 0x0}) 13:48:54 executing program 0: 13:48:54 executing program 1: 13:48:54 executing program 5: 13:48:54 executing program 4: 13:48:54 executing program 2: [ 174.512854] binder_alloc: 10849: binder_alloc_buf, no vma [ 174.518745] binder: 10849:10856 transaction failed 29189/-3, size 24-8 line 3136 13:48:54 executing program 0: 13:48:54 executing program 5: 13:48:54 executing program 4: 13:48:54 executing program 1: 13:48:54 executing program 0: 13:48:54 executing program 2: [ 174.642494] binder: 10875:10880 ioctl c0306201 0 returned -14 [ 175.419964] binder_alloc: binder_alloc_mmap_handler: 10875 20001000-20004000 already mapped failed -16 [ 175.429689] binder: 10875:10890 ioctl c0306201 0 returned -14 [ 175.430743] binder: BINDER_SET_CONTEXT_MGR already set [ 175.430751] binder: 10875:10891 ioctl 40046207 0 returned -16 [ 175.430898] binder_alloc: 10875: binder_alloc_buf, no vma [ 175.430916] binder: 10875:10891 transaction failed 29189/-3, size 24-8 line 3136 13:48:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:55 executing program 4: 13:48:55 executing program 5: 13:48:55 executing program 2: 13:48:55 executing program 0: 13:48:55 executing program 1: 13:48:55 executing program 2: 13:48:55 executing program 5: 13:48:55 executing program 1: [ 175.476319] binder: 10875:10890 Release 1 refcount change on invalid ref 1 ret -22 [ 175.476519] binder: send failed reply for transaction 484 to 10875:10880 [ 175.484442] binder: undelivered TRANSACTION_COMPLETE [ 175.484449] binder: undelivered TRANSACTION_ERROR: 29189 13:48:55 executing program 0: 13:48:55 executing program 1: 13:48:55 executing program 5: [ 175.539726] binder: 10899:10902 ioctl c0306201 0 returned -14 [ 175.568777] binder_alloc: 10899: binder_alloc_buf, no vma [ 175.594875] binder: 10899:10902 transaction failed 29189/-3, size 24-8 line 3136 [ 175.616877] binder: 10899:10915 Release 1 refcount change on invalid ref 1 ret -22 [ 175.626288] binder: 10899:10902 ioctl c0306201 0 returned -14 [ 175.632299] binder: BINDER_SET_CONTEXT_MGR already set [ 175.638351] binder: 10899:10915 ioctl 40046207 0 returned -16 13:48:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80) connect$packet(r3, &(0x7f00000000c0)={0x11, 0x5, r4, 0x1, 0x2, 0x6, @random="3703b3f77068"}, 0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400000, 0x0) 13:48:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x11a, 0x20000005, &(0x7f000031e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:48:55 executing program 4: open(&(0x7f0000000140)='./file0\x00', 0xa0000000004d40, 0x140) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 13:48:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) munlockall() 13:48:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_TIMERSLACK(0x1e) 13:48:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0xfffffffffffffffe, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 13:48:55 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='maps\x00') 13:48:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x11a, 0x20000005, &(0x7f000031e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:48:55 executing program 0: [ 175.644470] binder_alloc: 10899: binder_alloc_buf, no vma [ 175.650284] binder: 10899:10915 transaction failed 29189/-3, size 24-8 line 3136 [ 175.677543] binder: 10920:10928 ioctl c0306201 0 returned -14 13:48:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x209) r1 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:48:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="c98d50b462b415084f1d183e560c056b25a4bcb33d5b7922e72210cc8a95017b118bcf866208fcb12c59a091c9da46f03a36d97b5d233fafa9d0e39c932dcd7ce7e2e7fc323c7e0169b82f81782f56521631a0e14deae4a5a743fcd869eadd2317a643a4b408803026c6eaeb409c94cf262b865fceeccecf242ff36a6ab541c1d301f3792b008d90c3a41b60d16d5f5ee8ece096f6f82182f239bd351b40fbfc3451a8833272fd874a9967f7b9b0cbedfcdca99cede5b4e14815fd4be5568ec89542d728345d65df1f45cc45cf8145ce361fdb02799568c753bfa006764106ffac566863caf0ada222cff4076caf68720bf8348d9ef8304fd249f7f0fca4e65ba0b62cbac5855588530b7bb633ea380cfd125b542647ea66b587198d1585d775119146b8e7e41a1acd30c6ba4ba59e3343e2cf9bbe84deafab6c2f71733815e0ab55f29aeb9647e51b1af5ad62ccdf652eaf6961ba52e1187a4dc20651078e430df8fbcc948a7f562e8820b575b6f2ebefe83ffe7080876d8a757ea3919ae46954e663be4150ec3de91d0095a82f8658eae7cd171cc233a1121cbf254faa3f249fb85e5f97876530de4ffc7515c360486ee1699144fdf9219ac18b23af2385c545243f726e307a5cfaad10199fbada0ece86067434d8a0b354f079482919875b1263552dee9fce8e89fd0b2d80388de94e62e0f02039cbfdc93afd96115ec31ccc31f32d648d1959ec3f30896e60e533e65d34f6c4ad3c44a8b22ffa3629ffeef425fb507073939fda0a247f3aa43faf8a87f2465916f412995465aeb6b3dcde87292f75935a943ea440d157f3c1980809cfa8946b8ad1b3a639d7e49bcaafa9f37f64cb16d05a3135938b19135672b4e7caac39280ead67783e54aa4b76310376bf6ea2066d31b3c62b06477ed78a1ea02e62c0e281ff960ecdba94c275ac6e3bd2e4ff539bc39c5a419d3855a5fd55554099ac4a7c2d0c74db28655ff2e778eeb2861d9ac42d1fe885adcbbf43f2abf0cc840d5e3c009e8bed187acee07cad0fc1003175c268645770514bb588776f48f3fa4c250f22c0c74733246d7b35c13af7e613621dc115973031b746dd4cc0f875cee012196e626fe98b15e0fd287a75be856954298d5c8974f7fe7c7bf8350dcf2874e5d93ae65e7a109bc141a3ec06f2eabd3606b917e18e5cd25d1e26e7d6bcb6cd6ec4aa66889c30cdfbd91c39be368a6d19c01225be22f00bcfd3d7adbb4ed48a1300360fb84f21a19feacc84452d82941d42297b973ef99f50eaaa74e5465b2c26e51cdd20f59d798093b8367393c94e5629661bb0047a1d60a2dbdb1ea4339f5135b33eea1d48ee3fe4e90a4e510d2e37c9d25c9595909d1c51ddd6602eb1f69e2131b89466283e66a4ad4792548bc65e4b7ae9bc8c83c0aa55396695dcd91df4a8637a801796a0f5f4ad1727a65292d38a400010c3bc49eacec4a3a3a4892a115b3e5bd72254e0dacca291e538e83c118c75680f7f032ad0ba0bf6017c32ba41f5dce24d03bc211703d70b9962fc1614b468c4e469a891d34e2af24fe7e30bf702048351df256e31213bf219c9e91a5a871d96a6b8269f2de10d0396f32d4e1b5604bad8ed1c2635cec2cbd2b69e45fda69f1019ddce5c45df9a560c3874dbab1255c3d0fcedaf532cc8319e14bcee87bb24c11df14c903a189bc1051c2734d828dd0c5588e816e8104bce5b82704a6fab67e9d275365b45b298d0d5fa8a353ce5304b9ae940db144d545495ced1b863d0d5f8e39aaea616f1c34d75f5146d475ee188b77720453657c474387adc2db8b845bebc1e4feb46f34a0357c1539c0e0196b5dc38291b3bd146b25629c223ee3e7b26e184ed1424cd78935e69454679112b015528fad20b4d681bb801aea87caa5934529e4e72aa8f731ffe93ae212636752f0b1890160c081065e935fa4628b8189bb383966c4b7de13368e8aafb33c9e98d8031ce069c565b83c11b5c8177a8b38e2fd0ec98a22d04cf9afa2b841e388dfd8b2a78909de9cba048f6f5abe2642936522ccf4bcd79149fee", 0x5b1, 0x4011, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:48:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) [ 176.474078] binder_alloc: binder_alloc_mmap_handler: 10920 20001000-20004000 already mapped failed -16 [ 176.483746] binder: 10920:10949 ioctl c0306201 0 returned -14 [ 176.489720] binder: BINDER_SET_CONTEXT_MGR already set [ 176.495011] binder: 10920:10965 ioctl 40046207 0 returned -16 [ 176.501255] binder_alloc: 10920: binder_alloc_buf, no vma [ 176.506816] binder: 10920:10965 transaction failed 29189/-3, size 24-8 line 3136 [ 176.514462] binder: 10920:10949 Release 1 refcount change on invalid ref 1 ret -22 13:48:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x6, 0xf800000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x8, 0x200, 0xffffffff7fffffff, 0x6, 0x0, 0x7fffffff, 0x0, 0x4, 0x57b, 0xcae, 0x80000001, 0x1, 0x4, 0x2, 0x7, 0x7, 0x2, 0x401, 0xfd0, 0xfffffffffffffffd, 0x2, 0x3, 0x8, 0x8, 0x6, 0x3, 0x7ff, 0x0, 0xffffffff, 0x1, 0x1, 0x7, 0xffff, 0x6, 0x3f, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x2, 0xffff}, 0x40, 0x9, 0x1, 0xf, 0x4, 0x88, 0xfffffffffffffbff}, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x57, "f92b631c355895eb34578055b3b7357b188b722e41df8b22fca1e038c6a13471c93c3d61ab9e0c93d8333157e051e7fe8660d156a2bcbfbff7d35bcb1a99237ca88940070007415dab47dde1497b2b09e7ff4b04cbe07c"}, &(0x7f0000000180)=0x7b) 13:48:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:48:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) 13:48:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:48:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="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", 0x5b1, 0x4011, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:48:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='maps\x00') write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 13:48:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') getdents(r0, 0x0, 0x0) 13:48:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) [ 176.522924] binder: send failed reply for transaction 492 to 10920:10928 [ 176.531794] binder: undelivered TRANSACTION_ERROR: 29189 13:48:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x209) r1 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:48:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="32cae4783d32"}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="040300000003000000000000c52c", 0xe, 0x0, 0x0, 0x0) [ 176.592994] binder: 10975:10981 ioctl c0306201 0 returned -14 13:48:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RSTAT(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="98"], 0x1) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) 13:48:56 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) [ 177.362491] binder_alloc: binder_alloc_mmap_handler: 10975 20001000-20004000 already mapped failed -16 [ 177.372143] binder: BINDER_SET_CONTEXT_MGR already set [ 177.372157] binder: 10975:10999 ioctl c0306201 0 returned -14 [ 177.383580] binder: 10975:11014 ioctl 40046207 0 returned -16 [ 177.389710] binder: 10975:11014 Release 1 refcount change on invalid ref 1 ret -22 [ 177.389847] binder_alloc: 10975: binder_alloc_buf, no vma [ 177.389908] binder: 10975:10999 transaction failed 29189/-3, size 24-8 line 3136 13:48:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a9b547a4c5514bed10385bb40d109cc673"], 0x0, 0x0, 0x0}) 13:48:57 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) poll(&(0x7f0000000040)=[{r1, 0x4131}, {r0}], 0x2, 0x0) 13:48:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') linkat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 13:48:57 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:48:57 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RSTAT(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="98"], 0x1) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) [ 177.415221] binder: send failed reply for transaction 497 to 10975:10981 [ 177.424652] binder: undelivered TRANSACTION_COMPLETE [ 177.438647] binder: undelivered TRANSACTION_ERROR: 29189 13:48:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/87, 0x57}], 0x1, 0x0) 13:48:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) lstat(0x0, 0x0) setreuid(0x0, 0x0) getpid() write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0x8000010001) shutdown(r0, 0x1) [ 177.465369] binder: 11021:11025 ioctl c0306201 0 returned -14 13:48:57 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) 13:48:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/119, 0x77) 13:48:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_adjtime(0x0, 0x0) 13:48:57 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) removexattr(0x0, 0x0) 13:48:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) lstat(0x0, 0x0) setreuid(0x0, 0x0) getpid() write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0x8000010001) shutdown(r0, 0x1) [ 177.548353] binder: 11021:11034 unknown command -1538804311 [ 177.565194] binder: 11021:11034 ioctl c0306201 200001c0 returned -22 [ 178.253214] binder_alloc: binder_alloc_mmap_handler: 11021 20001000-20004000 already mapped failed -16 [ 178.262870] binder: 11021:11034 ioctl c0306201 0 returned -14 [ 178.262873] binder: BINDER_SET_CONTEXT_MGR already set [ 178.262885] binder: 11021:11064 ioctl 40046207 0 returned -16 [ 178.263360] binder_alloc: 11021: binder_alloc_buf, no vma [ 178.263380] binder: 11021:11065 transaction failed 29189/-3, size 24-8 line 3136 [ 178.263692] binder: send failed reply for transaction 502 to 11021:11025 13:48:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:48:58 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:48:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x400000000000103, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 13:48:58 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, 0x0) 13:48:58 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f00005cfff0)={0x4000000000001, 0x7}) 13:48:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') sendfile(r0, r0, 0x0, 0x8) [ 178.269018] binder: undelivered TRANSACTION_COMPLETE [ 178.269026] binder: undelivered TRANSACTION_ERROR: 29189 13:48:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 13:48:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x29, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x0, 0x0, 0x0}) 13:48:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x20000000000, @empty, 0x3}, 0x1c) writev(r0, &(0x7f0000000540), 0x1000000000000056) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, 0x0) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='\x00\x00\x00\x1a\xe3\npL\xa9\xf9\xe5\x9c\xfb0\x97%/|(\xc5\x8d t/R\v\xdbxl\xa9H\x82\x00\x00\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x3) fcntl$setstatus(r3, 0x4, 0xc44) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f00000000c0)='system_u:object_r:iptables_unit_file_t:s0\x00', 0xe8bb7e5cb5e02a37) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000600)="b2cf791ae07fcba019ebbd2764b345fa475d494fbe60cf259fd297b6a2fdd1ea01970074f98d272cf8d67d88f966abb43192f5914c3a07cc27be2b22f5fffb76de823d144210", 0x46) select(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x400000000, 0x80000000000, 0x1}, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]) listen(r1, 0x81) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 13:48:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) lseek(r0, 0x0, 0x2) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl(r1, 0x2, &(0x7f0000000180)="d73ec64c5537545f81b7e9f852e3d725cf5cbee6d85119b0d99a2cc5d52467ee5690d98af9597159733499fd8da4948619a3c5283036a3ee450e09103f32") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000001740)=0xc) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000300), &(0x7f00000001c0)=0x4) ioctl$KIOCSOUND(r4, 0x4b2f, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x40070, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) flock(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x34, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e23, @rand_addr=0x4}, 0x20, 0x3, 0x4, 0x7, 0x0, 0x0, 0x9, 0xf1e}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x68, "12024036a1dbae3642535fc11239bf2cca9f4f7075a4574dd22c31b70e25cbed42c47bf4859b40eaedefd1a2e449163cc825eed1354b8706895d8cc52dcc75e4ecfab8992c03336109e9de4d5cab378e28acfff47303c582acf9ae45464685009c4ff27bde98c853"}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x401}, 0x28, 0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 178.353894] binder: 11077:11082 ioctl c0306201 0 returned -14 [ 178.381425] binder: 11083:11089 transaction failed 29189/-22, size 274877906944-0 line 3013 13:48:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x6c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ffff0f000a000200aaaaaaaab1aa0000d9a2fdc8c2a5eef4f13bf67eb86eb3a5b9"], 0x1}}, 0x0) [ 178.398226] binder: undelivered TRANSACTION_ERROR: 29189 13:48:58 executing program 1: [ 178.437568] binder_alloc: binder_alloc_mmap_handler: 11077 20001000-20004000 already mapped failed -16 [ 178.457598] binder: 11077:11082 ioctl c0306201 0 returned -14 [ 178.463644] binder: BINDER_SET_CONTEXT_MGR already set [ 178.463653] binder: 11077:11093 ioctl 40046207 0 returned -16 [ 178.472106] binder_alloc: 11077: binder_alloc_buf, no vma [ 178.472125] binder: 11077:11101 transaction failed 29189/-3, size 24-8 line 3136 [ 178.472450] binder: send failed reply for transaction 508 to 11077:11093 [ 178.475662] binder: undelivered TRANSACTION_ERROR: 29189 13:48:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x8, @local, 0x4e20, 0x4, 'none\x00', 0x20, 0x5, 0x7}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/75, 0x4b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xfffffea8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="aadb54cdc3b7036ab8897c6cbf1abf0c3d5f7e22aa0c8280fa096632215011e9da4e6a3d9ab7c2"], 0x286, 0x0, 0x0}) 13:48:58 executing program 1: [ 178.621177] blk_update_request: 250 callbacks suppressed [ 178.621184] blk_update_request: I/O error, dev loop5, sector 0 [ 178.632761] buffer_io_error: 250 callbacks suppressed [ 178.632772] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 178.639894] binder: 11118:11119 ioctl c0306201 0 returned -14 [ 178.651534] blk_update_request: I/O error, dev loop5, sector 4 [ 178.657575] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 178.665279] blk_update_request: I/O error, dev loop5, sector 8 [ 178.671252] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 178.678925] blk_update_request: I/O error, dev loop5, sector 12 [ 178.684983] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 178.692656] blk_update_request: I/O error, dev loop5, sector 16 [ 178.693402] binder: 11118:11121 unknown command -850076758 [ 178.693411] binder: 11118:11121 ioctl c0306201 20000040 returned -22 [ 178.711365] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 178.719033] blk_update_request: I/O error, dev loop5, sector 20 [ 178.725112] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 178.732798] blk_update_request: I/O error, dev loop5, sector 24 [ 178.738882] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 178.746582] blk_update_request: I/O error, dev