00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r2 = dup2(r1, r0) getsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000180)={0x5, 0x7, 0xfffffffffffffe00, 0x0, 0xffffffffffffffe0}) [ 570.405425] binder: 27332:27338 transaction failed 29189/-22, size 24-8 line 3012 [ 570.405480] binder: 27332:27338 BC_ACQUIRE_DONE u0000000000000000 no match [ 570.433095] binder: 27366:27373 ioctl c0306201 200003c0 returned -22 [ 570.447042] binder: 27336:27380 transaction failed 29189/-22, size 24-8 line 3012 [ 570.468921] binder: 27377:27382 transaction failed 29189/-22, size 24-8 line 3012 [ 570.477406] binder: 27377:27382 BC_ACQUIRE_DONE u0000000000000000 no match [ 570.525647] binder: 27383:27385 transaction failed 29189/-22, size 24-8 line 3012 [ 570.533967] binder: 27383:27385 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:27 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000180)}) 03:33:27 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x70, "6010a62df3707a78cf36f08d6aede5fd7173f862b83a12c4cfe1298b321b6b8b81cc8bf43b7a4606441061630898b86b1f2436aedda68e2cea9d50abd275a5fc7d1ce5fcbf4c8568a9ad687512f643edd160429f3a90223d29f97d298942a50fb781087d4cbc2c4849a35c3af2ad6f39"}, &(0x7f0000000040)=0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000f5"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 570.922369] binder: 27386:27389 transaction failed 29189/-22, size 24-8 line 3012 [ 570.935554] binder: 27349:27391 BC_ACQUIRE_DONE u0000000000000000 no match [ 570.935689] binder: 27349:27390 transaction failed 29189/-22, size 24-8 line 3012 [ 571.015537] binder: 27393:27395 transaction failed 29189/-22, size 24-8 line 3012 [ 571.023933] binder: 27393:27395 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x11) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05040000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="cada925300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) open(&(0x7f0000000180)='./file0\x00', 0x6400, 0x22) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 571.119116] binder: 27366:27379 transaction failed 29189/-22, size 24-8 line 3012 [ 571.127690] binder: 27366:27373 BC_ACQUIRE_DONE u0000000000000000 no match [ 571.134986] binder: 27366:27373 unknown command 0 [ 571.139954] binder: 27366:27373 ioctl c0306201 200003c0 returned -22 [ 571.147521] binder: 27370:27374 transaction failed 29189/-22, size 24-8 line 3012 [ 571.155415] binder: 27370:27397 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vcan0\x00', 0x1200}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 571.169427] binder: 27398:27400 unknown command 1029 [ 571.174637] binder: 27398:27400 ioctl c0306201 20000140 returned -22 [ 571.182708] binder: 27398:27400 transaction failed 29189/-22, size 24-8 line 3012 [ 571.192255] binder: 27398:27400 BC_ACQUIRE_DONE u0000000000000000 no match [ 571.201324] binder: 27398:27400 unknown command 1029 [ 571.202025] binder: 27398:27406 transaction failed 29189/-22, size 24-8 line 3012 03:33:27 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 571.202258] binder: 27398:27407 BC_ACQUIRE_DONE u0000000000000000 no match [ 571.222788] binder: 27398:27400 ioctl c0306201 20000140 returned -22 [ 571.223186] binder: 27377:27382 transaction failed 29189/-22, size 24-8 line 3012 [ 571.223256] binder: 27377:27382 BC_ACQUIRE_DONE u0000000000000000 no match [ 571.251051] binder: 27402:27412 transaction failed 29189/-22, size 24-8 line 3012 [ 571.251615] binder: 27402:27412 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\tc\x00@', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:33:27 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 571.271322] binder: 27383:27413 transaction failed 29189/-22, size 24-8 line 3012 [ 571.279655] binder: 27383:27385 BC_ACQUIRE_DONE u0000000000000000 no match [ 571.291533] binder: 27410:27417 transaction failed 29189/-22, size 24-8 line 3012 [ 571.300856] binder: 27410:27417 BC_ACQUIRE_DONE u0000000000000000 no match [ 571.340579] binder: 27415:27421 transaction failed 29189/-22, size 24-8 line 3012 [ 571.348924] binder: 27415:27421 unknown command 1073767177 [ 571.350684] binder: 27419:27422 transaction failed 29189/-22, size 24-8 line 3012 [ 571.350761] binder: 27419:27422 BC_ACQUIRE_DONE u0000000000000000 no match [ 571.370562] binder: 