loop5, sector 28 [ 178.752658] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 178.760339] blk_update_request: I/O error, dev loop5, sector 32 [ 178.766420] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 178.774075] blk_update_request: I/O error, dev loop5, sector 36 [ 178.780154] Buffer I/O error on dev loop5, logical block 9, lost async page write 13:48:58 executing program 0: 13:48:58 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:48:58 executing program 1: 13:48:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) lseek(r0, 0x0, 0x2) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl(r1, 0x2, &(0x7f0000000180)="d73ec64c5537545f81b7e9f852e3d725cf5cbee6d85119b0d99a2cc5d52467ee5690d98af9597159733499fd8da4948619a3c5283036a3ee450e09103f32") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000001740)=0xc) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000300), &(0x7f00000001c0)=0x4) ioctl$KIOCSOUND(r4, 0x4b2f, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x40070, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) flock(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x34, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e23, @rand_addr=0x4}, 0x20, 0x3, 0x4, 0x7, 0x0, 0x0, 0x9, 0xf1e}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x68, "12024036a1dbae3642535fc11239bf2cca9f4f7075a4574dd22c31b70e25cbed42c47bf4859b40eaedefd1a2e449163cc825eed1354b8706895d8cc52dcc75e4ecfab8992c03336109e9de4d5cab378e28acfff47303c582acf9ae45464685009c4ff27bde98c853"}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x401}, 0x28, 0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 13:48:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000fa3e2d7b15cb"], 0x0, 0x0, 0x0}) 13:48:58 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000200)={&(0x7f00000004c0)=""/226, 0xe2, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x10, &(0x7f00000001c0)={&(0x7f0000000400)=""/129, 0x81, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000600)=0xffffffffffffffe8, 0x4) dup3(r2, r4, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000380)) clone(0x20000000, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000280)) inotify_init1(0x80000) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r6, 0x0, 0x0) socket(0x2, 0x80801, 0xea) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) ptrace(0x4207, r5) write$P9_RXATTRCREATE(r1, &(0x7f00000005c0)={0x7, 0x21, 0x1}, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r5, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 179.154003] binder: undelivered TRANSACTION_COMPLETE [ 179.159930] binder: undelivered TRANSACTION_COMPLETE [ 179.283423] audit: type=1400 audit(1545486539.101:42): avc: denied { create } for pid=11140 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 13:48:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x20000000000, @empty, 0x3}, 0x1c) writev(r0, &(0x7f0000000540), 0x1000000000000056) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, 0x0) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='\x00\x00\x00\x1a\xe3\npL\xa9\xf9\xe5\x9c\xfb0\x97%/|(\xc5\x8d t/R\v\xdbxl\xa9H\x82\x00\x00\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x3) fcntl$setstatus(r3, 0x4, 0xc44) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f00000000c0)='system_u:object_r:iptables_unit_file_t:s0\x00', 0xe8bb7e5cb5e02a37) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000600)="b2cf791ae07fcba019ebbd2764b345fa475d494fbe60cf259fd297b6a2fdd1ea01970074f98d272cf8d67d88f966abb43192f5914c3a07cc27be2b22f5fffb76de823d144210", 0x46) select(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x400000000, 0x80000000000, 0x1}, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]) listen(r1, 0x81) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 13:48:59 executing program 1: 13:48:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 13:48:59 executing program 1: [ 179.433131] binder_alloc: binder_alloc_mmap_handler: 11118 20001000-20004000 already mapped failed -16 [ 179.482034] binder: 11118:11121 ioctl c0306201 0 returned -14 [ 179.490884] binder: BINDER_SET_CONTEXT_MGR already set [ 179.505487] binder: 11118:11177 ioctl 40046207 0 returned -16 [ 179.516648] binder_alloc: 11118: binder_alloc_buf, no vma [ 179.522225] binder: 11118:11170 transaction failed 29189/-3, size 24-8 line 3136 13:48:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x7a, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r3) 13:48:59 executing program 1: 13:48:59 executing program 1: 13:48:59 executing program 1: [ 179.530841] binder: undelivered transaction 517, process died. [ 179.541003] binder: send failed reply for transaction 513 to 11118:11119 [ 179.556481] binder: undelivered transaction 516, process died. 13:48:59 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000200)={&(0x7f00000004c0)=""/226, 0xe2, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x10, &(0x7f00000001c0)={&(0x7f0000000400)=""/129, 0x81, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000600)=0xffffffffffffffe8, 0x4) dup3(r2, r4, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000380)) clone(0x20000000, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000280)) inotify_init1(0x80000) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r6, 0x0, 0x0) socket(0x2, 0x80801, 0xea) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) ptrace(0x4207, r5) write$P9_RXATTRCREATE(r1, &(0x7f00000005c0)={0x7, 0x21, 0x1}, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r5, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 179.572339] binder: 11181:11183 ioctl c0306201 0 returned -14 [ 179.578680] binder: 11181:11183 ioctl c0306201 200001c0 returned -14 [ 179.579005] binder: 11181:11183 ioctl 6612 0 returned -22 [ 179.600329] binder_alloc: binder_alloc_mmap_handler: 11181 20001000-20004000 already mapped failed -16 [ 179.600648] binder: 11181:11183 ioctl c0306201 0 returned -14 [ 179.600682] binder: BINDER_SET_CONTEXT_MGR already set [ 179.600689] binder: 11181:11192 ioctl 40046207 0 returned -16 [ 179.602436] binder_alloc: 11181: binder_alloc_buf, no vma [ 179.602455] binder: 11181:11192 transaction failed 29189/-3, size 24-8 line 3136 [ 179.602597] binder: 11181:11192 Release 1 refcount change on invalid ref 1 ret -22 [ 179.602609] binder: 11181:11192 ioctl c0306201 200001c0 returned -14 [ 179.603095] binder: 11181:11183 ioctl 6612 0 returned -22 [ 179.775782] binder: release 11181:11183 transaction 520 out, still active 13:48:59 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) lseek(r0, 0x0, 0x2) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl(r1, 0x2, &(0x7f0000000180)="d73ec64c5537545f81b7e9f852e3d725cf5cbee6d85119b0d99a2cc5d52467ee5690d98af9597159733499fd8da4948619a3c5283036a3ee450e09103f32") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000001740)=0xc) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000300), &(0x7f00000001c0)=0x4) ioctl$KIOCSOUND(r4, 0x4b2f, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x40070, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) flock(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x34, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e23, @rand_addr=0x4}, 0x20, 0x3, 0x4, 0x7, 0x0, 0x0, 0x9, 0xf1e}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x68, "12024036a1dbae3642535fc11239bf2cca9f4f7075a4574dd22c31b70e25cbed42c47bf4859b40eaedefd1a2e449163cc825eed1354b8706895d8cc52dcc75e4ecfab8992c03336109e9de4d5cab378e28acfff47303c582acf9ae45464685009c4ff27bde98c853"}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x401}, 0x28, 0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 13:48:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3ffffffffffe, 0x80010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0xfffffffffffffeab, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0663044001550000"], 0x0, 0x0, 0x0}) 13:48:59 executing program 1: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000200)={&(0x7f00000004c0)=""/226, 0xe2, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x10, &(0x7f00000001c0)={&(0x7f0000000400)=""/129, 0x81, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000600)=0xffffffffffffffe8, 0x4) dup3(r2, r4, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000380)) clone(0x20000000, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000280)) inotify_init1(0x80000) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r6, 0x0, 0x0) socket(0x2, 0x80801, 0xea) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) ptrace(0x4207, r5) write$P9_RXATTRCREATE(r1, &(0x7f00000005c0)={0x7, 0x21, 0x1}, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r5, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 179.784774] binder: send failed reply for transaction 520, target dead [ 179.794319] binder: undelivered TRANSACTION_COMPLETE [ 179.826094] binder: undelivered TRANSACTION_ERROR: 29189 [ 179.879898] binder: 11206:11209 ioctl c0306201 0 returned -14 [ 179.934730] binder: 11206:11214 Release 1 refcount change on invalid ref 21761 ret -22 13:49:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000080)="ed", 0x1, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000340)="dd", 0x1, 0x0, 0x0, 0x0) 13:49:00 executing program 0: 13:49:00 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x14) 13:49:00 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 13:49:00 executing program 0: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000200)="4029450ff3440f1157f19142d9d93e6509094d85d04ed9f4c4610dc2900400000089f046f615c8280000") 13:49:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:49:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000080)="ed", 0x1, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000340)="dd", 0x1, 0x0, 0x0, 0x0) 13:49:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:49:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) getgroups(0x0, 0x0) getpgid(0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:49:00 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x3}, 0x20) 13:49:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000100)=""/133, 0x85}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000380)=""/87, 0x57}], 0x5, &(0x7f0000000480)=""/118, 0x76}, 0x9}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/7, 0x7}, {&(0x7f0000000600)=""/134, 0x86}], 0x2, &(0x7f0000000700)=""/205, 0xcd}, 0x9}, {{&(0x7f0000000800)=@pppol2tpv3in6, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000880)=""/2, 0x2}, {&(0x7f00000008c0)=""/220, 0xdc}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x4, &(0x7f0000001ac0)=""/30, 0x1e}, 0x4}, {{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b80)=""/221, 0xdd}, {&(0x7f0000001c80)=""/74, 0x4a}, {&(0x7f0000001d00)=""/214, 0xd6}], 0x3, &(0x7f0000001e40)=""/209, 0xd1}, 0x4}, {{&(0x7f0000001f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/48, 0x30}, {&(0x7f0000002000)=""/187, 0xbb}], 0x2, &(0x7f0000002100)=""/82, 0x52}, 0x558}], 0x5, 0x0, &(0x7f0000002240)={0x77359400}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000002280)={'veth0_to_bridge\x00', {0x2, 0x4e24, @empty}}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r4 = dup3(r3, r3, 0x80000) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000000)) 13:49:00 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000a000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x10, 0x0, &(0x7f0000000480)="89ef4aa8b744896f9a5626a8f635ce70", 0x0, 0x8000}, 0x28) 13:49:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da8020000000000, 0x500001c) write$cgroup_pid(r0, &(0x7f0000000300), 0x12) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 13:49:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) [ 180.675840] binder: 11206:11214 ioctl c0306201 0 returned -14 [ 180.682421] binder: BINDER_SET_CONTEXT_MGR already set [ 180.682430] binder: 11206:11271 ioctl 40046207 0 returned -16 [ 180.731275] binder: 11279:11282 ioctl c0306201 0 returned -14 13:49:00 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xe, 0x4, 0x4000000004, 0xa350, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 13:49:01 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffffffff}]}) 13:49:01 executing program 5: syz_emit_ethernet(0x111f, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "e689e1", 0x10e9, 0x88, 0x0, @remote, @remote, {[@dstopts={0x2b, 0x203, [], [@generic={0x0, 0x1000, "8cf47b6350d867578f9d4dbf8c1f0c149d3359efbc75073f273266d4fa9850c7af6d9491e67b929a6c29230114ee3e5c864e4f5b32ac0fd2d5e98c8375ca1be615741cc2e691293e2cd9bbaee3f1a348376edebeec8ca05792d5a2a4b558090ac5554606407079f8c84016b796e51b634e5ee09c01ba74cde8618991b292af062318d1f73d6551c62ada4333f1bd0f4fe26248f5fd5539517be72d7af036792f5d807679832d16194bf94a70c89ea22629cf233bea026a3d07ced136de4ac75e3b08ab1e65158fff6fe12b3428916b28c568a08ca9c20372f2fe554067fcdcde1bb49c3cd585947d295288dc1f93275389ab2ef385a2b3585f201b58bdd47bafb933ce31bce7387ddb62ff8256bf84ea35aa2d0202c8d54c3a28e4f71d10c8463ae4ebba0b1bce716ca54a995bed3418d3da25c23756f7f6363174e7156e92a3544511d611eac375557d7892284e39bb28971a67d39476d7c33dac25acd4d528ad3d35a2e585f53ce40b5b13b0f4903fa8e55d4b0708ab59f8506dc50f698ae63173844b0a31bcd13702d5b215f5c37324422408cadf7e6543bc5f150d495f90e95f0a382742e1de90d9b47b1081c57ca995eb267b0aa5b9672f75a73530fea031b23c403a399ee0218def6b6f4bb7e6a953a7f7148e866b484ec7f6d4491c9b5f376235a11ec23b4bc33127bddd807de47034a56bbcbc0c26a979e43ec6b234c250de7384f0394bd4c3a20d57af73e6ec6bd809751cff8467bd2432b1ad4b1dacea4cd7906cef5cb41073cc081e196dbaa8fd0f41375f62ff2a08fd690a73481b78f4e929a0cf562387a750d3bce48f8c26cd9e355e00669e4ba9a2dd965dc5b0a3fb6b3f3aec067411fd3844b9e8725b072df118ecc51d6e4bdf55ac00bc3fac3c7743c799a317831c5182b44dc5103481ceb7f8190491bac3864b7c31dcd9e740050b9af41daa3efe6a4307b09296fec81df7c5c89974b3327e69d41a8c8ad1f09c2c97f4026efa7de60b8c51934dfe124e3efbae068642ab1ea2fe1e52daff7b4be55c6554b0468b81b9b4e398fffea82d5f8bda6f3d22793e225d370cddfe5be9b8d282d50705701a4183e0ecdc03e68cc975ee2d4119a5f981571f0eafef978a3d1f051b6e6593f14cc31cd511854d77f59a93dee25b0a51dac9e4fd352257e5d294d5b488b487072791905efcf3496c798cddf82e763edf65254e6b9dc35a578a866edbdbc99dcdff6162809270dea6fd331587262e58081a490c00225647c1390de75e31c2b8e53b43e1188f1ad2ffae9abe90d949f70467f046f11a564657dfa2bb8f590f3356ae9ab6ed047002a7d89f11cbe1e8ea231718dcd940d4346b027cba047e7f0f462f5e6459356f2f3ca335424efbbe6843f5751637c5c0835d586fb7803e88175d3497c192761d248416c4dacb976da5a18f031374825e09e054a16cb90017d7f54ea322b3b673e98264c2783b3c377a184f7281801e8e4026c70314cf4ece091169cc0f05b803968e9ecca57064bc2d8ac695dfb83549e78318145cce2aa58d310eb74962e2a557fd508f51e1db322e6c45ed43c4214dd2bdf06ac529cdf1194c3715983558089b64cda685f34399edcf7fadad802d7dbcb5366923723c37a2251039627abacb535603706c495d5ccab64e46b62934080ebc294f6914b461f148d723d4d67d4123e58d3da2222ea5b8d53444f77c9da76c6de7128c1840f3e52368d1004f3547022583ef42d772ca5f65f2301aa30571e673033dd85ad2180feaf7433b276c468e3a567274493b010f63d965749a7ab7222f1f0ae2850a96d7e9a84095aa734a7c00a51d3ae16c329540c96930ac84a60f161a59c5e636ba1d86a4a006ce7f30dc7e22760a9a11f9ecab0f881fea05334e7cea042055b7f03ee63fa92edfb7dd76470ef38499f1a3e3af8e45c427613e8f0fcfd26458e74c4c70ef25da1fc707da9b33df97064273eb9aa456234824ef93d983d2c2f358d68b39939c82be057af4b24fca4805cd46887deef536979d12b026ead825f5fee563f247dea4b31d7d7488480648978bf240566d268f7299d898ad6bfb197eebcb72b83796c58aec7b4d69a1fd9ab34798fbff6d75d123a57c093b336a4e73992baf9ba9d449aabed870950dc1ceb1a3c91c77db3d35557db29e6ddc1202cd586e58bdfd9053780b7c5ffacf31d6c46df5baef01851ad67ea7b57e7d6021b9607c79c59f2dc2651bb4e3b24b5ca8c1a59efd12fbbbd8cb8e028e35eed9f6482329562043d11a960729b86440c5d0b8c25d91cee9521eb03dc0becbe87bac84b0c9983253b1f87a9a4ac0f4d2470ea19061649ce270a6f9ad082ea19e47aee6d54c855467b35cdb4bbb7d31a5284327af866151cf7355b808edfd0dc6ac9973aa5a7897353758183df40f00b53bba01282c51a8df8ba2c500ef3a65f30e2f1589a43f786b065be77b353c6554f0ee5c17d89bf265e516f207a83184d3c46fd6eae9bd0c38d0ef8ceef9d20caca0b4acd064e2fee15ffd7db3cd949ae477d682129411f39ab014b296a1972bab7f34307311448d02f40cf02077ea470d5c4916b7521922c002d44f1d81cc396ebf379483c0e16cf5b9d1c8d70227e6f023b77ad9b589f55636e344121d3de5a86223324a328c3086b76c944d2959d86f224bda4e9a463a0e7ffc91fab9c164e8235c19b74609629b835d7d21a961da4d972e455cade8093de93f25298a875018a8e1c0e0c1f894dc869d610f99376836c67dfa17ed6ca0fafd520c967e340b004b458b178e0907dcf95eb956cc03ded31a94a14d759c41cebaaa6acdda8a6d448b157289743ee3ce8f4e80d60e0ebf3817e34733a2122e8fe8a41c6dfc5b814e1cc93d1c7366ab026f688d9e9f1fbce5d195b29133562adc86131afa2855dca12c0e617553eb7f1a2a22ae8b2f4f0226c5fd20fce6c97c24c77ff86c6ee18b45a70f90afb252869792257acb27bc00a4bc33d1bf335b8a403e648fa0489734a7bed55b44f62c64338b8c61f6b08b19f7ab307ca1a2ef8ac0d9307710ad24290945e7b8d0098a48c029557b38b0383ec409dcbc95300ba9905ee97932045cac37f659d3e35ac0e3c515b5ce28b8c0752a0ff004e937e13c66f71ca58bc8fe782e067e4058a9bc56f219ad8fcd544a1d86accff654b0c15cb8d574f80417c0d626e1bb2403b2127fb275b35872fb7c29b5f271eabf0ec9a5972a6b993c5440b3e87c3e93cd94f3e1a1e4a0ac0a6a09222de88f7498940a9be35b87a581ad9fd5f89fd2bedee3dc36b57f4b130a358d49ebd0429805b4cb578576119ee3c795a3f2152115f998d82f613bba86a19df2b450b57df9796cbf8b57871e13739e3469a058690335a2313cea3ebb175c35e27cab7d40e7f056eac614473e22038edb36992cdca38ee530f27fcdca50effbf53185525c9e0be92b4a4a947873fc05eaa7fefb9e607d779c01636126c07c59ea4ccfee7032886d4f161aa95ac7eb659d68d84e413a36766868f4d28b6acee4a06d9b79e1cdda9ee4cad6efaaa8498eb83240e3c6863d5e125de0155395a265f10e6e542617d2ebbb4f68f19adde2fa4b95d296b252abb8a3a62b358c7b3374bd7679667756813a34eedff3f1372b3f760a6d7273a602a19be7944114de71858c73ef8c4120337a24abf060ea18ee94a3d1d40043cc0d44989ae7d3f6e8acf287cdbbd65c54b80bc6681706582783fc1e41d119f29a6de018c1fbbf15bcb2935b1a3b350bfb378bcc0ec2fd59b63fb21283a9badfb53bdbd504f036f6c951529002fb964cd889576254b9fec536bed0873bd994e30b515e70c3dd6f0e449bb9058e6432cd5d93d801dc3fc7f1c608138e920ba449b529b4d182a1a60a5178767f941309cae2dd26012941244a9c18f30da9b28232b1d665e7a4f32c6be25982cd7d3c1da05bb74807a2bbc98f859afe122804c7280a7292cf81651dbfc395a26f75a4c29b9c898df40a9d47da174331eceb7df8a6cfff3d9127078d83bf8b755dfdb73c69c756c4fe54bd083a19f5325bb255aab144d245fad620a4b85d146bbe58c446ea03dad6e92fc4526d333ceda5704af96a29e8abed684cb8b262928d1e4b29608d8a2f777cfb1c8265966a526853b90df4e9de14c2818d0e1163ecccfbfd54eb53e46a06325a7a02d5d991e6f683171dac45716286c38f748567d3b085d7f0578e5d7810eac74bfb8382e2d022a5e7cd350200c515ec1afbde4efceb903a104b8c390b137be5cae0c80ddf54ad18c0efad58c80d1880f60c7439970d2593fc0e203d9b01b031396c9f67e8432acc79da7d1dd253496a03e18a0bdf854be21775fab177c1a9e92abfe5aa28320b48c3e6fdd213f1f5e9dc28b2a9fce49e87645fc5816ee3086716b235cd4e44a79de07dc3a6256821df6a109edc7fe740c9077cc283308d9562c8bb819b575f0090ef779896bb7e7c156550cea1a7f9641fd6c14feb641d9acc5c3eefdea209978cbe9c07902ccb5f113d3161d71bf6c658e0fb2e276403bfb3e1782700f78f9ed0fd98b8602802a0192e71ea82cb19b4b15a7372645137ca9ecae79b0864f1f256f0e2f1fb3d91d2e58760b836163dea5ddbf2c86d8eccd3d8ea73b11e010e6e39f5ef01c714e0176c1cc0a91a607056a9af0dc837b02a61d27ebc4233091e48fe27df1a719c0bc58da148b03b21edd28efe463811f6d4308931f5a8921f6d175687602a236649444a9034105e21a8c71f528ec9dbf9141a370d26c4ca9c0a8d510996119be65588fc9381958e4f1bc1e3bb80d87bef2d0bdda9f99638db910f459130863415000ffa80887f173ec7d5a5538a142223b088195d406811d293e4e1187c904f29f544a25adffe7b53ff064ec927645d552b1f1c19774b560977a91b039140006d5edae0579ad53b6cb6e86216e89b92361232656c9ba4276f7189feabc49d5b103ea017577d4a2d96833d1bb77e6d2173b98cef68ecf722897f90a46bcfdca781514e61e7fcd79deafd0bc32448d46bce473a926ff19a3b0156f36dc65b53399a37eef146042315e38ff53956b53d928286d3118825ca920b4492ba5c344938d60bc14b841043a47dafa728a213993537e22e0e2a5842f0b2cec0880fffe791e91195114382605cd7c19d8a602ad4ac9d9686c16833e97dd27ae83abe399eabcf39970ebf330575bd267326ba8be1fef6bee939ba6633a74a490f988b515d2714199965420fe964f6711b4941ddfefe32315c5a548fad4cbffb9de7cc8ccd8ac6770b892db853ca3d4a41b197c515708e02c1a29cd9352d9a6c46d7d9af7e5711b32797b63a3d4c20d3915fbffab00178aa0bfc56465bec372d0ffbb8be0f9aecd2caca21c9c313194fd7719f9af741ab410430d90efccf2d89cd085bdca8fc6e6f61680359736654b5084ee139c0a47164d5b8d8e20d8707d6e5e61c48b17a23546c5a71415ce0cff6a26dac25a1d705aae4abbf362e44b2ece89c17a4dbae154e4e4acfd473a26008777096d73697bc4be414cd85b56a7b20c0c46a7a9c70b863232809196f0b6aa408e680f64a9480ffc2c90467c625e3d57dfa87e4ae48473a09796ecbc4545011686127542c563c2f51a78c07d9866f84c324df5279e553ba2df0dce91efc6881df5968a508bcb7d154b483c3f12e5c4d8fd2e21efa2a709dfd422b1bf073f46f119962edd1a20799cd84d71e4c10df05b5a9dc504ad9f7bc4d65dc54c1afec3d7cd8221d1b64c50beee4416c20cc8ac36bda02df9a649f85225ccaaf4a6885"}, @calipso={0x7, 0x18, {0x80000001, 0x4, 0x400, 0x3, [0x10001, 0x5]}}]}, @srh={0x0, 0x4, 0x4, 0x2, 0xc8, 0x0, 0x40, [@empty, @ipv4={[], [], @loopback}]}], @tcp={{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x200, 0x0, 0x6, 0x8, 0x0, 0x0, 0x4, {[@fastopen={0x22, 0x2}]}}, {"fa4ff687db4f7c0a5317a1f589a081aa8a254865f0a7e2dcd1941c9d95375e16cb7403a0175029676128be3500dce5d5cbedc5936f4e809136388b0841f4a1b6693d74aec3800c7bef0ed273910f47d11a40aa5b742355f7ff7a659e097b7d3537d139a834ca78642d83e4d9a46501a20ec60bea8ce97e1958b8e417b0cf642a01"}}}}}}}, 0x0) 13:49:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000c00000000000000080001007366710048000200000000000000863d973ba9c7a3d0c994da187400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 13:49:01 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') exit(0x0) getdents64(r0, 0x0, 0x0) 13:49:01 executing program 2: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 181.532108] binder_alloc: binder_alloc_mmap_handler: 11279 20001000-20004000 already mapped failed -16 [ 181.541839] binder: 11279:11287 ioctl c0306201 0 returned -14 [ 181.546203] binder: BINDER_SET_CONTEXT_MGR already set [ 181.546214] binder: 11279:11316 ioctl 40046207 0 returned -16 [ 181.546639] binder_alloc: 11279: binder_alloc_buf, no vma [ 181.546659] binder: 11279:11317 transaction failed 29189/-3, size 24-8 line 3136 [ 181.546750] binder: 11279:11316 Release 1 refcount change on invalid ref 1 ret -22 13:49:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getcwd(&(0x7f0000000000)=""/208, 0xd0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0x34, 0x0, &(0x7f0000000280)="3e7562681164f5d9a118617e7ed902e009c907de6ac04b533d0ea0fe743238b1e240b8d4ecfdfc828de07ff9afc0260ee5e0407f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:01 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8ff8ca5cce1cec37, 0x0) 13:49:01 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141045, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80803) 13:49:01 executing program 2: setrlimit(0x7, &(0x7f0000000100)) epoll_create1(0x0) 13:49:01 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:01 executing program 2: setrlimit(0x7, &(0x7f0000000100)) epoll_create1(0x0) [ 181.547015] binder: send failed reply for transaction 526 to 11279:11282 [ 181.548010] binder: undelivered TRANSACTION_COMPLETE [ 181.548017] binder: undelivered TRANSACTION_ERROR: 29189 13:49:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c2"], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:49:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 13:49:01 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:01 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141045, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80803) [ 181.648177] binder: 11329:11333 ioctl c0306201 0 returned -14 [ 181.700510] binder: 11329:11339 Release 1 refcount change on invalid ref 1 ret -22 13:49:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') pread64(r0, 0x0, 0x0, 0x0) 13:49:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77f7fb, 0x0, 0x820000, 0x0}, 0x2c) 13:49:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') exit(0x0) getdents64(r0, 0x0, 0x0) 13:49:02 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/\x00\x00z0\x00\x906\xa3\x95A\x1c\xf5\xee\x8aj\xdf\n\xcb\xf0\xce\xd9,Fj\xbd\xad\x89!\xf9\x00\x9f\x80\xd5\x01)c)\xaa\xba\x92\xe1\xd6\xb6\x0fTA\x16jwl\x1a\x92% \x1dY\xed\x87b_\xc4\x97r\xf68u\xf4~g\x1b\xf3g\x0e\x167F\xce\x93\xef\xe1\x91\x81\xe3\xc7*\xdb\x84\x82$\xaa\x8f\xd6 \x98\x81\f\xf4R\x99\xb2\x87#E\xccGc\xf2\x0fs\xed\xff\xc7\xed>Zy\x92\t\xcd\xc8\fN4\x1fn\x99\xd3P!\xb2gR\xdb\xd1\x95`\xadf\xdb($B\x95\xd1\xef\x15\x9ek\b\xc7\x17u<\xcb\xecy\x8c \xf1\x01X!y\x8e\f\x1eo\x84o\x12\x1b\x17\xb3\xd7%Mw\xb9[\v\x19B\n\x87l\x9b\xacn\x86tt\xeb\xb7\xf9r\x82\x16\xac\x12\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x1d\x84\xb8\x9b\x8d\xed\xfd\x9fSO\x87\xa1-\xcbbK\xdc\xaf\x8bSL\xb3n\xdc\xdd\x05\xc7\x16n\xa4\xcb\xdb\xf6\x06\'\xa8\x8f\x14\xf6\xf6\xc0\nm\x03\xb7\xc3\xe8+2\x9f\x06\x00\x85\xb7\xc0u\xd8^\x86\xe6\x93\xeeM\xc1\x8cH\x1d\x9f/Wt\xe5\x9cUf\xd7\x04c\xb7z\x8cW\b\xb3\xf70xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, [], [{0xd1, 0x100000001, 0x0, 0x1950acbe, 0x1, 0xffff}, {0x5, 0x9, 0x8, 0x0, 0x7f, 0x9}], [[], []]}) ioctl(r2, 0x42, &(0x7f0000000180)) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4ebed0411792ce21) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') getdents64(r1, &(0x7f0000000200)=""/116, 0xfe5b) [ 182.436974] binder_alloc: binder_alloc_mmap_handler: 11329 20001000-20004000 already mapped failed -16 [ 182.446640] binder: 11329:11339 ioctl c0306201 0 returned -14 [ 182.448458] binder: BINDER_SET_CONTEXT_MGR already set [ 182.448466] binder: 11329:11364 ioctl 40046207 0 returned -16 [ 182.448665] binder: 11329:11365 Release 1 refcount change on invalid ref 1 ret -22 13:49:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') getdents64(r0, &(0x7f0000000080)=""/116, 0x74) getdents64(r0, 0x0, 0x0) 13:49:02 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xff60}, 0xe3c7) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) io_setup(0x0, 0x0) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) fstatfs(r1, &(0x7f00000005c0)=""/217) gettid() ptrace$peekuser(0x3, 0x0, 0x0) close(0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 13:49:02 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) [ 182.501844] binder: 11373:11380 ioctl c0306201 0 returned -14 13:49:02 executing program 0: r0 = socket(0x8000000010, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080000002) 13:49:02 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fstat(r0, &(0x7f0000000000)) [ 182.608748] binder: 11373:11392 ioctl c0c0583b 20000540 returned -22 [ 182.610869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket pig=11398 comm=syz-executor0 13:49:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x8) 13:49:03 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:03 executing program 0: 13:49:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x200005}, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 183.292935] binder_alloc: binder_alloc_mmap_handler: 11373 20001000-20004000 already mapped failed -16 [ 183.317983] binder: 11373:11392 ioctl c0306201 0 returned -14 [ 183.326679] binder: BINDER_SET_CONTEXT_MGR already set [ 183.326690] binder: 11373:11405 ioctl 40046207 0 returned -16 [ 183.331222] binder_alloc: 11373: binder_alloc_buf, no vma [ 183.331243] binder: 11373:11419 transaction failed 29189/-3, size 24-8 line 3136 [ 183.349244] binder: 11373:11405 ioctl c0c0583b 20000540 returned -22 13:49:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x2c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:03 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000080)) 13:49:03 executing program 0: r0 = socket(0x8000000010, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080000002) 13:49:03 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000118ffc), 0x4) 13:49:03 executing program 5: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = socket(0x8000000010, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080000002) [ 183.352332] binder: 11373:11423 Release 1 refcount change on invalid ref 1 ret -22 [ 183.352762] binder: send failed reply for transaction 532 to 11373:11380 [ 183.353408] binder: undelivered TRANSACTION_COMPLETE [ 183.353416] binder: undelivered TRANSACTION_ERROR: 29189 [ 183.354817] syz-executor1 (11422): /proc/11422/oom_adj is deprecated, please use /proc/11422/oom_score_adj instead. 13:49:03 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) [ 183.467725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket pig=11434 comm=syz-executor0 [ 183.470138] binder: 11431:11435 ioctl c0306201 0 returned -14 13:49:03 executing program 0: r0 = socket(0x8000000010, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080000002) 13:49:03 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:03 executing program 2: [ 183.508049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8241 sclass=netlink_route_socket pig=11440 comm=syz-executor5 [ 183.531995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8245 sclass=netlink_route_socket pig=11449 comm=syz-executor5 13:49:03 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:03 executing program 2: [ 183.561214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket pig=11452 comm=syz-executor0 [ 184.256251] binder_alloc: binder_alloc_mmap_handler: 11431 20001000-20004000 already mapped failed -16 [ 184.265856] binder: 11431:11446 ioctl c0306201 0 returned -14 [ 184.266598] binder: BINDER_SET_CONTEXT_MGR already set [ 184.266605] binder: 11431:11465 ioctl 40046207 0 returned -16 [ 184.266935] binder_alloc: 11431: binder_alloc_buf, no vma [ 184.266954] binder: 11431:11466 transaction failed 29189/-3, size 24-8 line 3136 [ 184.267489] binder: send failed reply for transaction 537 to 11431:11435 13:49:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:04 executing program 0: 13:49:04 executing program 5: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = socket(0x8000000010, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080000002) 13:49:04 executing program 2: 13:49:04 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:04 executing program 1: 13:49:04 executing program 1: 13:49:04 executing program 0: 13:49:04 executing program 2: 13:49:04 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) tkill(r1, 0x14) 13:49:04 executing program 1: 13:49:04 executing program 0: [ 184.272513] binder: undelivered TRANSACTION_COMPLETE [ 184.272520] binder: undelivered TRANSACTION_ERROR: 29189 [ 184.338030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8241 sclass=netlink_route_socket pig=11473 comm=syz-executor5 [ 184.370298] binder: 11474:11476 ioctl c0306201 0 returned -14 [ 185.138865] binder_alloc: binder_alloc_mmap_handler: 11474 20001000-20004000 already mapped failed -16 [ 185.148523] binder: 11474:11490 ioctl c0306201 0 returned -14 [ 185.149941] binder: BINDER_SET_CONTEXT_MGR already set [ 185.149950] binder: 11474:11494 ioctl 40046207 0 returned -16 [ 185.150166] binder_alloc: 11474: binder_alloc_buf, no vma [ 185.150184] binder: 11474:11493 transaction failed 29189/-3, size 24-8 line 3136 [ 185.150229] binder: 11474:11494 Release 1 refcount change on invalid ref 1 ret -22 13:49:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:05 executing program 2: 13:49:05 executing program 1: 13:49:05 executing program 0: 13:49:05 executing program 5: 13:49:05 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) tkill(0x0, 0x14) 13:49:05 executing program 1: 13:49:05 executing program 0: [ 185.150609] binder: send failed reply for transaction 542 to 11474:11476 [ 185.155201] binder: undelivered TRANSACTION_COMPLETE [ 185.155208] binder: undelivered TRANSACTION_ERROR: 29189 13:49:05 executing program 1: 13:49:05 executing program 5: 13:49:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 13:49:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "13c7221f796e90d8e00da5495b0db8d374d0cff0d0cb46da870a40b93f46459a6ce3dc12d6f1d1baa7db463d31cfb3d402cba54cffc492bb4066c8b65ac6278c", "1ee493d16fab6674514de59b29ca705d0cee481d24343a96abc7ccbcfab2a621"}) [ 185.253093] binder: 11506:11507 ioctl c0306201 0 returned -14 [ 185.266197] binder_alloc: binder_alloc_mmap_handler: 11506 20001000-20004000 already mapped failed -16 [ 185.296821] binder: 11506:11507 ioctl c0306201 0 returned -14 [ 185.302964] binder: BINDER_SET_CONTEXT_MGR already set [ 185.328938] binder: 11506:11509 ioctl 40046207 0 returned -16 [ 185.338773] binder_alloc: 11506: binder_alloc_buf, no vma 13:49:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:05 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) 13:49:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x8, 0x0, "13c7221f796e90d8e00da5495b0db8d374d0cff0d0cb46da870a40b93f46459a6ce3dc12d6f1d1baa7db463d31cfb3d402cba54cffc492bb4066c8b65ac6278c", "1ee493d16fab6674514de59b29ca705d0cee481d24343a96abc7ccbcfab2a621"}) 13:49:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, "13c7221f796e90d8e00da5495b0db8d374d0cff0d0cb46da870a40b93f46459a6ce3dc12d6f1d1baa7db463d31cfb3d402cba54cffc492bb4066c8b65ac6278c", "1ee493d16fab6674514de59b29ca705d0cee481d24343a96abc7ccbcfab2a621"}) 13:49:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x8, 0x0, "13c7221f796e90d8e00da5495b0db8d374d0cff0d0cb46da870a40b93f46459a6ce3dc12d6f1d1baa7db463d31cfb3d402cba54cffc492bb4066c8b65ac6278c", "1ee493d16fab6674514de59b29ca705d0cee481d24343a96abc7ccbcfab2a621"}) [ 185.344362] binder: 11506:11509 transaction failed 29189/-3, size 24-8 line 3136 [ 185.354892] binder: 11506:11507 Release 1 refcount change on invalid ref 1 ret -22 [ 185.355152] binder: send failed reply for transaction 547 to 11506:11507 [ 185.362688] binder: undelivered TRANSACTION_ERROR: 29189 [ 185.411766] binder: 11534:11536 ioctl c0306201 0 returned -14 [ 185.423043] binder_alloc: binder_alloc_mmap_handler: 11534 20001000-20004000 already mapped failed -16 [ 185.441586] binder: 11534:11540 ioctl c0306201 0 returned -14 [ 185.447994] binder: BINDER_SET_CONTEXT_MGR already set [ 185.453363] binder: 11534:11536 ioctl 40046207 0 returned -16 [ 185.457739] binder_alloc: 11534: binder_alloc_buf, no vma [ 185.457759] binder: 11534:11540 transaction failed 29189/-3, size 24-8 line 3136 [ 185.457844] binder: 11534:11543 Release 1 refcount change on invalid ref 1 ret -22 [ 185.458189] binder: send failed reply for transaction 552 to 11534:11536 [ 185.459274] binder: undelivered TRANSACTION_ERROR: 29189 13:49:05 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) tkill(r0, 0x14) 13:49:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "13c7221f796e90d8e00da5495b0db8d374d0cff0d0cb46da870a40b93f46459a6ce3dc12d6f1d1baa7db463d31cfb3d402cba54cffc492bb4066c8b65ac6278c", "1ee493d16fab6674514de59b29ca705d0cee481d24343a96abc7ccbcfab2a621"}) 13:49:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 13:49:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 13:49:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13c7221f796e90d8e00da5495b0db8d374d0cff0d0cb46da870a40b93f46459a6ce3dc12d6f1d1baa7db463d31cfb3d402cba54cffc492bb4066c8b65ac6278c", "1ee493d16fab6674514de59b29ca705d0cee481d24343a96abc7ccbcfab2a621"}) 13:49:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:49:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, "13c7221f796e90d8e00da5495b0db8d374d0cff0d0cb46da870a40b93f46459a6ce3dc12d6f1d1baa7db463d31cfb3d402cba54cffc492bb4066c8b65ac6278c", "1ee493d16fab6674514de59b29ca705d0cee481d24343a969fc7ccbdfab2a621"}) 13:49:05 executing program 2: pipe(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000002340)=ANY=[@ANYBLOB='s'], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 