27415:27421 ioctl c0306201 200003c0 returned -22 03:33:27 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000180)}) 03:33:28 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl(r0, 0x9, &(0x7f0000000040)="cc8478244084afb3b78a9ca6fc12846e24eabbf2fbab7934cda76124") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000600)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) r7 = getuid() stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000900)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01]) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x2, r3}, {0x2, 0x7, r4}, {0x2, 0x7, r5}, {0x2, 0x0, r6}, {0x2, 0x7, r7}, {0x2, 0x1, r8}], {0x4, 0x5}, [{0x8, 0x4, r9}, {0x8, 0x5, r10}, {0x8, 0x2, r11}], {0x10, 0x5}, {0x20, 0x6}}, 0x74, 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 571.767818] binder: 27393:27426 transaction failed 29189/-22, size 24-8 line 3012 [ 571.799369] binder: 27424:27430 transaction failed 29189/-22, size 24-8 line 3012 [ 571.837367] binder: 27427:27431 transaction failed 29189/-22, size 24-8 line 3012 [ 571.846032] binder: 27427:27431 ioctl 40086602 20000180 returned -22 [ 571.853472] binder: 27427:27431 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @local, 0x1, 0xa, [@empty, @multicast2, @loopback, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @broadcast, @multicast1]}, 0x38) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 571.995458] binder: 27402:27434 transaction failed 29189/-22, size 24-8 line 3012 03:33:28 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) listen(r0, 0x40) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x20011, 0xffffffffffffffff, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x5, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @remote}, 0x20, 0x9, 0x8, 0x100000001, 0x81, 0x0, 0x7, 0x3, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000000000005078d5c405005ce4b26ecfe96450217aa79c578e5f922921000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl(r1, 0x917d, &(0x7f0000000380)="18a2dd6c43e5f6ffcff775ade178deed2f49964e395902b27f4a29a4b54de28c5c879fa59722") ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 572.045679] binder: 27410:27439 transaction failed 29189/-22, size 24-8 line 3012 [ 572.054219] binder: 27410:27439 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.068379] binder: 27436:27440 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.086982] binder: 27415:27445 transaction failed 29189/-22, size 24-8 line 3012 03:33:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x7) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a1b0fb15a3ec50d62bf1d0421c6", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffd0d, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) fgetxattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73656375726974792e2f64ffffffff00000000"], &(0x7f0000000480)=""/255, 0xff) [ 572.094863] binder: 27415:27421 unknown command 1073767177 [ 572.100850] binder: 27415:27421 ioctl c0306201 200003c0 returned -22 [ 572.104945] binder: 27419:27422 transaction failed 29189/-22, size 24-8 line 3012 [ 572.104984] binder: 27419:27446 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.104990] binder: 27419:27446 unknown command 0 [ 572.104998] binder: 27419:27446 ioctl c0306201 200003c0 returned -22 03:33:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) fcntl$setflags(r0, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 572.136385] binder: 27442:27449 transaction failed 29189/-22, size 24-8 line 3012 [ 572.136553] binder: 27442:27449 ioctl 917d 20000380 returned -22 [ 572.136615] binder: 27442:27449 ioctl 40046205 4 returned -22 [ 572.136674] binder: 27442:27449 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.185107] binder: 27447:27451 transaction failed 29189/-22, size 24-8 line 3012 [ 572.194640] binder: 27447:27451 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.242478] binder: 27453:27455 transaction failed 29189/-22, size 24-8 line 3012 03:33:28 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000180)}) 03:33:28 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000480)=""/148, &(0x7f0000000040)=0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) fcntl$setflags(r0, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x5c, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 