13:49:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2d, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000007711ebcf034a"], 0x0, 0x0, 0x0}) [ 186.042089] binder: 11549:11553 ioctl c0306201 0 returned -14 13:49:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 13:49:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2d, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000007711ebcf034a"], 0x0, 0x0, 0x0}) [ 186.082761] input: syz1 as /devices/virtual/input/input16 [ 186.106696] binder_alloc: 11549: binder_alloc_buf size 274696562536349776 failed, no address space [ 186.106703] binder_alloc: allocated: 32 (num: 1 largest: 32), free: 12256 (num: 1 largest: 12256) [ 186.106722] binder: 11565:11571 transaction failed 29201/-28, size 274696562536349696-74 line 3136 [ 186.107013] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.132889] binder_alloc: 11549: binder_alloc_buf size 274696562536349776 failed, no address space [ 186.132897] binder_alloc: allocated: 32 (num: 1 largest: 32), free: 12256 (num: 1 largest: 12256) [ 186.132914] binder: 11577:11579 transaction failed 29201/-28, size 274696562536349696-74 line 3136 [ 186.133357] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.148037] binder: release 11574:11580 transaction 565 out, still active [ 186.148040] binder: undelivered TRANSACTION_COMPLETE [ 186.148067] binder: release 11574:11578 transaction 563 out, still active [ 186.148069] binder: undelivered TRANSACTION_COMPLETE 13:49:06 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2d, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000007711ebcf034a"], 0x0, 0x0, 0x0}) 13:49:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 13:49:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) [ 186.838311] binder_alloc: binder_alloc_mmap_handler: 11549 20001000-20004000 already mapped failed -16 [ 186.848325] binder: 11549:11572 ioctl c0306201 0 returned -14 [ 186.854245] binder: BINDER_SET_CONTEXT_MGR already set [ 186.859858] binder: 11549:11587 ioctl 40046207 0 returned -16 [ 186.866623] binder_alloc: 11549: binder_alloc_buf, no vma [ 186.876689] binder: 11549:11587 transaction failed 29189/-3, size 24-8 line 3136 13:49:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) [ 186.883646] binder_alloc: 11549: binder_alloc_buf, no vma [ 186.883663] binder: 11590:11594 transaction failed 29189/-3, size 24-8 line 3136 [ 186.883928] binder: undelivered TRANSACTION_ERROR: 29189 [ 186.885223] binder_alloc: 11549: binder_alloc_buf, no vma 13:49:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001440)="0adc1f023c123f3188a070") syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x213}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 13:49:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:06 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000080)="edd008000000000019a6515592000012ac6a612e2ae6", 0x16, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000340)="dde20f100fc1c79a93edf7e93e0ef834637300b5bd10538dd1b96dbf7b28df4f7bd7584e6128f8ae90b49f95680b1b5ff9cf8e2c3ef0655059654420b1", 0x3d, 0x0, 0x0, 0x0) 13:49:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r0, r0, &(0x7f0000000040), 0x200) [ 186.885283] binder: 11589:11592 transaction failed 29189/-3, size 274696562536349696-74 line 3136 [ 186.885845] binder: undelivered TRANSACTION_ERROR: 29189 [ 186.913141] binder: send failed reply for transaction 557 to 11549:11553 [ 186.913152] binder: send failed reply for transaction 563, target dead [ 186.913159] binder: send failed reply for transaction 565, target dead [ 186.913431] binder: undelivered TRANSACTION_COMPLETE [ 186.913439] binder: undelivered TRANSACTION_ERROR: 29189 13:49:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e1d}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0a03000000000000e8ff00c1c9170d2c94a9") ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f00000000c0)={0x2, 0x4000000004e1d, @loopback}, 0x10) sendfile(r0, r0, &(0x7f0000000040), 0x200) [ 187.007423] binder: 11609:11613 ioctl c0306201 0 returned -14 [ 187.798444] binder_alloc: binder_alloc_mmap_handler: 11609 20001000-20004000 already mapped failed -16 [ 187.808112] binder: 11609:11635 ioctl c0306201 0 returned -14 [ 187.814041] binder: BINDER_SET_CONTEXT_MGR already set [ 187.819360] binder: 11609:11636 ioctl 40046207 0 returned -16 [ 187.825466] binder_alloc: 11609: binder_alloc_buf, no vma [ 187.831019] binder: 11609:11636 transaction failed 29189/-3, size 24-8 line 3136 [ 187.839095] binder: send failed reply for transaction 570 to 11609:11613 [ 187.850882] binder: undelivered TRANSACTION_COMPLETE [ 187.857481] binder: undelivered TRANSACTION_ERROR: 29189 13:49:09 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x6, 0x4, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000540)}, 0x10) 13:49:09 executing program 5: timer_settime(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit(0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) 13:49:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgid(0x0) setpriority(0x2, r1, 0x0) 13:49:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0xf, &(0x7f0000000140)='keyringGPLbdev\x00'}, 0x30) r3 = getpgid(0x0) r4 = getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() r8 = gettid() r9 = geteuid() sendmsg$netlink(r1, &(0x7f00000048c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000000c0)={0x64, 0x42, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x54, 0xc, [@generic="f3fed3fe4f3f95dd7dd9782eb0738ecd6d66c7aa4e56fe89729814016eb048d79e7bb5a9d654d0bb98dce012493780df65781c4ef2e409598ff1a3faf3ab05750bcd329f7839c2e34e00ca33a666e01a"]}]}, 0x64}, {&(0x7f0000000540)={0x2750, 0x14, 0x400, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1e8, 0x25, [@typed={0x8, 0x68, @ipv4=@remote}, @generic="fa4c7dd11ed50f3e14499166d25494d2588a1f95f8e19a6533c7c602d2435abd0edf0e8140a0fccfbe2f8de4cbcb82c49d0714d3469c742d2e7c14804957983cbdb02219fdf648076ae68873452e5c5a60a91ec8231bad2847bdb469b96e8781baa1457160352f45a3bd68f677a6b3fe74c496c14b865a4d12677716355690b4058047c544f5a340274bdc3519ebba56efdb70c43821f6a26fd5d43f3e339ed05804df3006e6e3b0511ff80f2b7de3d09599c77024ceae787191e54a8177268636b39171542912ae573ed283c510f32b109372a01aadafb27e475df3b8e9fc3c3111d28a186d97912d3f29b969870e", @typed={0x8, 0x69, @pid=r2}, @typed={0x14, 0x24, @ipv6=@loopback}, @typed={0xc, 0x7c, @u64=0xffff}, @typed={0x14, 0x62, @ipv6=@loopback}, @generic="c707b9bc5d1739c6cd1ead524120b0ad4d55e83701ee772f8c4b6b2becd79c890bae6b5245194de1105cefe451aeaa49abb4", @typed={0xc, 0x53, @u64=0x8000}, @generic="227f354cfc281ae42c00286753f455f02cab0a84781cc78657301e5f0fb5dc1499a1e8dca5d4aae984214cd52d852d2ed8f15b9646b676b7255f9efb128e25ff62280fb220592b92eadf670631578d14bc871870178ef16c6fa0c0af61e729e492c1e0af8b2d8bf7750d6746b669a3f8bc20e0"]}, @typed={0x8, 0x6c, @u32=0x8001}, @nested={0x1250, 0xe, [@generic="816fb9d4060f7baace2037fc9ea9acd1b9a9c7fc1dbd62d57a7760a88356aef29bc1036c8d7ab3527ab72fcc3680e113cacebb9367ed72ee0bea33672b5e2d033b07be7cffb8c8d41e2a360505af3c4f35b5d30d4c3ecb5fb5bc53aaf11edd06f572da122e7c7690b7ab5481eea369c39433f951d2d4262c15398bf6f11fc35a500146691baa792aa52e647658c1a310a5780a2aa2528ce2024ffa9c5f7bba6f5ffadcbcbd9505ec925e533e90d456e72772a039278adce973dfae9c0552f98653bbc1adae6a0033c0a2a91f35f8ba36d8d4da007cbbb13edacea1888c7a05", @generic="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", @typed={0x8, 0x46, @pid=r3}, @typed={0x8, 0x90, @fd=r0}, @generic="8573fcedcbad0666dd6be5942dcc41e64fbe6c98ae575926cd08a9a8bb4b9e64c8981d229445dd334750c94d0e6592ba8d08feb849a360a175b1c3e45bf33bf74f1fa794cbee5fa8585917ab0ad3102f5f11d479bbb8b82d44de7d5b2d507d43a7e54e55ea4b3263e02a3fe3901df2b6fe8779b0495a43f276459cb5abdcb1e39b8e0dc4c6f4c90c3d7e32f12fb9", @generic="982972c588d0d5a8a97f1808ad9317631016523f956cf9e70823d28f7448", @generic="e7db09fb18d45105ea592995f7d78917e29d100eb22871d752aaffca04915c72699905678007b0b399", @generic="260f5a8c6157ada15aa4f2128f304f2bf94ffd5bfe9ae7b10e503763bff9bba97b", @generic="0717d43f02d0e4276101caf2bbe88fc7737f1cdf3d29d3a843de585e5f69cc3d2f6f7e08ceba1f03140ab9b06aef0a734d74e5cca0c5a51f54366e7c42ffdbb8e5b4978784ea3a6776c9b2a7526fabd874e03ba4d68562a8d13c3f03b0686a37a84ecc2760"]}, @typed={0x14, 0x95, @ipv6=@local}, @generic="48e38e61d535b085f56f99bbcab2b1c590337609117e280985271f0fa41774a967ae15234942afcb2134dfb744cbb2211cad4aa4155c5fab764b65aba63a3500d1371ea1402ddc562af83260c2b230e0224454d9993374ab2c27171862cc34feda1b865133bb3568a61fb2d89667f3215bd75030fdaf1e199fe62c42ed1ad4d868dc207b67fd09558e836acf7c0ea307fe7e099f9cf2e5dfccb46ed98daf389869f6ce27dbae519525ee9094516aede50458f193a8bd2023fdea55bab38e8b8c2cfc7b3458619a1d29e8054046556ae801e17e8168ac756137851646543e39f16632278d2fa34d36d8e3a8c63f8d420ab3f0483dfe0881eaff27d6cf57a6254e2d30429fa05a985b6f695b9636fda756f099acdb703ac76a13fe6e52056d12533b42f75b6504b92059a5cfb4db93771d01c1c6c12e1d52df2b32085872fc83e066fa2ba5d166d9a3525b99bb95f16d98e0fc7602325d1f9254b171e3a91df6235767e1098575e45746bb35dbdf5796413b584d7781ecddac873f48249d1e38c9c905576838ab42357daffd7e818387cebf71fff20bdc45323fb86b45d877267858046962c931eabc68e3960bea9c62610941497826a6b3e3f198582a9ab8eaf595b7f243ccc9e3307e8a4bad6855e9307f3e8cab84845be91a85e69f28f863bb2064a0773c112747d79c8d2d1b944009d68d932958225f35c59f5728e21fcb6bdd5b3426955d68ebb63d56464e6074df6d31454c5951c48865e2b7cf7c039d6cfc0feee249ec7dc646cbe422ea8df2fd8ea2b8c00d0d5729cb321aafef7f6afc7faa92020132cebb4a62db57259a5cac795de0399fc80daae0c7fd5185b999b67c6f5e4b37e2e31501ee6d3b955be38756cd70f387ae7f6a7f65cadaf35300fdef517c97b931b7ffe166f68cef5040547613a96cc49856b980e35ba3b8b6835805de123f1fe7326f2a72182df8085848bdacde02953ddc16e37ffcf9d81e9b3c7c8f937c335c0e5902a470ee918dd946cde6e7f0f2ebe38217aacc39c73d2d520c9fb9f4a88edae96d845462adcbff623929043d6a21f0f4fc45761bdd542caa00a4b56fd7a9b885245533a892d005cfc3cfefdce3b68166d50bf809d4daeca0dce9659eaef36eed706a23fe25e7eb9e4e7a90568ebf4db54c5d113861237e5830b530e8645a432f0c74f85a3d328a1dedc7e7910b831ccde2203232fd4ae88addbbfc809438247c143c5e344e2d10894f284bce86fe4df6136f4172a9a8ae1ec94e29d6f741ced80f4e19a56d6a7102beb513abb50c10e232e9bf69897330a64fa2b97bd39e3ca8141a9ff095264f64557be0449d3f7a87219c55c24aee2cb0af9fb664787a9523d2185bdb506e5fd695ca071469110896984ac80e0dc957a34c244e209b3520603214284dbc4e0bedc30b92c5d0eec01aa1d8ca2cdad3435867a28cce6f54dd58d8925160b73fb536eb491cdc158a8caa1d7c7fcd607dc59a86b612bca6c7e6fff121b9605ebd0a6cdf6994ea2309dd8973560a4bf689a20b03eff2cc67b6062552d98a2dcca12d55e6c3df880ac49009ce639cdb79099d687921ee7cee736fd20b38678193722a56bb220855d258c0895fcb0bda38ec9a0c983e0b95bb04c493c2f7922b009ba63cc1810e36e34e6a9a0b29fd0925d767f0ac51b814dd83c75a450d41e404e61fa9042fdb5944e0491c70126b25aa2edccbd4b4c7172680557c768ed8eb1d2e75837e20923d12f8e514889df24e2f516c4f281262c1462010e9fc8fd7b75e4d1eceb7f69113b9f1eea1448db8e10440a710cbd64bb2ac035eea8cba05c235331c010545a5210b4c6bc1d8d48c297f537c32c57ec5503824e48f4e8e6b115b3ac393806ea605a78949fda9bd5a809e8c0f160b995d3d78fdf34a0ec8b9b716f6ecdc35072c5cee57aa026bc8f46881f94b2dfa9c32b732c34ab45e020b2eab7fd9613769fed23270da44de03423b5b7f12073f21c1b748414631f482c931c1248ae8872994995409ba11f1d430f34e7ff4d6f2f1697391277e760e04833b3caff554b893e2c398fa51a97b77403e2fed70fc6500b07091685c5d59ce47ba52bab82bf41f824e16737769ecb7018194cc4c3fd1a7f68a7fe1d1f562a24360b9a0532b053bbd17cd560342d3bbf9612b8ef46e70717164b2f59a03bce37e4d0753a5fd8cac1be8f1268a7f87e27c50b162e4cba0bca91e9ca16f3dd933afdd97df2911fdcd932e6240ba7dd9179c78dbb2de10b7cf8f413bc8ea7c12d20b17cfa979d3229e5e2e2c38179422d9f4948b5a4f537fc1d59bb0ccb08395bd28aca8372f377617784842bf6d6831decf6cac711960184925a499196fcb669864a1f966ebf270d40be4c025cab988ffcec0ba642f8dd879f6fc505b2e0cea7c01fd957bd4da9ad27a743821304cdaaadffd44da176e75a710d13707cd5ce2e2f9d3b15a432c1f6e5583c852f2bc2965a87fa6edc6516affb43e52db073a617ee2011c3a090dc0e0dddad9e97bdc1f60ac68382091007cbd509b9a94b1495015a0fd474a38f89e4ccab645fb120a162809287ce31f79b153c4426947a2010e5fcd997e27e562ec32fabc1682b5f8dacc82de2e042e51245f8ed94f722ab60db1cffac6fa80950649e349332a692e0acab4105777ba45a96d500a318a23a44f279b2ac8a75c559924e3e1e71b8d885721e6a7ff2469f5b63c67b06c264ebbf69cf02aa66f049acebe4ecc2de3161989c119022d097cf78bce1283e2b46fd88141b7e5b7a640659504d6e453fb5e9ad4dfe482f6e0a8ce76cc89ad3782d68f4fe6d98a7c1d3c4ed774794341124cac60241e5453c361834de1259ec40f84e73ef3966aa331d64e7afe9908470cecf90e927230801011fbff2a536f02576089e0a39be8182d7549935e81e896eb3e2cc19153d0ebb8479ef94ebc5c1ea2596bd95de25be3340f139834a1dab6e1b08eb80fe06166cb66b609e2bc799de777179b1d2c3b7e812f348de2775c3053b5fe720612fa89ba68f00678ae953ecd2e25128818bb64fd7446f1c4564231bc0aaa86cb784d8cac73fc1143428082575967bb06ff7e86293667c24a6ac9f126a428d29315cbdd8480bc6a5e008a94176028ec95d8e8aca7dc9f95e9fc3ebbf94992b176d6423f07fabf266ba087b0047ef357fd8b8cba26181fe5ef15cc6ca5ea076e1e5285fc967d5498fd18135db0deb244c4c517ba3fb6d25858c5e6c48ec90ce60cb451cfd3beaec770fae9637619d675108f07ac55ebabce7a9e8c9032a43a34bfa1dfc2309cebf0a42fb8f06348200fba65042a2ee4670c4fd185af105e83d081dd8949a98679124c72f4b5be1b120d9b11fd9c6fd92796e7bd956318c397774785645c0f81abf1dd7d12f1e29c051313045a44c2b3063cd12ef39151d8444e1bb1949f83762599b507bf89d4be18095465f774720e5f2f0bff5902384f33343de52d82b57b5ac75123ba3c1cddb1daa28ddbc65d1a87064ea733b4fe466af3a0a5306066ec860ce5f42ec9df9e98b94da19eea9c5c93e40a4c88a33e8cd5153ea58bb0231bce5b4d9f81f2bb61e1a45e49f8f500314c13e7c945f773ca68735dc7f321373641a06bdba79a34674b4e9df16bf70f3854b29e544ee5c210eeb5599386e8552362785727d60e67c2f3200d4a1efdfe7f735f6ae870cb3c0fa8442d0fb8c88cb2314831ed959433f79d7667ec81ba1ff80078ab55b900a1b72aa480cc910dad6bd851ea56bfedc3a2a43a13309e92d159150a73c614fe2f0e5d9667e3ef128c60ac55f92d4d96ebbcb1a2307794c9af960f593b90bda13a637628eab6cbc2db281742ec849d407a50eb50607964afb1e9083c3ead540df11a50b7ed9c17962e4e21ffb4e3e601e22458f30b5c0a2dd4acdd4b632826ebd3892563329b2e4a5d986dd7278acfe0fca647dc15bc2cb4e68bdd18c61790a897e43474b92a267d75bd9caa13715e5d579cb6fd4c46739afed6cc2b9da997a1e3c619c224e03172f2cf5fbf5325055264b668eb41e64dad007409518d24947bf96f3112739346b57a531771777e4521a9ef546d0a45c9f77e5e0b8a0e17b2245d40deaa2bb8bb5479cdc0717295b9301a782c3a348778e7f9593952f076e7f291fed763dbf2f2ce2ebc4aba392cb77746501d18fc6c0e1ef7f36dfc277edd5df46e8d3380b9c03e4f29a95ccc2f457bbc4c701239e7533a9c02befeff82e7b60411c732d6c5d674315ddbe6ba509e36aaf72d64bc47e1da49358bf22ea87537da267274a4a0fb8da4fa46935223b1faa9ec9379c92910a059bdc879d6808d082f2fda85c2423fe13041522e3c8153ac8648bed60295f08498fcc3ea5247265da3c19056a37ca6da8684e3b21fcb7276407c806763c3cacecf85b36a0bdcc844de3acba691cc9771c8ced057f00f174fddda14905b6c8847e7c666ff3bbd75b9eb1163b234fe66012ec0ff7666b5b2e68ca88e7b9c96b0cb8dcd805ec6c17b7b41082d86cdba70ce0a5bd1917ac6844eb5841fe5aefaeff14da21bb4a3aaf7f487ef944b27b4349ad0293c9feabd12115592e5f4200174e03650a155b18630e732e6f0f1decbf500a57453a855bf6fab59a84cda627457a7cd47674eadce4ece45088e9447ab5a6d3bf68a84207b3e60f48bc9a3ec3969ab24b354822310c4eb5d20147d3094ecebc971ffb5fe74c107581a7f3bff26f2f1cb387d90dc908f44c7d600ab72192b1fd3b9fc77ce38490881fcb59bb2adaa7b8764d046da46b7460065e0b202920e28673d5cdbf4dbbcc4ea2616e063bd817efca6e6976e81b7ae33114eceba82e9fe0583717970991bcd55a20eaff8a89864d7fbeb9c1ffe5796aca66ab35bce09a29aed8cd484cb13df31a9f36f6c1a68704314ac5fb50e427dbee6979278f4af6a4465139332e8cca0e3dc5c9f90f1acb3f8dcb44ab79ce17051343c10addb56edadf6c114eb6bb64a5f5f20247957b2ee5adfc7431e3cb101aa300c28cd554386641702a07a6446951e63208a0156ca5261a8f3b103fdd932cf81be495cad77b9d4ce1021b2698b8038ce324e6483ce88ed8770fe37e62ac5191f4d5600d59a234ea61e37e17bc7393cf53abcf353f475545eab2b1f446f232ff471593cae3b4e76cef823698b40603293dfa9dc133367e52fb6335b81e3ecf4c4acd823a29fb1bf4ed52218c12e3df6f2e75063ab0781fac86ec3c196f7be8fe6f9b22c9f821fe9bbad0b68927597122c0dce77269cd9284e5798b04c0ff219fd4f853b048b303f136b9d6ecc5d2058d276f3fe003c9631aa644e50a8a2b7b1478e909df7f2db74f7521a0069826e18e0afd9a75da7e3ba2e5487d666e6f7528de5eedfe925bd4a2b70420aa38b6686c915ba22bd47902880cca54b7158cd84b3ae473f35f09b7b9d47dd6f150f2fc5b576de4ad18dad097623c2a7e350be6728bf101a5a8474fd4130c5bea691836d65fab0ca587d686bb5f5cb0530490c42ca8a82684ec12f6bdfe3cca65ea563aef9975d92a55a5f02cb501c332d779e8047100f3dc9fefcd9e5e4b5a81c893b0673ffabff15936aea3cdfb1b3a806f514f69d5a6a8ecada3bf7403dfb0a9f78bb4482ac5fd61b0a84ba0187511fd975fcf2df1060854f031684294c736c11fa1930deb342bd8287d726abd91f257a9131a6a03175e8fe4119a324d5e86c75f85ac0f68639365ccad65f94721857ff2f1483940ba7b1ff41d14602d853e94618a146fc5208475a68d2f78a25504d21494d1d5c8daed1288bf63b13", @nested={0x2ec, 0x92, [@typed={0x8, 0x70, @u32=0x3ff}, @generic="be3ba4ca8b0f2d5d2db01d884d3867cd49de53c5854f016fa83bb4798dc8050ddee17f6d5670304cc5677062548bd832a022d85e91e6ca809174e56d42f40a0a5f2e2d12ec0385beaeaf6cb29675920c51ec8349e41b9bd2e1a25b54c900819939e1110974c02c7be142eb4eb291ad5e031f39e72260816b2ecf6c2c9ebe5a9a2492d87ddd6b13927f0c09db9bbb2394ed3433cdb884cd575805bec5080255e26f", @typed={0x14, 0x41, @ipv6=@dev={0xfe, 0x80, [], 0x11}}, @typed={0x88, 0x25, @binary="6bfc058eee125c21510b32438a279029deb22563dc5f15f1cc38569478997c3d94f9f2ae6d791bc3105b8eeb6759365b8a64a830cfc3833871f0362bc75de1c94ae768fcbf9e4113db6d816185786af95261761455803d03762c228c8b930ac40790f38cd62e05ca33af854c9e07614c12a2e2881a4a1a1faa94c0c9cd1cbf203c00fcd9"}, @generic="5c4c8dc598b868a551d493e6d67c16d82cc3b1cf17814f2eb40ea2c22d564f0856049459fe01a49707", @typed={0x8, 0x17, @fd=r0}, @typed={0x8, 0x77, @pid=r4}, @generic="9910998b30005419ebd9842290c61a178260a157935f79be710817e94c597db55efc6ca14377672173", @generic="58a6f14ac562f10c58e64960ffd2f942c6da00870bbd1bde03eb053b32b2908147a0acb975521f375df58ff4a40ef5d81b4fbf2717b41e6c3f9f20bbf486438d2c81fd5a3072d01d28298479bfaa2792f59dbd753b633f682cd321d51f821e81a356bf6cd2a54bbc2cf6c739557e747cf55d8a95e957de14d6234b6158e281aed89443754ba0b9f4c4c42a6d5ee380aab2444ca71fb551813a1458ef80072e83d35c33306002f1", @generic="9e25652a7e19f5d414b30310116a690ac8961e0aa238e08111ee7705c6b6ddf8866200a94d809166ce8f037e4a4f9bb44b0af8943ac3e32839492c1fcf483a9db3eb8f7ee5d60e140ffe331d3383faeeb343bef2a151cb5e62f2768a784ee42ec61ab220be95c6918d13aa46cd1fdbc513e71e5a6c1dd49f58ddf31f4f9beb0dc7a1f655477eb67a6d653e42a9773c1bbb98f6f9f06419f2fb08"]}]}, 0x2750}, {&(0x7f0000002cc0)={0x74c, 0x29, 0x2, 0x70bd29, 0x25dfdbff, "", [@generic="2d7b88f573e052c6a8a9337f9d1ff808271b42e79372ac12ed15719b1f8edb054b8ef1e75bbce6cde9080ef0cdd9f3d089b847fc9c5e950e4707940d978f87b210207b28335c0269b3fb3e558591d6164695c49d145287b70aac00981b43f69de7996ed5fc46a457403f41cd24905a8de000f81730f6c1731a9d50860a90ff57faa5c4109798bd2df32b89790edc12f64c5e13ca769c5f9566253dc81ea0f64b8ad20244b8d717f0a3f66265376c67000072f1a49735928f4c05c5ae41dd686d9cfda3c99d18820f674431c8f1ee8caa809c3f27b27a7b78d744d091f0c6e09a3cd7b6d92ca00ee23dbe97a75a05575345", @nested={0x194, 0x19, [@generic="cfc632a9aae26c667dc896272d58d8022de68d1ff51980c3272671d30d4956ecf4ef3f2f661dab368ba267842e3cd598b2d3ad4845ebaeaddce10073fa6a05692040aa11f9b33cc1bb47852703e5c50949facef0dee3425047b67b830c0abaaa282bdc93433d5cfdf293c703ac6737958273220b730be4d02ddfc7522fd583b7", @typed={0x8, 0x16, @pid=r5}, @typed={0x4, 0x87}, @generic="10ce267ce6fc392fa11b788b3b3af0cc2eb161b4959b9863c3794fd0250850dd3c321ddef9f853a441821320b2d355b1bf27b8085048adc1325345f38f7e7bf511bed4e51d4f2ab630605287eb54cec50efa63942b8af9981e425fae9c208a1de47ea63774bf5f974b35e73fede18b2a159452856ff55385d835b4fcccb0b6f64c36290a02e021ba7d6def8a88b7bb2b3799b66c81d8442d8593cc9e2038de8464d52f2508a3c56dade5affa307468aabe92a534ff30325ea1ae02007f07ee7c8aecfc6b67d8b531997d242c408958ca203404ae8525f06f9ea6", @generic="0257235e796d9a65f23f8d13adb05a3ec550900d95d30699a0c8c40b22", @typed={0xc, 0x3, @u64=0x9}]}, @nested={0xc0, 0x51, [@generic="4183108cb65825258bd45534c3cc99fa236a98de071aba8f12f32ce138c9121ed610294965b49cb07139dde5b016225dcc60e0457e5f46717c088c5808070b32f8e7c6c715c6c778c4b4736fbc598436977043d1af0fe655100257f684e57e182818579529db82ec049b23689382304f2838926b07e79cf92d95a2a582f6b6c54a29939c36f545345b1aa8820bd1d58d225b04e53b68d18a36c892e3dcb81b296bedce3cbe26400372b0432fdd683c87a066aefbf4c9db5bd98134d4"]}, @generic="16eb2a00dca26d8a6e822d7e480a4f9a215abcb093d723d5f1eeb6b42bd0a6be594913ce218e87a71a5fa7e6913b1f8f86435a5c0f493326a239c4b57c561d51d5e35d7ee88c161484f7eacd0f27446952183e76a453ba058d5c2056c956cf3fa5def49777a65a4a8f12c90cf12b861bb7493c863dc0d1dafb9a69df9dc631a8315b80f17f0cbf6095d036e39c262f84f12f311767e38e5103b2b580a2211d0e1ad22fd3064affdf0b5d61df9429a2c377117cbc99173dfb35bf594ce2904b8b8097d6fac4be4ddb2b77a88ab36457dbd41574e0c3fd887d30892adfb67c6e6600", @generic="22279b166dabc0e6776182ef8fe9ca841a72a6652de5fedb59c32fedac7df4eb8631a8c5a70c9077810a33b4e4f60de57e4a92f713253e58b5e1c0bb1bf99fe93626a4c2f529cc3a190000ccc7fc0e807c063d82d78fc852a423e1538eb676b8fdbd4c33a5aa27403f685388b8ae998e1865b043540e50b5ed432bf3ef7709ae154a08d4238fb343b542c469a5981e82ab2456b58855635a1a87fe8db5581101915f7d4594671cf10c0fb8d2b4698d91848787fc9f3bb48194c23bebc57540becec009b3dcd708e9436ebb1832846a0edb21058ff2fe8a43185e3cc09a883ac6224eb4ed6d6e9d3ffdf9b3a957e1771c792404", @typed={0x8, 0x8f, @uid=r6}, @nested={0xc, 0x64, [@typed={0x8, 0x1, @fd=r0}]}, @nested={0x1b4, 0x3f, [@generic="9369c808676fdcf37e15e40f5ff36dcea1f33dae35fa78c1f9fe0d89aa1b748fc6532dcdc06387b64ede77fe84249ff72ff9bebcb016d11c2937b5ca4b3fa24741f588d3f82f0d5f68f4f56471adc799a80c27dffb4ae9496974e3ae763086f01ec6818c98bf3ddd4d4eab289c86391ff9c2d944df145b001db3b866401132cc7115303bf495391684d10fb4214ac486207e581d98482a618db612e8751d9a9b0bf38a08c4a8d92c8d0304ece41188c5960ffc2ed14012ae60f6271ce2b5366b94a1bb0b7c6e9e79f30ad70f7886f428af88d74d3a052ea1e505d8d3f62838849a8f8e17a027c13f61b906d3422084dbc8b3f665", @generic="1f1b772d446338a311194e894f97e00d2058ab9464d977ebf12952c315ebf8ba677415ebdfd41e4149fa199cc761995254950e73ed4da7a4f1c0507d0c843dd2edb767fa6b21acbfb565dabaa4331299c1ab12023ae5bde5077427f3642dbb5efa0be5e8e1eba3568c41b49d9f60067d9d2d5f81c82dc0c27d034404da42797ff8f946ed945ec32afc15238f145de01428c81ac239e3474fb5a301de82e017768da53b47c8b2df97f82bcba5985c009bb3193b4fa000dbcede"]}, @nested={0x58, 0x4, [@typed={0x8, 0x37, @ipv4=@local}, @generic="e313057c53f815a9c7070bebf4ea051625046c2c2f4b1bd8a0d80439bd17a4c85a4abe01564e926a577daf3424d5440fac6262ac04d7f9c4a2032937b79fbbe0", @typed={0xc, 0x14, @str='bdev:\x00'}]}]}, 0x74c}, {&(0x7f0000003440)={0x11a4, 0x31, 0x10, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x85, @uid=r7}, @generic="a8943f77eb28c4e80e53bab0ddd4dd710f90f234d953", @generic="dab279713d305bd409afdc10f0f548d55871f8807e62d299d8c7769b3be92ce4a14f89d13011c53dc930ced7714571b9febb5af5d3df402b2ffc3d5f7de50d78858e90aa2cd4d6b2ee77df819ba0b8767a783f0552aaa1e2454a0427fdeac5d086cbeca472a6dbfe32e5211ac72daa393b4f121fc26ba3543f14232f0c5f56bafad37d002426f9ab5f1af1fd3f003d23655e24b815343d1185ab4cb768360888f219bb28aede09b8858ff0b008c3ddd62bc8c047b4ce8d21bcbbd6c878bcc4f155f0d2d4c022553a066f0fd892ef5ee17c50db6135e62a084185906998298330917cbd902f46bcc3", @typed={0xc, 0x0, @u64=0x4}, @generic="b35aef186d2720b164d3ff672474511db14adf6eb82cd9d4ccdccb34531b538e7124f2fbd0c96616a26b111c45c46cec2d5d850e2937d388920fd94e3d960310b7e836d2dc661d79b42034af781352c4f0a84f62b7cacb5e8d03b89e91019111e8", @typed={0xc, 0x6f, @str='.GPL{\x00'}, @generic="30a94ce8557e2bdf68075b8c6d63376436afd6c8836967dd3df145429d0aaf777edfa7061122ecc02c4407b31cba5e89f05eae913dac38c587070837e356d009d46bedd4118c52abf6bdbbc50def88b1e70bf4b2a126380fcfdd2283cbfc41e4bcd9d64859a7339e5bf46a9036e5b50df206fe4174c643dcdefb038100e0c5a193d53ff21f26c760418ff3c830faa06ad4130ab3f8473305fad2548dac5de469ead9338b696eeb6c2bc6ca405404ad2a74bb3766fffef2307a7f0328c2891743992eb89fe175c856af6fbe0d0f402dc5b42665e52b4288a210fabaebb9d82a91f5122088a445f8cafca2c4a0a57dd7fe41e9f9650b41edf974bab251e4cdc5863856758be36fd77eb44dd5aab9d51cd5ff426f8ab2854d0350ad79158a29bd2d3816ef02f77fa6c75b22ffbec82c9b5aa452b55af588016e5bcdfd7e2d94fa63dc9aff91d787b060c272cdd9beaf42757c7b47eb07f6ae6c722468f4015c02a87352ae49f1b549681c2e34dd7d9e794209e2d282a7749830dd5c318df5940a6e2327440fc61f12fb4414048b741a9bed4f71def778af177769046dcaf3f8bae71ea3a12b6fb41efb7eb69645e29d30b8290d2f6e92d87dc4fe1a24abbca5e00f605be63fa8858e5cc9a40233b93e47a873e0eb7cba3ddf5e85d69c8f76c17585efbf113747de9d77ba7e22da9d1eab2af8198672a55690d839b4cf9d747159a33394044cf47c65e0f4448419688638d6a37d1be17711cd5c8ddd85a9324ce5f6243cd8729b6a6d83d52c14978e3f49f2dcb02942c7e828f62912ecca1d552f53f83554476bdd0cc7d9d759594b344eee05cea4a8f2ba00140a888a536cc27e731ec8639c6a33d61674ceb0d55839c138574a1b32b25992875a6170d1e72d16f721b1e9e3a49435c575e50f4d48531efaccd2b881bbfee49a024d4ce8e1452370593d45ef84ca5b0d3525ca7ab97baaa2f312554251a8c4edd9a13a62422482ec91ff558915c577d9b869aa5a9072b3d3165e9c5a06eb616d58cc2603147fe0db7db2d30ba3829e20ed799ecd89162c4a99f9720a7e7ae4984a0f0bcf38818796032ca5f0e091c2bb9e03f524a2229bce5f6afb044be7ade05ff86d46a37fcad2055b1dfc5740677dcc4ceb94e960119a1c892203b5230c7e7e8f18cd6fb8d03e04fd38ce87bfb22499edb39148f554703cf29b5f8859d680828c293d2610bb86457b598818c939b462df32432989987eb58e531621b73626c4eee33bfe1566fa4e474d13b25921eea9592039fd8288ba4ad70bde6ca602909273633de243b7fa94cc648f096c5fa60dd0260a9824ba9feba1294de63237cd319d19ccd7bc241df5a25b47f79b10e01b0d7eb801bc668bcf6482fcfdadf55435eaf6a0ef9be0d7fa5a6d627a19e7a6815c579a1daf6d304d5ca94bbbbafa08255a4392c544fe4aed3a24e2bf9c75624ee155ee6c6839b0a3329a37c95e55c1d6c2aeb1c98231fc2946aaa38ad9437684612c2685eb273db2f1d8d83a369fec5369db61565fe5015a2dc069e2539bc7fca06ab5ec1be2c9588b70de241898ebd9688b2803a2988705413f8fdcee39cbc406a591c45fe75e04615cd199e526c692e789658f0f7fbcba8e01ee808f3a0b53d885727a480843ab788914fbda4f4a0096243d8e2dd680ef9e1e76bc786ddc68ecccaf713032bdc8397456490981692e982392cd1697d9684f3d9380bc49ac9ce273710598f57b6810d40ea18a226b418cdf66e517b4883db948269032736b3a45373ff40d96ada9b2dc29615fb4eaf3ce4539df411fc76d934b2e1616c8302df0d5fd0e6fe6f15d437c768a838a4f0489439712ef55cbb0f9bbaffc40370e2a811d3f237d55485ac6a0b18feb469b43aa6540a665c6a5f085fc7c5ad9578c66f236647882a97ffacc383fe3c6ebe5d7076fa33673b2e6f5fd7b5070e7d336efce8c2d4a9f70f8f200458a7789ce98c4314d49108e31edba215eb3120163f3137d7b73c5a1a99b46dd91b6118d0db99b6ba6f52b4b870c40e44711d4aefee838b4286c32e39e12738bfea7cf93f9ef689129f3bf2db6773822c28c1f83bee34961db4c1c65954d68bc655f4ab6e20e9a801e72876b9244c3b5238667c278cbc462c5dce96dd1fe5f4898b4cc93c306de9e821982ac082a790e42e695c006c2ba19d8dd5e9ae10a6896e031604de3f9cd46bcacb9328ddb94b98a74119b63a55c82414553797b253032f6b95df2956df821210ddb045450a2c8281bcb7692c8f89a4582ef139614019ad1b73755e17de7a984fca877cc96b91faff7dc59293ac62cf5dc0c702456198f3545afc6a9aaf99d7f56b07c9b9a3e9da4cf63bb0052f9f058d23438cce4de93f998eab1edb65ceedfd1d2aba304c90746740aad550a59062092100e15df97b1c26c2a6c9ad851c4dc2b0ecb6aa354b21ada96085fbdf50d22ee53a78bbad994f45c72464950cbd2c66b5b9b2250db69aae6ef85c236e71ff299ba8faf3ebd4dc91f61b70d7962e89f540abfeec19d7ebf542d396f2bf2ab4df44ab469d164ee648cf01629355addaca5f4f674495aa52a60eea9fa80dc41b8c145aeaef6ec68c72cff3306a5323be9265d0701b8de785987ecd15ecfb33060161b71b1fe027ff1897a806085963ed425c30fda03a74dc8e7cdff850f6dbda6936c8f6829d935953a7a66a82dc30ac308cb613cd54fd43f3186e7d4d42b17dda3d306c4f560df4f33bbaa5643fd5e31ff38fbdebc69da0f5472413e54a9935358537b2a9ed101462a3af5922c12c9a95706c2f40add13013254fea389a6def126ca7ec35da4993c926364a023ef4356337d849445dc3748065dd5395dce47458c0d0536682d6d20bc73fc3e5ea28d141ee4419cf022045e9ece609f462e8a55d237a8d2614c9b258ee82629d7bd1c9f0c21002ca1f3277b840faefa7296362ac90b8943dc05bf057517d1b89400fab3402dd8f371ab0fef2eee78ffcb07f718d3942f066100762d261bb0d73c6d364ae3c2239c2a0c4565874a80421b9f6f1b33bfa41a429a877f2835b1f952562a6960c5f96afde264aaa7d5de0c05b0044f178246866c08458e9d241b55cdf64d25b8a7285667be89fa1aa94e724fde42e12112ce0fe0563a9246a954bf26fd2d8ffccf2012e4bd80f92384642f585808a6b6c72a180d9a1258b1f8fda89c272534a2a2661902fb4869a04d64b79a1448168b6c496872d8d6d032b84b8c964cae181837b109007073e12a69c8079864c320252cf92134a1e471890a6838f00a0ab6639da24c27146775bb9747e41fe5e00af2b4adbb0536e783edca59fec5455da286642dd91f46b0a5f4fbd9079fb4f3936ed0dc16b0be752f50e5fbf162b4a74c229382f0a3dfc0cb5b608adbcae8bb2b94982cf4001970d1559e73b59cf84c14102934ee74e8c5e86dd22f31d5940eecae0f74ef5665aa91a9dadc833e419a2aad1f83fe65e461cd7b6e82eb08fe57634029582659e6af12759b0ad4098db267a530edd2b62d1e225f462e632de3a4c1fb8b384aec1952ba74892d92f2631c107217030068e2da44de98cdd2d3b405c908a8675b79e14a7c254aa4a7b4f946474f864a05d24ce82a4274f69f35299f066c93624fda01b69e1c1ffcf519620e1a26e82104fe48a317c587adf2decefc3081e26100f0c050f9d920386bd4623c13877748f2973c7feee1c304b6cd0c8ae9b08c9b96078c666c18f13937aa2dc91178af6ccc38b41d13fdb0854120ec097984cb66e43d3e054fb481896299e688c84c95c4cde82894f5e00398e64cd323151f9a6d11f433ee3aff3f8ac331cf474f1a8702e59b6655d97f21daa88b365a6dbfdc25e4ffdc1188e82b46bf593f483a2664c583329e4b375df6dd257378a9e5274a4a306d3ead4757113f81ba574d0587f5f6352c51c4fa9052963242f6b23392b89e6f08ae717768faed9bc821d9bd7030fece1a03dc652573bdf386f7db675a1e962a5c0ddf2ed497341d9d63b89bd68da6460c5bfbda22804f544d2108c4e251012f9e11a15410c32f4a1904039ed3e7fb63fb392af0463dd7d3801d78c780d1dfbacb6d0cb2a72c4f9a027b25a32061969b067b6d91d6e1f8d29c6d4dee3e72d1a16e1d25a61e66e8764b2aa36d1626178df8a4b4c1e6fc66a84879f17a7cfa50ca04d0ab81bf39025e2ba975a97a4d748c57a4d9e235d84629772563b51ff69db2a41196a5bf7a133c5c32827d0041ccc8c4bfa86ce8730710a7146addd25259c69ca26fa0d5d0ac7a1ec08db90f5c38be1932271b1987431415c844fb14fbe54c9bd7e26dd46dd6d474dd215f5316b704546a7bece5ebe6f5991f8419e7c95657b4c91652003048c681385f809848f04d587b2f3f7402fb61004124b4270ed792605f166f634f1242b86a327adce6516912795580ecde9503ff1ecd0b463a43754546b6503aeae58ccdc665c74ecad6b107b4974f279ecb84c3a282923783b0719dbd1989b1d2d61234ab8773d76076cfe91134eb2dcb58c745485b244f7826084e499d8de11f683b0b858d79f1c4ede70684bf8d45c3f0cf6bb692253615e37b18be11f2d46f10f0564036dc658bc3d567c124945644bc332966ab074866260a07c90e5cee71d6a0f630dcb772972041ee309850a36eb7f84d41d6ad537c6e2df2076c265aa44a74e45d175e8316e180b3f0b0618faf15610ace4ae03c78fbb7e066f264172baa3f34e259ab7ead4c89f6ff017348de55bc3f2a1e86cae2795d8b06c28750b484b5b94d47abaa1d4304e32459a7c2f98255386a9ec5337b565a1883f0be7ad9795d24d8dc3e3c45085d7922abdbc4f8de6b84a82ebfe5e4f533bfe6e36ce65bbb69e87c3d581fddc9bdcc98973c0a002724343c706ac5d88f15e18a6545ae5d1672cc48e62f0b4bdb22427839e4cbb9f3e858834c0d4ad17fb954133666b9945ef24b9059b387ccb1eaf6854fe8d3cd41ad5ea42f754e362d31f28d6742fb3fbb085ecdd3c22d5ff31faebb8af559551a1e1ae8aa59b1c26125129ab2578aa6cce2a1c3eb51fac708c5d2cbeaa2ffa1cec29a4813375520c985914a9570dca2ec72938d4b4b220941c07789d3dad71f3c52549fbf2cfdd774e82c669fd644f559737ccce42ee303a1928fb221dc0e93c89a7efd495ba78f6adfdbc5922e1598cef7325acaf1dceb7faac49370d6a960cf137ca9f2c407939dbd278f75ac0c0cbe5fa4e329c608d6314eaeee25586ee1bdbcaa0d316566f66f291ce308fb8c1d42df8e67b74d501742a28e360b51234360159199542d694ec12168f8c974cfb145c0afbd4b9bd82183866dec635d0485192194cd229036373d4ea7100f01baaadf7559e51807d5c50616422778950e53060050b9f1233a546842684c486c15c19125a4a7619c1d9ea968a9d127f71b7a75379834e92166dd422184e4bebe1110912503d02479c219f63046b6deecb598d616d83f9494b24913488986e6c24cadbf3282315631c31e196319c4b64345fbeda6b4537a37aa5131949afcd97b805908adf8965bcc72880f1dcf8c2721de2af9d9c57d3b066ad7a26010b6f8880254a004f5d6547071531c93bc2802be8a61c8fe8ac36af4a98134bd547076760cf3977609f2b9db82aafa534e758acaf50e737b4a2d2ceac8a6715a267ff5852b9ca084ed6ed8917272ab3a4314d48d6cad1cc969dd7d3180cd54426d50584ab9bfee029ed225426e00f409e73e4c1a01e1cf14b2c950dddf64dbe7a1a86c26f224c6d24936e8fd6f1677aaba", @generic="2508aae9a9f0b4ab6e9d57fe7ce037e18c796dc0"]}, 0x11a4}, {&(0x7f0000004600)={0x2c0, 0x28, 0x0, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x60, @pid=r8}, @nested={0xa4, 0x3d, [@typed={0x14, 0x91, @str='/dev/binder#\x00'}, @generic="60849f", @typed={0x8, 0x78, @u32=0x3}, @typed={0x6c, 0x3d, @binary="11c95e0fab9719e9e391cfa73ea7f4a3b4025248e63c48f95cff46b3e3d445cb6ff14df84b14c370754c8409d48e1574534d606aec89d519e0a49f62c306a6d6151e08d6485135ee96559ee6fbb01d2ee032df240f2fd2c9b9c0e09a2b0dc1ac93a48607b11c02"}, @typed={0x8, 0x1a, @ipv4=@local}, @typed={0xc, 0x84, @u64=0x8}]}, @typed={0x8, 0x1b, @uid=r9}, @nested={0x158, 0x41, [@generic="dfa3841700c56bc959a7f48c8dccf123c4eadf3d3b66a59b028dea821ea72a676f49b6d5863c6bc817d5e13a1b39b6068d103643072d32", @typed={0x14, 0x3e, @ipv6}, @generic="9100a88b70817bcaa7a69d8dedfc25c337bb5f4976c353c10b5242d39be71e42b1e9ae741f73198590cae36d54574651b19c9ae176ccfba67ba723f421a0cfa5dd7d67702925fae6c6716149550cafa04441a08a899845a79c9e29e0aec049f1cddd128186abcf20c0e97a0a5962400282ca5c9ccc23121c89e078a861ece61f", @generic="ffa5f38251a43240a3ecfbcc774b41622a988517884d073b6f7073a709b4bac3ed858bc8aaba363331788777ba2fe7abc00b8ba854e046657d2dea1332252c0bd728c7442fd6c4f86b7bf3771284aee234333725260c5a21349115432af7fb54a739d5b22df01e9c344fae95d1d7680b7f7be126bf197f149ea8367d5d352cf405ba28d6d23e51"]}, @generic="723f61a699aa92346136273845fd9b09cd34064fb0281f1168aac4af231a7b7b70b3b0ce04a79e3d52b98d358014cc2b0351207c213dcfc522cdbe9a2110e4f8361b0fbd434a418b57af01d9ebb48c472128f08a551f2ff5293db9a64fb52c403260220d1cf9b4779278800dfdf71b72be5e43c64d68e903dded702c34789292457db6c6969a7ba35af6d5998b6f889c49fa122a2e16a8f507776480991bffdfe6c02c"]}, 0x2c0}, {&(0x7f0000000300)={0x158, 0x41, 0x2, 0x70bd29, 0x25dfdbfd, "", [@generic="dc280508f92453e6f4ca3534b458acafbba4e1c6dbab2ebe77236525bd0a566d76", @nested={0x120, 0xb, [@typed={0x14, 0x3e, @ipv6=@mcast1}, @generic="bc55300cc888664c71588c291e6f896daa278a3f271163043a29eec3f42a69c286e90b6f6df54c2aadfceac86cda8b8ac531463aed39cdbe741e8cd4c6ec86a2dc6246584eae922fbd9af209d5f60ae0f346b7ad1066cfbac2072157a87778a2896ce45fabe99f95f248eb480be92251145f75110cbc9018289117084af06a", @typed={0x88, 0x83, @binary="68184f299a3262eb5b332e07c4a19d40bc46fad4c4954ce93e54cbb99f413aae1303aa79cac029d78d0a260bcf8431f99a118eb0196b8a5baee1798fb975a83d3392a3d1f98853e297a5a021821c88599e569489e1c601abff990fd95429f84e29b3692de7960d2e72c51a5afc797fb2c77598ffc03499fa1755b4dc36f5a33ad80d19b9"}]}, @typed={0x4, 0x4c}]}, 0x158}], 0x6, &(0x7f00000004c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x20, 0x1}, 0x4000000) r10 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r10, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x2, 0x4}], 0x86, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 13:49:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 13:49:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) alarm(0x0) 13:49:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x6611, 0x0) [ 189.908101] binder: 11642:11649 ioctl c0306201 0 returned -14 [ 189.936521] binder: 11642:11649 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 189.986897] binder: 11642:11674 Release 1 refcount change on invalid ref 1 ret -22 [ 190.702724] binder_alloc: binder_alloc_mmap_handler: 11642 20001000-20004000 already mapped failed -16 [ 190.712531] binder: 11642:11674 ioctl c0306201 0 returned -14 [ 190.713206] binder: BINDER_SET_CONTEXT_MGR already set [ 190.713214] binder: 11642:11685 ioctl 40046207 0 returned -16 [ 190.713614] binder: 11642:11686 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 13:49:12 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880)={0xa, 0x8000000004, 0x2, @empty, 0x4}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x6, 0x100000000) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x400000000000803, 0x4) ioctl(r4, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@mcast1}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) 