572.591484] binder: 27427:27459 ioctl 40086602 20000180 returned -22 [ 572.591492] binder: 27427:27431 transaction failed 29189/-22, size 24-8 line 3012 [ 572.622994] binder: 27456:27463 transaction failed 29189/-22, size 24-8 line 3012 [ 572.668763] binder: 27460:27464 transaction failed 29189/-22, size 24-8 line 3012 [ 572.677316] binder: 27460:27464 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x2}, @register_looper, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r1}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f00000001c0)="2d6b5589e92e61badd8315606e8f977a659c2949179da865dfb009ef06fdf682a6a2684e2b26"}) fcntl$setsig(r0, 0xa, 0x28) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) inotify_init() ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000006c0)=""/4096) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 572.823149] binder: 27436:27465 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:29 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 572.893452] binder: 27466:27470 transaction failed 29189/-22, size 24-8 line 3012 [ 572.901829] binder: 27466:27470 ioctl 40046205 9 returned -22 [ 572.908128] binder: 27466:27470 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.929259] binder: 27442:27449 transaction failed 29189/-22, size 24-8 line 3012 [ 572.929683] binder: 27442:27471 ioctl 917d 20000380 returned -22 03:33:29 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getgroups(0x3, &(0x7f00000002c0)=[0xee01, 0xffffffffffffffff, 0x0]) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xc000, 0x5, &(0x7f0000001780)=[{&(0x7f0000000280)="5cf31cd657eca198", 0x8, 0x2}, {&(0x7f0000000500)="4c64b762376b3c7a990dde0835337b08bc1d008ae829be08c7a51d49c0b62ba87dc1f75746fe447d9c7e104b0fe2983fb7abf933e313d52e24fd3a388f7aae4d671b2bc66f5364a67666a94d417d1bd27deb18eb0fd6aefc7f8074", 0x5b, 0xd29}, {&(0x7f00000006c0)="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", 0x1000, 0x9}, {&(0x7f0000000580)="55f4a49865fbe4be48f1001772a06a1e128557adbd4b5b3ae5826f1e69581722970dad22ccd29b6d7f7f83278ed6f1401a3a780d6e46ea3e8f5150cbba70c6166ee9b757d101824a404cc48a4f3cc343e132b26342faf78e305c28f9f9687a5a9fe1b1003856c9e30d2f84bed3d846522b43c44665eef725eb29fe435a7e99febfb784790bbd3b578b79c1e8bad276531b8be992aa98e510ca9da4be61cd197b97e75803d3e443e9a42c440d3e814f6d6e1507d66112bf19f1f87897b7e3b95719da105ce5e260a9f88eba3cee08d5f058b25be1a6aa47bb5daf05cfad2deff6adfa7b4c89e11c22", 0xe8, 0x8}, {&(0x7f00000016c0)="175c73c9ffa630121558bfc35233b8dcfa22f4d91a25e8501194d6c28b3ee2014f113f766fac44d143fc38d90d63e1a35d7c160835f6a38b0beef402a298dc8604555ac3b0bf57ac1239093cd222aafc60ad1589f0a518162e8deef543b178b84290f0fd0a04f76005894634d5cc9c32aa43747529a456d4e719c7634d27a00b54e1cd1a5fda5ee4c885079c32ccaca7fbde584e", 0x94, 0x6}], 0x8006, &(0x7f0000001800)={[{@shortname_lower='shortname=lower'}, {@shortname_mixed='shortname=mixed'}, {@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}, {@fat=@usefree='usefree'}, {@fat=@check_strict='check=strict'}, {@fat=@gid={'gid', 0x3d, r1}}, {@fat=@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_winnt='shortname=winnt'}], [{@pcr={'pcr', 0x3d, 0x36}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@permit_directio='permit_directio'}, {@dont_measure='dont_measure'}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 572.929778] binder: 27442:27472 ioctl 40046205 4 returned -22 [ 572.929844] binder: 27442:27471 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.935035] binder: 27447:27473 transaction failed 29189/-22, size 24-8 line 3012 [ 572.935082] binder: 27447:27451 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000a15eaf8c75039330ada3ebbe52c69adfd7ed8143a327a21aaee4ec660c666cfa6d8ba9615cde427557265c0b8e06176a8685f94170a5605d8d54344420e8ea7ac5c532db362d491f814b3ee8a8bca0fd7a20043ec8a80641787f24aad04e1e9492c22fdd7c742e69afefc99f4fa44a8bf325b62fdea0ec98d419121443351caa15"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="ffffffffffff3f97c336c1837c01cae4ce94c51b6fcb191478736d15ca9e1779fb5927ff996412949d3b6dbe2e80770d55a98e008b3dc4552e2a5ff8bedd4d7eeaba04041456e190365bde5f2bdeb07fb35fbaa5ddeea74d59f510137dac1353ad855592faa85ccb97b516a08f98107c7b5c12116bb53ebacc092e11ff38f709da4fc0a5b58a6628d61da22fa07f881b143acec9cb"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 