13:49:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:12 executing program 5: 13:49:12 executing program 1: 13:49:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x0, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000940)='/dev/null\x00', 0x100, 0x0) r9 = dup2(r0, r0) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = dup2(r0, r0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.events\x00', 0x0, 0x0) r13 = creat(&(0x7f0000000a00)='./file0\x00', 0xa0) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000d40)='/selinux/policy\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc4, r2, 0x110, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1abfc8fb}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r15 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r15, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r15, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) r16 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, r16) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:12 executing program 5: 13:49:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:12 executing program 1: 13:49:12 executing program 5: 13:49:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:12 executing program 5: [ 192.978025] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 193.015398] binder: 11693:11694 ioctl c0306201 0 returned -14 [ 193.732578] binder_alloc: binder_alloc_mmap_handler: 11693 20001000-20004000 already mapped failed -16 [ 193.742728] binder: 11693:11721 ioctl c0306201 0 returned -14 [ 193.749074] binder: BINDER_SET_CONTEXT_MGR already set [ 193.754718] binder: 11693:11723 Release 1 refcount change on invalid ref 1 ret -22 [ 193.763673] binder: 11693:11717 ioctl 40046207 0 returned -16 [ 193.763838] binder_alloc: 11693: binder_alloc_buf, no vma [ 193.763850] binder: 11693:11721 transaction failed 29189/-3, size 24-8 line 3136 [ 193.769640] binder: release 11693:11694 transaction 576 out, still active [ 193.769643] binder: undelivered TRANSACTION_COMPLETE [ 193.795931] binder: send failed reply for transaction 576, target dead 13:49:15 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) clone(0x4000020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f00000002c0)='syz', 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) 13:49:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x3, 0x0) 13:49:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) splice(r2, &(0x7f0000000140)=0x62, r0, &(0x7f0000000180), 0x7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d9c616d02a909ec17b2de0295cffb7ace8657874f8b02acf0803fd7ce371cfecf7b5e4380f0299f8951d273bc34dee8ff38c93159409276887fb810f6f38329a3da94791209d1088ca1ce85d3409edf7b4c7ff3e850aeb18723258a03a1c02137806fdf701541ddbe7d8ae18921bcb31b891a469c52b613dd73504be621dcea4ed000000"], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) 13:49:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880)={0xa, 0x8000000004, 0x2, @empty, 0x4}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x6, 0x100000000) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x400000000000803, 0x4) ioctl(r4, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@mcast1}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) 13:49:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:15 executing program 1: r0 = socket(0x40000000002, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x7e) 13:49:15 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") prctl$PR_GET_THP_DISABLE(0x2a) [ 195.972622] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 195.987734] binder: 11732:11738 ioctl c0306201 0 returned -14 13:49:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:15 executing program 1: socket$inet(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffdb, 0x0, 0x0, 0x0, 0x0, 0x5d, 0xa0ffffff00000000, 0xff00}}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x48) 13:49:15 executing program 5: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = socket(0x8000000010, 0x3, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080000002) [ 196.060041] binder: 11732:11761 unknown command -803813671 [ 196.074249] binder: 11732:11761 ioctl c0306201 200001c0 returned -22 [ 196.117788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8241 sclass=netlink_route_socket pig=11768 comm=syz-executor5 [ 196.164651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8241 sclass=netlink_route_socket pig=11768 comm=syz-executor5 [ 196.177383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17003 sclass=netlink_route_socket pig=11768 comm=syz-executor5 [ 196.772040] binder_alloc: binder_alloc_mmap_handler: 11732 20001000-20004000 already mapped failed -16 [ 196.785862] binder: BINDER_SET_CONTEXT_MGR already set [ 196.786121] binder: 11732:11761 ioctl c0306201 0 returned -14 [ 196.797160] binder: 11732:11783 ioctl 40046207 0 returned -16 [ 196.803295] binder_alloc: 11732: binder_alloc_buf, no vma [ 196.808884] binder: 11732:11761 transaction failed 29189/-3, size 24-8 line 3136 [ 196.816695] binder: 11732:11783 unknown command -803813671 [ 196.816706] binder: 11732:11783 ioctl c0306201 200001c0 returned -22 [ 196.829307] binder: send failed reply for transaction 581 to 11732:11738 [ 196.836986] binder: undelivered TRANSACTION_COMPLETE [ 196.842192] binder: undelivered TRANSACTION_ERROR: 29189 13:49:18 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:18 executing program 1: socket$inet(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffdb, 0x0, 0x0, 0x0, 0x0, 0x5d, 0xa0ffffff00000000, 0xff00}}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x48) 13:49:18 executing program 5: 13:49:18 executing program 2: 13:49:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 13:49:18 executing program 5: 13:49:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:18 executing program 2: 13:49:18 executing program 2: 13:49:18 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:18 executing program 5: [ 199.029747] binder: 11787:11793 ioctl c0306201 0 returned -14 [ 199.790329] binder_alloc: binder_alloc_mmap_handler: 11787 20001000-20004000 already mapped failed -16 [ 199.800097] binder: 11787:11817 ioctl c0306201 0 returned -14 [ 199.801211] binder: BINDER_SET_CONTEXT_MGR already set [ 199.801230] binder: 11787:11818 ioctl 40046207 0 returned -16 [ 199.801798] binder_alloc: 11787: binder_alloc_buf, no vma [ 199.801817] binder: 11787:11818 transaction failed 29189/-3, size 24-8 line 3136 [ 199.802167] binder: send failed reply for transaction 586 to 11787:11793 [ 199.806447] binder: undelivered TRANSACTION_COMPLETE [ 199.806455] binder: undelivered TRANSACTION_ERROR: 29189 13:49:21 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:21 executing program 2: 13:49:21 executing program 5: 13:49:21 executing program 1: socket$inet(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffdb, 0x0, 0x0, 0x0, 0x0, 0x5d, 0xa0ffffff00000000, 0xff00}}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x48) 13:49:21 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) inotify_init() open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:21 executing program 5: 13:49:21 executing program 2: 13:49:21 executing program 5: 13:49:21 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:21 executing program 2: 13:49:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x271) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0xfffffffffffffff7, 0x6) [ 202.037717] binder: 11827:11831 ioctl c0306201 0 returned -14 [ 202.812770] binder_alloc: binder_alloc_mmap_handler: 11827 20001000-20004000 already mapped failed -16 [ 202.822352] binder: BINDER_SET_CONTEXT_MGR already set [ 202.822359] binder: 11827:11853 ioctl c0306201 0 returned -14 [ 202.833577] binder: 11827:11857 ioctl 40046207 0 returned -16 [ 202.839828] binder: 11827:11858 Release 1 refcount change on invalid ref 1 ret -22 [ 202.839832] binder_alloc: 11827: binder_alloc_buf, no vma [ 202.839848] binder: 11827:11857 transaction failed 29189/-3, size 24-8 line 3136 [ 202.861081] binder: send failed reply for transaction 591 to 11827:11831 [ 202.868223] binder: undelivered TRANSACTION_COMPLETE [ 202.876146] binder: undelivered TRANSACTION_ERROR: 29189 13:49:24 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:24 executing program 2: r0 = socket(0x100000400000010, 0x2, 0x0) write(r0, &(0x7f0000000040)="1700000052001f0014f97407013d1b0002000710080001", 0x17) 13:49:24 executing program 1: socket$inet(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffdb, 0x0, 0x0, 0x0, 0x0, 0x5d, 0xa0ffffff00000000, 0xff00}}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x48) 13:49:24 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc02023c123f3188a070") socket(0x840000000002, 0x3, 0xff) 13:49:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) io_setup(0x9, &(0x7f0000000140)=0x0) r4 = fcntl$dupfd(r1, 0x0, r2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x20100, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x4000) io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0xd, 0x2, r2, &(0x7f0000000280)="131dfcb3b8e470f379635db849c8963d84a33b8d97e5c8e5898ecd3efd9f9b243c0e097edc2ac965469db87a9ccb86161c1b0dae501b35040dbfb0a966b6cc96a8fb0aa4bfdca56b1cbf92f9f0d2d582406b02688d5b2b14a570632cdff53e277c2bef", 0x63, 0x80, 0x0, 0x2, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000380)="4f70b9025ee87864502c9d065d59ea42075d0049515ee3a5ee417a6edcd36fb7587befafe0cb8c156b237d00426d9e7479b03fc11839081c74dc21ce44f99e7c079df1e2d1ea2b41b5fa8626262cb8092df6d01f65c425ff4b95a18f06947ff06bbb3566b33dff47ffbf53c5fb", 0x6d, 0x8, 0x0, 0x1, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x100000001, r2, &(0x7f00000004c0)="2cf5fe376d3a4b52a03bba544cadec14931c722342bef2f137bfc7e725d2ed2acf7e0af97f1ebafecf81b81dd0542ea90feaffc0a2810b6032dea67a236d8b2cc1c96f9046f0f3b0198afd69f7c22d1c6ec441f94534bdc8ae789a983d93c7631355edf75ba0bfad681764e8b309f41fd8ed0483157892e1bb671c294dcac49b05e635e0065d3e95c2c0a01d97a960d67fc454ec359a38688600de7ce63e0bf76ab6221656", 0xa5, 0x1, 0x0, 0x3, r6}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 205.023398] binder: 11864:11867 ioctl c0306201 0 returned -14 13:49:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="6ab0865ebb2a", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, 0x0) 13:49:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_0\x00', @random="01003a1e2410"}) 13:49:24 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x64, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4980, 0x0) [ 205.088272] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 13:49:25 executing program 2: 13:49:25 executing program 5: 13:49:25 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:25 executing program 1: 13:49:25 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:25 executing program 2: 13:49:25 executing program 5: [ 205.823003] binder_alloc: binder_alloc_mmap_handler: 11864 20001000-20004000 already mapped failed -16 [ 205.832700] binder: 11864:11875 ioctl c0306201 0 returned -14 [ 205.834126] binder: BINDER_SET_CONTEXT_MGR already set [ 205.834133] binder: 11864:11912 ioctl 40046207 0 returned -16 [ 205.834542] binder_alloc: 11864: binder_alloc_buf, no vma [ 205.834562] binder: 11864:11913 transaction failed 29189/-3, size 24-8 line 3136 [ 205.834940] binder: 11864:11913 Release 1 refcount change on invalid ref 1 ret -22 [ 205.835439] binder: send failed reply for transaction 596 to 11864:11867 [ 205.839007] binder: undelivered TRANSACTION_COMPLETE [ 205.839015] binder: undelivered TRANSACTION_ERROR: 29189 13:49:25 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:25 executing program 1: 13:49:25 executing program 2: 13:49:25 executing program 5: 13:49:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:25 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:25 executing program 1: 13:49:25 executing program 4: timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:25 executing program 5: 13:49:25 executing program 2: 13:49:25 executing program 1: 13:49:25 executing program 5: perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:49:25 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) 13:49:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 13:49:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 13:49:25 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [ 206.062113] binder: 11924:11929 ioctl c0306201 0 returned -14 [ 206.822703] binder_alloc: binder_alloc_mmap_handler: 11924 20001000-20004000 already mapped failed -16 [ 206.832445] binder: 11924:11950 ioctl c0306201 0 returned -14 [ 206.833344] binder: BINDER_SET_CONTEXT_MGR already set [ 206.833352] binder: 11924:11954 ioctl 40046207 0 returned -16 [ 206.833760] binder_alloc: 11924: binder_alloc_buf, no vma [ 206.833780] binder: 11924:11955 transaction failed 29189/-3, size 24-8 line 3136 [ 206.834058] binder: send failed reply for transaction 601 to 11924:11929 13:49:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 13:49:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0xc000000000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)) 13:49:26 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) [ 206.838779] binder: undelivered TRANSACTION_COMPLETE [ 206.838786] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.899707] binder: 11961:11962 ioctl c0306201 0 returned -14 [ 206.906312] binder: 11961:11962 transaction failed 29189/-22, size 24-8 line 3013 [ 206.915539] binder: 11961:11964 ioctl c0306201 0 returned -14 [ 206.921798] binder: 11961:11962 transaction failed 29189/-22, size 24-8 line 3013 13:49:28 executing program 4: timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:28 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 13:49:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\xf9\xa1\xd5\x02\x8fuC\xb0\xa2\x9d\x8d\xa9\xab\xf5\xb1\x1e\xb1\x91R\xd47\x99\xfb\x05z\xfdGiu\xccw\x94\xbd\xd6\xa9O\x0e\xac\xadY\xc0n\x9e\xbeD\xaaY\xec\x91\rM]\xde\t\xfa\x1a\xb5<\x12\x81n\xcb\x97\xbd\xe4\xe8\xd5\x97IL0\x00x\n\b\xca\xad}=(\x9a\x1a\xde\xe3\xaee\xde\x8c?\xf3\b\xaf\xf9Xc\x04.\x00\x15\xee<\'\x15+\xca\x00\xfc\x96\xd3(Y9\xe0\xdd\xcf\x01\x89Bq\x1eb') pread64(r0, 0x0, 0x0, 0x0) 13:49:28 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x28c) 13:49:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="002b0000a21e44fb6444116a3edc0411e09ffa11b1c7a85cf3f465f6b80b6246c841f0c86cc4e57ca959cdaef3fdab30843873034cd1f33aea24b69e0714ebc3166e9dd0e8e40b9206cecb942e3db170c54e8051fa5b6c63dc1e8242c7468aa264fd843080deaf21730d78bccd5cb9339aedc0c8a4c83fa3d119be"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 13:49:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') getdents64(r0, &(0x7f0000000340)=""/57, 0x9a) 13:49:28 executing program 2: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 13:49:28 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x20c) [ 209.033872] binder: 11971:11974 ioctl c0306201 0 returned -14 [ 209.057000] binder: 11971:11974 got transaction with invalid offset (-341113990639768832, min 0 max 24) or object. 