572.996047] binder: 27453:27455 transaction failed 29189/-22, size 24-8 line 3012 [ 573.000284] binder: 27453:27480 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.000804] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.010244] binder: 27474:27481 transaction failed 29189/-22, size 24-8 line 3012 [ 573.010347] binder: 27474:27481 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.033753] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.081519] binder: 27477:27482 transaction failed 29189/-22, size 24-8 line 3012 [ 573.092080] binder: 27477:27482 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.105286] binder: 27486:27489 transaction failed 29189/-22, size 24-8 line 3012 [ 573.115767] binder: 27486:27489 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:29 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x7, 0x7, 0x2000}, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@register_looper], 0x34a, 0x0, &(0x7f0000000180)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 03:33:29 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0xc, 0x0, 0x6771}}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004672963d1712678b2067f75a98b9952f00000f63dd33b12d01d81e0d29513e0e5f64ed8b73c3b6d09dec5a08ec0f8474b591e3c4479da3fbfb28904c557454a421699e8d819e4b17bb6dae746ca5f4a56d8dd89022aa27fb01cbf1656634c6e71ecd2c203e091aaf914ec9bbf1"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@remote, 0x0, r2}) [ 573.423109] binder: 27460:27493 transaction failed 29189/-22, size 24-8 line 3012 [ 573.423293] binder: 27460:27494 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.439322] binder: 27491:27495 transaction failed 29189/-22, size 24-8 line 3012 [ 573.451259] binder: 27491:27495 ERROR: BC_REGISTER_LOOPER called without request [ 573.461423] binder: 27491:27495 unknown command 0 [ 573.466542] binder: 27491:27495 ioctl c0306201 200003c0 returned -22 03:33:29 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c8b05e4f3100b297b5a630000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 573.471888] binder: 27497:27498 unknown command 0 [ 573.471898] binder: 27497:27498 ioctl c0306201 20000140 returned -22 [ 573.471965] binder: 27497:27498 transaction failed 29189/-22, size 24-8 line 3012 [ 573.472051] binder: 27497:27498 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.472706] binder: 27497:27498 unknown command 0 [ 573.472714] binder: 27497:27498 ioctl c0306201 20000140 returned -22 03:33:29 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe94, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 573.472754] binder: 27497:27499 transaction failed 29189/-22, size 24-8 line 3012 [ 573.473014] binder: 27497:27498 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.508097] binder: 27500:27503 unknown command -469398772 [ 573.508108] binder: 27500:27503 ioctl c0306201 20000140 returned -22 [ 573.508174] binder: 27500:27503 transaction failed 29189/-22, size 24-8 line 3012 [ 573.508252] binder: 27500:27503 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.508989] binder: 27500:27504 unknown command -469398772 [ 573.508998] binder: 27500:27504 ioctl c0306201 20000140 returned -22 [ 573.509070] binder: 27500:27503 transaction failed 29189/-22, size 24-8 line 3012 [ 573.509109] binder: 27500:27504 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.509115] binder: 27500:27504 unknown command 0 [ 573.509122] binder: 27500:27504 ioctl c0306201 200003c0 returned -22 [ 573.581427] binder: 27506:27508 transaction failed 29189/-22, size 24-8 line 3012 [ 573.581538] binder: 27506:27508 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:30 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00fd163600000000000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) socketpair$inet(0x2, 0x803, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 573.652241] binder: 27466:27511 transaction failed 29189/-22, size 24-8 line 3012 [ 573.671509] binder: 27466:27511 ioctl 40046205 9 returned -22 03:33:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) r2 = getegid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfffffe02, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1f3, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xfffffffffffffe3c, 0x0, &(0x7f0000000180)}) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) [ 573.757438] binder: 27474:27481 transaction failed 29189/-22, size 24-8 line 3012 [ 573.765776] binder: 27474:27519 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.771600] binder: 27517:27520 transaction failed 29189/-22, size 24-8 line 3012 [ 573.785332] binder: 27517:27520 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffee6, 0x0, &(0x7f0000000140), 0xfffffffffffffe43, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) [ 573.831322] binder: 27477:27482 transaction failed 29189/-22, size 24-8 line 3012 [ 573.839332] binder: 27477:27523 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.863340] binder: 27527:27533 transaction failed 29189/-22, size 24-8 line 3012 [ 573.871389] binder: 27486:27531 transaction failed 29189/-22, size 24-8 line 3012 03:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xffffffffffffff3e, 0x0, &(0x7f0000000580)=[@acquire_done={0x40106309, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @request_death={0x400c630e, 0x2}], 0x0, 0x1009000000000000, &(0x7f0000000280)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x45edf8019f4922a7, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x0, 0x3, 0x10}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000000c0)=[0x20, 0x38]}, 0x3f}}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @flat={0x73682a85, 0x100, r2, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x0, 0x0, 0x31}], &(0x7f0000000380)=[0x68, 0x38, 0x0, 0x28, 0x28, 0x30, 0x38, 0x20]}}, @register_looper, @acquire_done={0x40106309, r2, 0x3}, @free_buffer={0x40086303, r2}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ptr={0x70742a85, 0x1, &(0x7f0000000400), 0x0, 0x0, 0x2b}, @flat={0x736a2a85, 0x0, r2, 0x3}], &(0x7f0000000500)=[0x30, 0x60, 0x48, 0x28, 0x20]}}, @enter_looper, @enter_looper], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 573.871525] binder: 27486:27489 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.905531] binder: 27537:27538 got transaction to invalid handle [ 573.912926] binder: 27537:27538 transaction failed 29201/-22, size 0-0 line 3012 [ 573.921256] binder: 27537:27538 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 573.929409] binder: 27532:27539 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.931298] binder: 27537:27540 got transaction to invalid handle [ 573.931309] binder: 27537:27540 transaction failed 29201/-22, size 0-0 line 3012 [ 573.931400] binder: 27537:27538 BC_ACQUIRE_DONE u0000000000000000 no match [ 574.000396] binder: 27542:27545 transaction failed 29189/-22, size 24-8 line 3012 [ 574.008712] binder: 27542:27545 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:30 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 574.265565] binder: 27547:27549 transaction failed 29189/-22, size 24-8 line 3012 [ 574.275447] binder: 27547:27549 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:30 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 574.334924] binder: 27506:27550 BC_ACQUIRE_DONE u0000000000000000 no match [ 574.334930] binder: 27506:27508 transaction failed 29189/-22, size 24-8 line 3012 [ 574.413414] binder: 27552:27554 transaction failed 29189/-22, size 24-8 line 3012 [ 574.431592] binder: 27552:27554 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x103, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) dup2(r1, r0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'yam0\x00', 0x800}) [ 574.523938] binder: 27517:27555 transaction failed 29189/-22, size 24-8 line 3012 [ 574.533082] binder: 27517:27555 BC_ACQUIRE_DONE u0000000000000000 no match [ 574.606370] binder: 27559:27561 transaction failed 29189/-22, size 24-8 line 3012 [ 574.614842] binder: 27559:27561 BC_ACQUIRE_DONE u0000000000000000 no match [ 574.615186] binder: 27527:27541 transaction failed 29189/-22, size 24-8 line 3012 03:33:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) syncfs(r1) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="4a400ae10a637100"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000180)={0x2007}) 03:33:31 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x20014, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xfffffffffffffcc3, 0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x11f, 