13:49:28 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) 13:49:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) 13:49:28 executing program 5: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, 0x0, 0x0) [ 209.090406] binder: 11971:11974 transaction failed 29201/-22, size 24-8 line 3199 [ 209.103023] binder: 11971:11992 Release 1 refcount change on invalid ref 1 ret -22 [ 209.134323] binder_alloc: binder_alloc_mmap_handler: 11971 20001000-20004000 already mapped failed -16 [ 209.148000] binder: 11971:11974 ioctl c0306201 0 returned -14 [ 209.154099] binder: BINDER_SET_CONTEXT_MGR already set [ 209.154110] binder: 11971:11992 ioctl 40046207 0 returned -16 [ 209.158621] binder_alloc: 11971: binder_alloc_buf, no vma [ 209.158640] binder: 11971:12003 transaction failed 29189/-3, size 24-8 line 3136 13:49:31 executing program 4: timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:31 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) 13:49:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x17, 0x0, 0x0}) 13:49:31 executing program 5: 13:49:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/114, 0x72) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0473034001000000"], 0x0, 0x0, 0x0}) 13:49:31 executing program 1: 13:49:31 executing program 1: 13:49:31 executing program 5: 13:49:31 executing program 1: 13:49:31 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) 13:49:31 executing program 5: 13:49:31 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) [ 212.058242] binder: 12013:12017 ioctl c0306201 0 returned -14 [ 212.141329] binder: 12013:12034 unknown command 1073967876 [ 212.147959] binder: 12013:12034 ioctl c0306201 200001c0 returned -22 [ 212.851141] binder_alloc: binder_alloc_mmap_handler: 12013 20001000-20004000 already mapped failed -16 [ 212.860970] binder: 12013:12034 ioctl c0306201 0 returned -14 [ 212.861579] binder: BINDER_SET_CONTEXT_MGR already set [ 212.861587] binder: 12013:12039 ioctl 40046207 0 returned -16 [ 212.862091] binder_alloc: 12013: binder_alloc_buf, no vma [ 212.862116] binder: 12013:12039 transaction failed 29189/-3, size 24-8 line 3136 [ 212.862162] binder: 12013:12040 unknown command 1073967876 [ 212.862170] binder: 12013:12040 ioctl c0306201 200001c0 returned -22 [ 212.862435] binder: send failed reply for transaction 611 to 12013:12017 [ 212.867414] binder: undelivered TRANSACTION_COMPLETE [ 212.867421] binder: undelivered TRANSACTION_ERROR: 29189 13:49:34 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='\'', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:49:34 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 13:49:34 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) 13:49:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 13:49:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x4000019980330}, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0xf3) 13:49:34 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) 13:49:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='\'', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:49:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x1000000000000000, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:49:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 215.082849] binder: 12047:12053 ioctl c0306201 0 returned -14 13:49:34 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) [ 215.867827] binder_alloc: binder_alloc_mmap_handler: 12047 20001000-20004000 already mapped failed -16 [ 215.877642] binder: 12047:12074 ioctl c0306201 0 returned -14 [ 215.883538] binder: BINDER_SET_CONTEXT_MGR already set [ 215.888840] binder: 12047:12083 ioctl 40046207 0 returned -16 [ 215.895126] binder_alloc: 12047: binder_alloc_buf, no vma [ 215.900741] binder: 12047:12083 transaction failed 29189/-3, size 24-8 line 3136 [ 215.908436] binder: 12047:12074 Release 1 refcount change on invalid ref 1 ret -22 [ 215.908764] binder: send failed reply for transaction 616 to 12047:12053 [ 215.916847] binder: undelivered TRANSACTION_COMPLETE [ 215.916854] binder: undelivered TRANSACTION_ERROR: 29189 13:49:37 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:37 executing program 1: 13:49:37 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) 13:49:37 executing program 2: 13:49:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0e05403, &(0x7f0000000040)={{0x1, 0x3, 0x20, 0x2, 0x2}, 0x3fc, 0x1a3d, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x1f, 0x0, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:37 executing program 5: 13:49:37 executing program 5: 13:49:37 executing program 2: 13:49:37 executing program 1: 13:49:37 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x18c) 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote, @empty}, 0xc) [ 218.095014] binder: 12089:12094 ioctl c0306201 0 returned -14 13:49:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000001440)=""/4096, 0x1000, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2}}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0xf769}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x2) write$binfmt_elf64(r0, &(0x7f0000003440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 218.142030] binder_alloc: binder_alloc_mmap_handler: 12089 20001000-20004000 already mapped failed -16 [ 218.174366] binder: 12089:12094 ioctl c0306201 0 returned -14 [ 218.185124] binder: BINDER_SET_CONTEXT_MGR already set [ 218.190936] binder: 12089:12103 ioctl 40046207 0 returned -16 [ 218.199701] binder_alloc: 12089: binder_alloc_buf, no vma [ 218.206265] binder: 12089:12103 transaction failed 29189/-3, size 24-8 line 3136 [ 218.214315] binder: send failed reply for transaction 621 to 12089:12094 [ 218.221644] binder: undelivered TRANSACTION_ERROR: 29189 13:49:40 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:40 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:49:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffa) fallocate(r1, 0x10, 0x0, 0x407fff) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) 13:49:40 executing program 5: unshare(0x28020400) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2801}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) 13:49:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x800, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000800000000000000000000004cf324898a68bb3e87950df83f9ef0ce60f999ae8ee0cd9d17e524cce70be1b1fab743fddee3420040191e346af806bd733b94e416ce8fa69b10737a860e72b437eaae00fee8a9a191c8778c4f14d604ef1b69d88fc7004652251ea67b2cf5672f20954a200387fffc55f7e2cbfbba128e5f5a88884358ffc7d17a74a00e6f38", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$unix(r0, 0x0, &(0x7f00000001c0)) 13:49:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000040)={0x14, 0x14, 0x301}, 0x14}}, 0x0) 13:49:40 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 13:49:40 executing program 1: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 221.111911] binder: 12126:12128 ioctl c0306201 0 returned -14 [ 221.129984] binder_alloc: 12126: binder_alloc_buf size -8464193397295415296 failed, no address space 13:49:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000100)="81", 0x0, 0x1}, 0x20) 13:49:41 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xe0], @random="70dd8e3391bd", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp}}}}, 0x0) 13:49:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000100)="480000001500190a20ffff7fffffff5602113b850e000000485e000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) [ 221.154308] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 221.181111] binder: 12126:12147 Release 1 refcount change on invalid ref 1 ret -22 [ 221.199112] netlink: 48 bytes leftover after parsing attributes in process `syz-executor0'. [ 221.242939] binder: 12126:12128 transaction failed 29201/-28, size 0--8464193397295415296 line 3136 [ 221.255438] binder_alloc: binder_alloc_mmap_handler: 12126 20001000-20004000 already mapped failed -16 [ 221.265126] binder: 12126:12128 ioctl c0306201 0 returned -14 [ 221.265170] binder: BINDER_SET_CONTEXT_MGR already set [ 221.265178] binder: 12126:12147 ioctl 40046207 0 returned -16 [ 221.265612] binder_alloc: 12126: binder_alloc_buf, no vma [ 221.265633] binder: 12126:12162 transaction failed 29189/-3, size 0--8464193397295415296 line 3136 13:49:43 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:43 executing program 1: 13:49:43 executing program 5: 13:49:43 executing program 0: 13:49:43 executing program 2: 13:49:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:49:43 executing program 0: 13:49:43 executing program 5: 13:49:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffcf}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 13:49:43 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) read$eventfd(r0, 0x0, 0x0) 13:49:44 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 13:49:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f00000100000000030000000000001549e6998aa89b7de7788200ffffffff7f0000015d4613eb077bff97a93e3220b10ec62ad7710d00f8575a0173dd24e8afc9803cfe9255999baf15e7d28503b2a641fe4d7d"], 0x1) [ 224.174876] binder: 12168:12170 ioctl c0306201 0 returned -14 [ 224.944032] binder_alloc: binder_alloc_mmap_handler: 12168 20001000-20004000 already mapped failed -16 [ 224.953716] binder: 12168:12198 ioctl c0306201 0 returned -14 [ 224.959955] binder: BINDER_SET_CONTEXT_MGR already set [ 224.963709] binder: 12168:12199 Release 1 refcount change on invalid ref 1 ret -22 [ 224.972942] binder: 12168:12195 ioctl 40046207 0 returned -16 [ 224.972987] binder_alloc: 12168: binder_alloc_buf, no vma [ 224.973005] binder: 12168:12198 transaction failed 29189/-3, size 24-8 line 3136 [ 224.973153] binder: send failed reply for transaction 629 to 12168:12170 [ 224.979119] binder: undelivered TRANSACTION_COMPLETE [ 224.979126] binder: undelivered TRANSACTION_ERROR: 29189 13:49:46 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 13:49:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0xb85bad17168adf2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000e49000/0x3000)=nil, 0x3000}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c1262857190") r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000006c0)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x224) sendto$inet(r2, &(0x7f0000000a00)="a5d30136281503000000da21f9f27b28ea5a8adbdac74e75425ec4f317b6fbac65d2a039844b1b7f3b87332d228ef6c9b913ce2fad4a050073c0e4722258886d1c08c1e85c4a8246a03d55fc84fa7edd27ef3041a8971c08b89c9fba6ae8fbe2da4cbc1b8db693db7805722ce1fa098e3cf3e1e9e238e7dcbfc00fbfc71d1da207b1447952138edb71978ede467962450847d2452c435b241d298818bf60081c38e69528d0feb7f524747f9af4ef412615cf2a1ef7cfa7602e54c3321a1a72171f1246ca7e90531ecff7b8fe3c3014fd5bd503f06de97b4dbf4ba806cf6bae6111566cebce516d0cf61dd594e9ac27cd59b517fa74319ff6cf26b6fffffffffffffff9e1583b1d112a80f5048ee1375bfc4b34a606f07a371aa4ca18461d03e3e174ad72e16b919fbf7f91466305e3a3d8704025d8e708eca7b8aab022e1951d022458b8e493bdb0438c0f429c4b6b7a27cff6e04e54f99961bfbb0f000000000000000000cfc619e40a12d8f1451834a831607765847ff8014999bf45cff7ef630058952904740acb8dc13f3a94389da35006c37155a39fbdb775df6e72d7d30f7d92f0e3e373cf1231823ad2619d519e1e07e9d926e624b4fbbce35b896ccfae861a1fce69184cf9974e7167d9ce52a84f02d6f4a05fd1a1a5bedae40d7cddc07e76f06a17eade0e6d28276455ea831640df60f609c76234ebd5d13955ce24b388b75db59dada08b729328fda0d2b14c8ec394a7aa19356f", 0x219, 0x4000801, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:49:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00aa7d168a298020"], 0x8) write$cgroup_int(r0, &(0x7f0000000180), 0x10313) 13:49:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='\'', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480)="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", 0x4cd, 0x0, 0x0, 0x0) 13:49:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x100000000000000) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffffb2) fcntl$setsig(r1, 0xa, 0x23) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000280)) io_setup(0x9, &(0x7f00000000c0)=0x0) write$nbd(r1, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x3, "48dd62bf37711741343df934cc2cb586790f9624c97511a12e238c8f2ce030c609e66a3c5e7eb1"}, 0x37) io_submit(r2, 0x1, &(0x7f0000001600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x400000000000001, 0x0, r1, 0x0}]) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000005c0)) 13:49:47 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:49:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000000)="29000000140003b7ff000000040860eb1300100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 13:49:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 13:49:47 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0xa}}}}}, 0x0) 13:49:47 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:49:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/228, 0xe4) 13:49:50 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200)=0x7fffffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 13:49:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'vlan0\x00', 0xfb52bc025cc7399a}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)) 13:49:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/228, 0xe4) 13:49:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 13:49:50 executing program 2: socket$inet6(0xa, 0x0, 0x0) exit(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 13:49:50 executing program 1: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) exit(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 13:49:50 executing program 3: r0 = socket$inet6(0xa, 0x4000002000000802, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:49:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, "25ec54ab463fcf6108eb4cc83b1f11d3893e17c0bccf6881d5eebc917ede7331993fc311391d39c807d8d3944c0b32cee4e40325f83517dc606adf46822cc415", "7df586244ccbbb63ecea535b0a8cb8850985faf2d9c023dc5017ba5881dfbcebb42c9a17fce0fc55eb031da503eeb670a4ee3309337f3e394f4800", "adfd75ae0caa391b94911db035b76d52abe5762ae806a019985199623f060a87"}) 13:49:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r0, r1, 0x0, 0x2000005) 13:49:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 13:49:50 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 230.309258] binder: 12288:12291 transaction failed 29189/-22, size 0-0 line 3013 [ 230.350727] binder: undelivered TRANSACTION_ERROR: 29189 13:49:53 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:49:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001440), 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 13:49:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x1, 0x0) 13:49:53 executing program 2: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') exit(0x0) getdents(r0, &(0x7f0000000240)=""/225, 0xe1) 13:49:53 executing program 1: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) exit(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 13:49:53 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)=""/96, 0x60) 13:49:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 13:49:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, "25ec54ab463fcf6108eb4cc83b1f11d3893e17c0bccf6881d5eebc917ede7331993fc311391d39c807d8d3944c0b32cee4e40325f83517dc606adf46822cc415", "7df586244ccbbb63ecea535b0a8cb8850985faf2d9c023dc5017ba5881dfbcebb42c9a17fce0fc55eb031da503eeb670a4ee3309337f3e394f4800", "adfd75ae0caa391b94911db035b76d52abe5762ae806a019985199623f060a87"}) 13:49:53 executing program 0: 13:49:53 executing program 0: 13:49:53 executing program 3: 13:49:53 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:53 executing program 5: 13:49:53 executing program 3: 13:49:53 executing program 0: 13:49:53 executing program 2: 13:49:53 executing program 1: 13:49:53 executing program 5: 13:49:53 executing program 3: 13:49:53 executing program 0: 13:49:53 executing program 1: 13:49:53 executing program 5: 13:49:53 executing program 2: 13:49:53 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:53 executing program 3: 13:49:53 executing program 0: 13:49:53 executing program 1: 13:49:53 executing program 5: 13:49:53 executing program 2: 13:49:54 executing program 0: 13:49:54 executing program 3: 13:49:54 executing program 5: 13:49:54 executing program 2: 13:49:54 executing program 1: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 1: 13:49:54 executing program 2: 13:49:54 executing program 5: 13:49:54 executing program 1: 13:49:54 executing program 0: 13:49:54 executing program 3: 13:49:54 executing program 5: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 2: 13:49:54 executing program 0: 13:49:54 executing program 3: 13:49:54 executing program 2: 13:49:54 executing program 0: 13:49:54 executing program 1: 13:49:54 executing program 3: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x10, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 2: 13:49:54 executing program 5: 13:49:54 executing program 3: 13:49:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200)=0x7fffffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 13:49:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x29, 0x37, "2b02"}], 0x18}}], 0x1, 0x0) 13:49:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='\'', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600010000000000000000000000003e0000000000000000003800000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e519901d693e390c2849abe6b14901a84289395a7196030fff7de511ccc5ca776ea0a02af4a6313836d11f153dbdce844c037d1e369823e4f636d2df139a6c59c22a869e8bd3f509f64fece575e429349c56bc4c27ff3332b4bacd980500a913659920c86fb44a56bf190400000000000"], 0xc9) r1 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") sendto$inet(r0, &(0x7f0000000480)="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", 0xc08, 0x1, 0x0, 0x0) 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x10, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 5: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x10, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 3: 13:49:54 executing program 5: 13:49:54 executing program 1: 13:49:54 executing program 3: 13:49:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='\'', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600010000000000000000000000003e0000000000000000003800000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e519901d693e390c2849abe6b14901a84289395a7196030fff7de511ccc5ca776ea0a02af4a6313836d11f153dbdce844c037d1e369823e4f636d2df139a6c59c22a869e8bd3f509f64fece575e429349c56bc4c27ff3332b4bacd980500a913659920c86fb44a56bf190400000000000"], 0xc9) r1 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") sendto$inet(r0, &(0x7f0000000480)="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", 0xc08, 0x1, 0x0, 0x0) 13:49:54 executing program 1: 13:49:54 executing program 0: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 1: 13:49:54 executing program 3: 13:49:54 executing program 1: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 1: 13:49:54 executing program 2: 13:49:54 executing program 3: 13:49:54 executing program 5: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 0: 13:49:54 executing program 1: 13:49:54 executing program 3: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 2: 13:49:54 executing program 1: 13:49:54 executing program 5: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 0: 13:49:54 executing program 2: 13:49:54 executing program 3: 13:49:54 executing program 0: 13:49:54 executing program 1: 13:49:54 executing program 2: 13:49:54 executing program 5: 13:49:54 executing program 3: 13:49:54 executing program 1: 13:49:54 executing program 5: 13:49:54 executing program 2: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 3: 13:49:54 executing program 1: 13:49:54 executing program 0: 13:49:54 executing program 2: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 3: 13:49:54 executing program 1: 13:49:54 executing program 2: 13:49:54 executing program 3: 13:49:54 executing program 5: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 1: 13:49:54 executing program 2: 13:49:54 executing program 3: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 1: 13:49:54 executing program 3: 13:49:54 executing program 2: 13:49:54 executing program 0: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 