0x0, &(0x7f00000005c0)}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="88030000008000000c000100ffffffffffff0000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000480)={0x34, 0x0, &(0x7f0000000400)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 574.676526] binder: 27532:27564 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)="faac40a0a70cae6e2b10640ea98dee7d5f2c494a363a7620dd42cdbb960f8c433c9cfad5e4e29d06f25207323f08cf0c6bf2002d980b1c5ff27c4371e062f0b9cfda1f41a46c09c9c20e9457b879166d5a6e396b0a844562db1e5cbbd7327f896937b6ceffcb6b8161453d034ec66b708a5e765facec9e690833f182d14cca7ec05bcf31eddf658f05f3cda5af343b3369e38f3879f7bca04378c12683d7f26afb9d04f4910845772b56138692f2019840db6f635ee73fdaa68e640dde235e3b8e97361af12dc3da7e6a7f5cb8b4b61617a01547fe71646636fc187e046be9b1bab0afc807bc3253b06e") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00ee160000000100"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 574.738441] binder: 27565:27570 transaction failed 29189/-22, size 24-8 line 3012 [ 574.746834] binder: 27565:27570 BC_ACQUIRE_DONE u0000000000000000 no match [ 574.754963] binder: 27542:27571 transaction failed 29189/-22, size 24-8 line 3012 [ 574.757464] binder: 27568:27572 transaction failed 29189/-22, size 24-8 line 3012 [ 574.770710] binder: 27542:27545 BC_ACQUIRE_DONE u0000000000000000 no match [ 574.848403] binder: 27574:27576 transaction failed 29189/-22, size 24-8 line 3012 [ 574.856691] binder: 27574:27576 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:31 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 575.079598] binder: 27578:27580 transaction failed 29189/-22, size 24-8 line 3012 [ 575.087848] binder: 27578:27580 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:31 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180000000000000008000000000000003877194ce2c591a4eda464bb2c330094468e84fff3bd3174c7644cbecdc85375686c85ca8334c7b9b30f383e3cfda81ac88937fa00ee314fa47f3a91c77afc6239e62e43771802038b8f319995bffe9fb2385e5b05a890d46e58273d48a49a540d7bf341174197e7addd8b5c6417599ca532267c98b486c12ce95a0edbe50a614b39a410df8a26e75942d1eb7863a0b57cc7d39aa9e19e02681387eee5e68a2bf9ba96f19dbb79e8a9704b9e5d23fe40a2576f8fdb376a0324ded95d44324f10220eb028", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="cc8241bc8d8d723c9c7922bbf0257b11b1ebb6ba8f2fae9fe2620ea2257981d1527c1236af3157818083e90ca517559e717732bc5900dcdf5e0da453af6795d7187f37e8df5f6cd4add32136b88c4c71b1603f4ddc5652c50ff339b1d4e0e384708e99392a311272f84ca8981c79b5a0aa09952f433f311d0a80bb805947be498fccf69c73e53242ecb4f85a56b878b97bfce13542acd81b49455bcea7dd707b686ccd35ac0844ab05667eff4d86373e4ef6add0a912cc070d439c93f676843d783ae5f6b1de7bf9bc463acb302e43b9f6454baa75dbccbf3af2f0b0934841d7", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 575.168661] binder: 27552:27554 transaction failed 29189/-22, size 24-8 line 3012 [ 575.241334] binder: 27583:27585 transaction failed 29189/-22, size 24-8 line 3012 [ 575.249465] binder: 27583:27585 unknown command -1136557364 [ 575.255627] binder: 27583:27585 ioctl c0306201 200003c0 returned -22 03:33:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000480)="64cefc2ff2c8481cad9aa0c609c397f16e0269cb53c85ee42fe1e40366b47add69346d4dbdc1fb202c6ba60912d2f4f5e970eac94a9bc9e114feae5b16cad2d45a7c93a8518533553eba18f3059710612b07828c84f019f6fec0ffb16cb230fd9f0c5f3051d2aa34b1ff10e7be16f068101e809de4f77e39704c5b07b4fe97e44b211fc408c976db64df8bac47e9ce4419b759fd8f3766"}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 575.360790] binder: 27559:27586 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.360797] binder: 27559:27561 transaction failed 29189/-22, size 24-8 line 3012 [ 575.437385] binder: 27588:27590 transaction failed 29189/-22, size 24-8 line 3012 [ 575.445700] binder: 27588:27590 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:31 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x3, 0x80000000, 0x10000, 0x2, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c630000760d1be5e915ad22cc2a5dda9170d64bf3d07c009ea79f323e58bce2dfd8373fa4a4a05c0161dc5bc1d51252f204a13eeac6e696b671ec792c6a8f29ab7285f5e1598d4a1391c66f1637314cdf47d8ee1a848afeb8cc30eb2b40a9"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00d000ee96fd4501"], 0x0, 0x0, &(0x7f0000000180)}) 03:33:31 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000b40)='./file0/file0\x00', &(0x7f0000000b80)='bpf\x00', 0x0, &(0x7f0000000bc0)=ANY=[]) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000180)='bpf\x00', 0x2001001, &(0x7f0000000300)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x5890, &(0x7f0000000280)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x4002, 0x0) mount$bpf(0x0, &(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)='bpf\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='mode=00000000000000000000100,smackfsflOor=\',\x00']) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000240)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000600)=""/180, 0xb4}], 0x3, &(0x7f00000007c0)=""/180, 0xb4, 0x8000}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x1, 0x3, &(0x7f00000008c0)=[{&(0x7f0000000d40)="5743d12eb1aa0f2fd7c36f2397006e9ca43c532160feef64d40e348b506d70dbe49aedb2502b3d3489502043131c91f9c0eb705a93201ac0f88ec76d834709cc019bece8e91106edf88a648209e5b29fe7a9a24bbf7af2724783a8c4676ec03385c9789a947cbb80b899ba8700db16869079f4f17965b13f09689eab3efcd15fe0f29d476a588ec82766b164ef2837d1f9c9f9980f169aaa2c85c41eae33a90b9f8219926947bd2793526cae16ee2b426b5e65c4", 0xb4, 0x3cb2a7a3}, {0x0, 0x0, 0x14000000000}, {&(0x7f0000000a40)="daaa70449fdfb46abd06af0e40fd9650a8479b005707d6130129174786b713236ecfc90ac4ab15f0b61d3c275bc82f98e391044ea5cb6188581a1d8eb06adbfa43595c24db512828ff94a20cfb3ab966653098612b9b59ec7fbadf71767f32e76c79154f094ef4db87e13f4b10eecd15c130656b734cb38b8ae8a10ac3237e3fd707a6f468f8d3ea6bcc2818", 0x8c, 0x40}]) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) getsockname$packet(r0, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000bc0)=0xfffffffffffffcdd) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000480)={@local, r3}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000006c0)={0x10, 0x0, {0x57, 0x1000, 0x0, {0x0, 0xffff}, {0x0, 0x4}, @rumble={0x1000, 0x1800}}, {0x55, 0x6, 0x9, {0x401}, {0x6, 0x1}, @ramp={0x6, 0x7, {0xcab, 0x4, 0x8, 0xfffffffffffffffa}}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c639eba"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 575.489724] binder: 27565:27570 transaction failed 29189/-22, size 24-8 line 3012 [ 575.489928] binder: 27565:27591 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.520229] binder: 27568:27572 transaction failed 29189/-22, size 24-8 line 3012 [ 575.580441] binder: 27594:27600 transaction failed 29189/-22, size 24-8 line 3012 [ 575.589042] binder: 27594:27600 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.597779] binder: 27574:27603 transaction failed 29189/-22, size 24-8 line 3012 [ 575.606039] binder: 27574:27576 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x119, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 575.635499] binder: 27598:27604 unknown command -1164025076 [ 575.641408] binder: 27598:27604 ioctl c0306201 20000140 returned -22 [ 575.651471] binder: 27598:27604 transaction failed 29189/-22, size 24-8 line 3012 [ 575.661563] binder: 27605:27606 unknown command 0 [ 575.661573] binder: 27605:27606 ioctl c0306201 20000140 returned -22 03:33:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x48, 0x0]}, 0x6}}], 0xfffffffffffffdd1, 0x1009000000000000, &(0x7f0000000040)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 575.661751] binder: 27605:27606 unknown command 0 [ 575.661765] binder: 27605:27606 ioctl c0306201 20000040 returned -22 [ 575.662011] binder: 27605:27606 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.662634] binder: 27605:27606 unknown command 0 [ 575.662644] binder: 27605:27606 ioctl c0306201 20000140 returned -22 [ 575.662669] binder: 27605:27608 unknown command 0 [ 575.662678] binder: 27605:27608 ioctl c0306201 20000040 returned -22 [ 575.662865] binder: 27605:27606 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.704491] binder: 27598:27612 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.715178] binder: 27611:27613 got transaction to invalid handle [ 575.715189] binder: 27611:27613 transaction failed 29201/-22, size 24-16 line 3012 [ 575.715213] binder: 27611:27613 ioctl c0306201 20000140 returned -14 [ 575.763476] binder: 27611:27614 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:32 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000b80)=0xe8) getgroups(0x2, &(0x7f0000000bc0)=[0xee01, 