3: 13:49:54 executing program 1: 13:49:54 executing program 2: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 3: 13:49:54 executing program 2: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 3: 13:49:54 executing program 1: 13:49:54 executing program 2: 13:49:54 executing program 5: 13:49:54 executing program 0: 13:49:54 executing program 3: 13:49:54 executing program 2: close(0xffffffffffffffff) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) close(0xffffffffffffffff) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x37, 0x5, 0x9, 0x0, 0xb, 0x401, 0x0, 0x51, 0xffffffffffffffff}) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sched_setattr(0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x3) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x2, [{}, {}]}, 0x48) fallocate(r3, 0x0, 0x0, 0x7) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fallocate(r3, 0x0, 0x5e89, 0xfff6) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r3) listxattr(0x0, &(0x7f00000013c0)=""/21, 0x15) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0xc) 13:49:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)) 13:49:54 executing program 5: 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 0: 13:49:54 executing program 3: 13:49:54 executing program 0: 13:49:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w'], 0x0, 0x0, 0x0}) 13:49:54 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:49:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x66) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 13:49:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'bridge_slave_1\x00'}) 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 2: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffffb2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) io_setup(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 13:49:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xb) wait4(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:49:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000bba000)={0x0, 0x0, 0x0, 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r1) 13:49:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe5, 0x20000802, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000300)="9b", 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) [ 235.006307] binder: 12604:12611 transaction failed 29189/-22, size 1996488704-0 line 3013 [ 235.018468] binder: undelivered TRANSACTION_ERROR: 29189 13:49:54 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:54 executing program 5: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x8000000000003, 0x65}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:49:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0xcdb}}) 13:49:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@routing, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 13:49:55 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 13:49:55 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast=[0xff, 0xe0], @random="70dd8e3391bd", [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, {[@ra={0x94, 0x6}]}}, @icmp}}}}, 0x0) 13:49:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100)) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3) 13:49:55 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:55 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) read(r0, &(0x7f0000000140)=""/128, 0xf4245030) signalfd4(r0, &(0x7f0000a71ff8), 0x8, 0x0) 13:49:57 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 13:49:57 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0xf3) 13:49:57 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 13:49:57 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:57 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) open(&(0x7f00000003c0)='./bus\x00', 0x200, 0x0) 13:49:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000000)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:49:57 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:57 executing program 0: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}, 'lo\x00'}) add_key$user(&(0x7f00000004c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='attr/current\x00\xc4\xf4\x18\xdb\xb2\xa1\x18[\xdb\x8d\xb1\x91ux\xb2\xda)\f\xd7\xa5\xc5Ee\xa4\xdcr\x1a&\x8b\x02\x8c\x87EO\x8c\x9bh\x03\xe4*\x10\x9f\xaf\x98\\\xa8\x15\xfb\x80\'V\xa4m\x86C\xd9\xc4\xcd\xe4\x00\t\xbebU\x8aj\x7f|\xff\x1c\x9e\xf1i\x85\xc8\x12\x18d\x06b\x9c\xac\x1f\t\x18\x8e \xcf\xdb\x9eq<\fs\xeb\x89\xdd\x12\x92\xb6j\xd5\xd2\x82\xa0f\xf0\xb7]n\xdc\xb1C\x94\x8d\xdfT\xac\xe5') ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) 13:49:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 13:49:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) unlink(&(0x7f00000002c0)='./bus\x00') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r2 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r2, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0xff8) 13:49:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') fchmod(r0, 0x0) 13:49:57 executing program 5: 13:49:58 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) 13:49:58 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:58 executing program 5: 13:49:58 executing program 0: 13:49:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00', 0x43}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:49:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:49:58 executing program 0: 13:49:58 executing program 5: 13:49:58 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:58 executing program 0: 13:49:58 executing program 5: [ 238.911559] input: syz1 as /devices/virtual/input/input29 [ 238.919090] input: syz1 as /devices/virtual/input/input30 13:49:58 executing program 1: 13:49:58 executing program 0: 13:49:58 executing program 3: 13:49:58 executing program 1: 13:49:58 executing program 5: [ 238.951080] input: syz1 as /devices/virtual/input/input31 13:49:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00', 0x43}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:49:58 executing program 0: 13:49:58 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:58 executing program 5: 13:49:58 executing program 3: 13:49:58 executing program 1: 13:49:58 executing program 0: 13:49:58 executing program 3: 13:49:58 executing program 1: 13:49:58 executing program 5: 13:49:58 executing program 0: 13:49:58 executing program 1: [ 239.132889] input: syz1 as /devices/virtual/input/input32 13:49:59 executing program 2: 13:49:59 executing program 3: 13:49:59 executing program 5: 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 1: 13:49:59 executing program 0: 13:49:59 executing program 3: 13:49:59 executing program 0: 13:49:59 executing program 2: 13:49:59 executing program 5: 13:49:59 executing program 1: 13:49:59 executing program 3: 13:49:59 executing program 0: 13:49:59 executing program 2: 13:49:59 executing program 1: 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 5: 13:49:59 executing program 3: 13:49:59 executing program 2: 13:49:59 executing program 5: 13:49:59 executing program 0: 13:49:59 executing program 1: 13:49:59 executing program 3: 13:49:59 executing program 2: 13:49:59 executing program 5: 13:49:59 executing program 0: 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 1: 13:49:59 executing program 3: 13:49:59 executing program 2: 13:49:59 executing program 5: 13:49:59 executing program 1: 13:49:59 executing program 0: 13:49:59 executing program 3: 13:49:59 executing program 2: 13:49:59 executing program 3: 13:49:59 executing program 2: 13:49:59 executing program 1: 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 5: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 13:49:59 executing program 0: 13:49:59 executing program 0: 13:49:59 executing program 5: 13:49:59 executing program 1: 13:49:59 executing program 2: 13:49:59 executing program 3: 13:49:59 executing program 0: 13:49:59 executing program 2: 13:49:59 executing program 1: 13:49:59 executing program 5: 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 3: 13:49:59 executing program 1: 13:49:59 executing program 5: 13:49:59 executing program 0: 13:49:59 executing program 1: 13:49:59 executing program 2: 13:49:59 executing program 5: 13:49:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x0, 0x1ec, 0x0, 0x1000000000000, 0x1, 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 13:49:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 13:49:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 13:49:59 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1800000000000000, 0x5c, 0x0, &(0x7f0000000380)="b90703e6680d698cb89e40f086ddd5dc57ee41dea43e56a377fb8a977c3f1d170004e000d84648a2ac141411e0000001e1977d486a72d7363417ef6c9079a2ea1adc7b259747b34bd1d6e19e60597be8e1d504832c8182e40b3d72d6", 0x0, 0x100}, 0x28) 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1800000000000000, 0x5c, 0x0, &(0x7f0000000380)="b90703e6680d698cb89e40f086ddd5dc57ee41dea43e56a377fb8a977c3f1d170004e000d84648a2ac141411e0000001e1977d486a72d7363417ef6c9079a2ea1adc7b259747b34bd1d6e19e60597be8e1d504832c8182e40b3d72d6", 0x0, 0x100}, 0x28) 13:49:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1800000000000000, 0x5c, 0x0, &(0x7f0000000380)="b90703e6680d698cb89e40f086ddd5dc57ee41dea43e56a377fb8a977c3f1d170004e000d84648a2ac141411e0000001e1977d486a72d7363417ef6c9079a2ea1adc7b259747b34bd1d6e19e60597be8e1d504832c8182e40b3d72d6", 0x0, 0x100}, 0x28) r2 = getpid() perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0xcc, 0x8, 0x8000, 0x725, 0x0, 0x400000000000, 0x400, 0x4, 0x0, 0xf7, 0xc27, 0x401, 0x100, 0x2, 0x3, 0x70f7bf2a, 0xfffffffffffffffc, 0x80000000, 0x0, 0x800000, 0xffffffffffff39e4, 0x5, 0x0, 0x9, 0x2000000000, 0x7fffffff, 0x10001, 0xa5f, 0x9, 0x4, 0x0, 0x8000, 0x0, 0x101, 0x0, 0x6, 0x0, 0x1, 0x7, @perf_bp={&(0x7f0000000080), 0x8}, 0x800, 0x5, 0x8, 0x6, 0x1, 0x9, 0x1}, r2, 0xf, r1, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x7, 0x3}, 0x14) 13:49:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x10000000e, 0x0, &(0x7f0000000080)) 13:49:59 executing program 5: r0 = memfd_create(&(0x7f0000000180)='#em3#/\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 13:49:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x0, 0x1ec, 0x0, 0x1000000000000, 0x1, 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) [ 239.823832] sock: process `syz-executor1' is using obsolete getsockopt SO_BSDCOMPAT 13:49:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 13:49:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 13:49:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 13:49:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x0, 0x1ec, 0x0, 0x1000000000000, 0x1, 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) 13:49:59 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x71) connect$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x14) [ 240.107528] ================================================================== [ 240.114975] BUG: KASAN: use-after-free in disk_unblock_events+0x51/0x60 [ 240.121721] Read of size 8 at addr ffff8801c4e540e0 by task blkid/12958 [ 240.128462] [ 240.130082] CPU: 0 PID: 12958 Comm: blkid Not tainted 4.9.141+ #23 [ 240.136389] ffff8801d3f576f8 ffffffff81b42e79 ffffea0007139400 ffff8801c4e540e0 [ 240.144468] 0000000000000000 ffff8801c4e540e0 0000000000000000 ffff8801d3f57730 [ 240.152535] ffffffff815009b8 ffff8801c4e540e0 0000000000000008 0000000000000000 [ 240.160618] Call Trace: [ 240.163201] [] dump_stack+0xc1/0x128 [ 240.168562] [] print_address_description+0x6c/0x234 [ 240.175240] [] kasan_report.cold.6+0x242/0x2fe [ 240.181460] [] ? disk_unblock_events+0x51/0x60 [ 240.187670] [] __asan_report_load8_noabort+0x14/0x20 [ 240.194397] [] disk_unblock_events+0x51/0x60 [ 240.200426] [] __blkdev_get+0x6b6/0xd60 [ 240.206037] [] ? __blkdev_put+0x840/0x840 [ 240.211805] [] ? fsnotify+0x114/0x1100 [ 240.217315] [] blkdev_get+0x2da/0x920 [ 240.222739] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 240.229464] [] ? bd_may_claim+0xd0/0xd0 [ 240.235059] [] ? bd_acquire+0x27/0x250 [ 240.240566] [] ? bd_acquire+0x88/0x250 [ 240.246083] [] ? _raw_spin_unlock+0x2c/0x50 [ 240.252027] [] blkdev_open+0x1a5/0x250 [ 240.257537] [] do_dentry_open+0x3ef/0xc90 [ 240.263307] [] ? blkdev_get_by_dev+0x70/0x70 [ 240.269344] [] vfs_open+0x11c/0x210 [ 240.274619] [] ? may_open.isra.20+0x14f/0x2a0 [ 240.280737] [] path_openat+0x542/0x2790 [ 240.286353] [] ? path_mountpoint+0x6c0/0x6c0 [ 240.292386] [] ? trace_hardirqs_on+0x10/0x10 [ 240.298417] [] ? expand_files.part.3+0x3a9/0x6d0 [ 240.304809] [] do_filp_open+0x197/0x270 [ 240.310406] [] ? may_open_dev+0xe0/0xe0 [ 240.316016] [] ? _raw_spin_unlock+0x2c/0x50 [ 240.321963] [] ? __alloc_fd+0x1d7/0x4a0 [ 240.327560] [] do_sys_open+0x30d/0x5c0 [ 240.333074] [] ? filp_open+0x70/0x70 [ 240.338411] [] ? up_read+0x1a/0x40 [ 240.343572] [] SyS_open+0x2d/0x40 [ 240.348686] [] ? do_sys_open+0x5c0/0x5c0 [ 240.354369] [] do_syscall_64+0x19f/0x550 [ 240.360051] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 240.366966] [ 240.368569] Allocated by task 12950: [ 240.372267] save_stack_trace+0x16/0x20 [ 240.376213] kasan_kmalloc.part.1+0x62/0xf0 [ 240.380507] kasan_kmalloc+0xaf/0xc0 [ 240.384209] kmem_cache_alloc_trace+0x117/0x2e0 [ 240.388864] alloc_disk_node+0x54/0x3a0 [ 240.392812] alloc_disk+0x18/0x20 [ 240.396252] loop_add+0x368/0x7a0 [ 240.399675] loop_control_ioctl+0x136/0x300 [ 240.403970] compat_SyS_ioctl+0x12d/0x1fd0 [ 240.408174] do_fast_syscall_32+0x2f1/0xa10 [ 240.412465] entry_SYSENTER_compat+0x90/0xa2 [ 240.416840] [ 240.418438] Freed by task 12958: [ 240.421789] save_stack_trace+0x16/0x20 [ 240.425734] kasan_slab_free+0xac/0x190 [ 240.429677] kfree+0xfb/0x310 [ 240.432754] disk_release+0x259/0x330 [ 240.436524] device_release+0x7e/0x220 [ 240.440380] kobject_put+0x148/0x250 [ 240.444064] put_disk+0x23/0x30 [ 240.447316] __blkdev_get+0x616/0xd60 [ 240.451086] blkdev_get+0x2da/0x920 [ 240.454685] blkdev_open+0x1a5/0x250 [ 240.458368] do_dentry_open+0x3ef/0xc90 [ 240.462312] vfs_open+0x11c/0x210 [ 240.465737] path_openat+0x542/0x2790 [ 240.469525] do_filp_open+0x197/0x270 [ 240.473309] do_sys_open+0x30d/0x5c0 [ 240.476998] SyS_open+0x2d/0x40 [ 240.480247] do_syscall_64+0x19f/0x550 [ 240.484104] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 240.489176] [ 240.490778] The buggy address belongs to the object at ffff8801c4e53b80 [ 240.490778] which belongs to the cache kmalloc-2048 of size 2048 [ 240.503600] The buggy address is located 1376 bytes inside of [ 240.503600] 2048-byte region [ffff8801c4e53b80, ffff8801c4e54380) [ 240.515618] The buggy address belongs to the page: [ 240.520519] page:ffffea0007139400 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 240.530690] flags: 0x4000000000004080(slab|head) [ 240.535416] page dumped because: kasan: bad access detected [ 240.541098] [ 240.542700] Memory state around the buggy address: [ 240.547633] ffff8801c4e53f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.555000] ffff8801c4e54000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.562333] >ffff8801c4e54080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.569665] ^ [ 240.576131] ffff8801c4e54100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.583463] ffff8801c4e54180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.590800] ================================================================== [ 240.598129] Disabling lock debugging due to kernel taint [ 240.606849] Kernel panic - not syncing: panic_on_warn set ... [ 240.606849] [ 240.614227] CPU: 0 PID: 12958 Comm: blkid Tainted: G B 4.9.141+ #23 [ 240.621753] ffff8801d3f57658 ffffffff81b42e79 ffffffff82e37630 00000000ffffffff [ 240.629812] 0000000000000000 0000000000000000 0000000000000000 ffff8801d3f57718 [ 240.637957] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 240.646025] Call Trace: [ 240.648628] [] dump_stack+0xc1/0x128 [ 240.653983] [] panic+0x1bf/0x39f [ 240.658992] [] ? add_taint.cold.5+0x16/0x16 [ 240.664983] [] ? ___preempt_schedule+0x16/0x18 [ 240.671224] [] kasan_end_report+0x47/0x4f [ 240.677018] [] kasan_report.cold.6+0x76/0x2fe [ 240.683156] [] ? disk_unblock_events+0x51/0x60 [ 240.689404] [] __asan_report_load8_noabort+0x14/0x20 [ 240.696150] [] disk_unblock_events+0x51/0x60 [ 240.702206] [] __blkdev_get+0x6b6/0xd60 [ 240.708039] [] ? __blkdev_put+0x840/0x840 [ 240.713815] [] ? fsnotify+0x114/0x1100 [ 240.719341] [] blkdev_get+0x2da/0x920 [ 240.724782] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 240.731521] [] ? bd_may_claim+0xd0/0xd0 [ 240.737132] [] ? bd_acquire+0x27/0x250 [ 240.742655] [] ? bd_acquire+0x88/0x250 [ 240.748179] [] ? _raw_spin_unlock+0x2c/0x50 [ 240.754139] [] blkdev_open+0x1a5/0x250 [ 240.759663] [] do_dentry_open+0x3ef/0xc90 [ 240.765449] [] ? blkdev_get_by_dev+0x70/0x70 [ 240.771493] [] vfs_open+0x11c/0x210 [ 240.776759] [] ? may_open.isra.20+0x14f/0x2a0 [ 240.782890] [] path_openat+0x542/0x2790 [ 240.788503] [] ? path_mountpoint+0x6c0/0x6c0 [ 240.794548] [] ? trace_hardirqs_on+0x10/0x10 [ 240.800613] [] ? expand_files.part.3+0x3a9/0x6d0 [ 240.807006] [] do_filp_open+0x197/0x270 [ 240.812620] [] ? may_open_dev+0xe0/0xe0 [ 240.818230] [] ? _raw_spin_unlock+0x2c/0x50 [ 240.824186] [] ? __alloc_fd+0x1d7/0x4a0 [ 240.829803] [] do_sys_open+0x30d/0x5c0 [ 240.835329] [] ? filp_open+0x70/0x70 [ 240.840680] [] ? up_read+0x1a/0x40 [ 240.845860] [] SyS_open+0x2d/0x40 [ 240.850947] [] ? do_sys_open+0x5c0/0x5c0 [ 240.856642] [] do_syscall_64+0x19f/0x550 [ 240.862343] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 240.869598] Kernel Offset: disabled [ 240.873209] Rebooting in 86400 seconds..