0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000c00)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0}, &(0x7f0000000c80)=0xc) r9 = getgid() r10 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000cc0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000dc0)=0xe8) r12 = getegid() sendmmsg$unix(r0, &(0x7f0000000ec0)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000040)="e9ab53c4bd2c62f72919215c12888e87f1", 0x11}, {&(0x7f0000000480)="1dd8008b54d8a82bab7892d8934d8690d456a8bbc433f966d675c340d8550029ed88a9b6497e4e785ac93697ff1052b63c256fca9b76b0ee7fcdf3ad0f86e10fda241edd24a6b0602905d1d012e741ead5cb5647287f8ed6a3f72171db7621b809d692e5035223089108e8db742576ff6dc719285a4faf721ade04021a968633cbca1b177b230560aaa4984059db9af38e5438405300685e399353702a24a72f60f3276031913ae918ad664b5a0f219207444569e4940f0ccf4ea61464bfd6e7a15b0d05afdc4f104db7b07cfcffb4f558ce910976715b1f409b4f5f73cd25", 0xdf}, {&(0x7f0000000280)="4bd8a995fb5683ebf68d050c6cad759b3dff8aa211922b48fc3ba52bf2e635431ce51be9a2174699f9b740039d565742d6c1fac5dd60c0c6785935524a1f497b8adce18ae6cf8e44834142943a0431f2f2a358716e1be0643bcea72688a374553410d95bcdf67d0bcf48421d62a21b519657f0", 0x73}, {&(0x7f0000000580)="897bd585275e4ca584bda8113bc5a2e0b5e66c6e0cc511989f83e20ad9a113d0eb0bd0ed87a9c1bb580fe1ee8b7d8f5d785d5ffc6afa6ec3b4a2370ca3e81900ff426ba97f15282855f416359ccf0c60fc8eb9c32bfabe0178e40b43d2626b4156c67d2ea1bc158d73d162c5943eb34c26", 0x71}, {&(0x7f0000000600)="cbe4fb0eaa917bca38a9358970e23b7bc5816f171eda4bb27a1f612f969edd09ba18b6d00546a5d5c738e7d2af045740d8565e748f629d794a936a0bc55252ea6cfd728c7e23b635d36a476ce0dd18b28bce825a7a8c2d76d8390e8b661989503e32b529dac462d11c9678", 0x6b}, {&(0x7f00000006c0)="28999d520d8f507eafa1178fcf61578375257afaeb45cfd74d5e29fab7e07e0b93c1c8c8fc807b1cddea3098fcc6ea1b5469d2aeef21fc2d786d44352b7855782744c30ceeff2148392c8828196e9921a3d0fed960fee1c7d97c643c6b0f2b6b0a6f834c0948e8d37f5bb253484205d0137e91c1fffef4ac3c3eb42aa5b0571e00943a4db2c8d70bca0f95f66bfd4a3fa2f1", 0x92}], 0x6, 0x0, 0x0, 0x4044010}, {&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000880)="6c571a9fb2e27d9bc2e90e072d624717c42da7d7660121ff801550b14ffae966b8d4cb810d599f395a6c66b7a942e413e78b286611227a9523905a14b240c3db290b95a4e733584f26b578fc1e63f0709c259d0b6717ecfbfcf61f2ea50900832a8e7d3a432921fba953bf1a506ce12189ebbd6948cb12fe7978c3d4c4661e53c351ddd7af0df9bc8d627589bc1dce389c870a5af72a05babdd8ba6ad9fe1120f113ec929df743fad2d5ef4af6867cd55316d7b3d83232e91bfbb44c8ce6ef259a7e2a702bcdc5d2beda553bdcdd6683bc9cbd7804560b5b96c48c0c5a4ce5524bb916a3b0a9c656081a2c299b15d31493377b853aa4a2282b8b271da8", 0xfd}, {&(0x7f0000000980)="690fd24cdf073f082198b2a1aa7f88c9f2828cb66ebf427a2a7bad3a02eb63c0fccf707939d24377c6fd43f16e65885c371b9a60c0c0a6c6eaedd7319ba5518fa46356610f46acea775e0c1f962157e1b574bd0fc34962eeed04bf3314d534f6b741fb64434fea9b005336f785047d90e5c707c7cdae34e74dfc3d2b18c2f95f443f2191d38f37f3dc912a4fa247c198dff1c7b611be995fd516b3b3bb7146a8fcff5826f06f3b054ce67257bde68d629fa1b404226d599a7d48fa6945e2cc4cada17401ad9012b0f4afbd7c", 0xcc}], 0x2, &(0x7f0000000e00)=[@rights={0x30, 0x1, 0x1, [r3, r0, r1, r3, r0, r2, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x90, 0x4}], 0x2, 0x0) r13 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000f40)="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") ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:32 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readahead(r0, 0x0, 0x80000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d630000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) read(r0, &(0x7f00000006c0)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) memfd_create(&(0x7f0000000040)='/dev/binder#\x00', 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) setxattr$security_smack_transmute(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x2) [ 575.811938] binder: 27598:27604 transaction failed 29189/-22, size 24-8 line 3012 [ 575.816074] binder: 27598:27599 unknown command -1164025076 [ 575.816115] binder: 27598:27599 ioctl c0306201 20000140 returned -22 [ 575.832078] binder_alloc: binder_alloc_mmap_handler: 27578 20001000-20004000 already mapped failed -16 [ 575.832691] binder: 27578:27619 transaction failed 29189/-22, size 24-8 line 3012 [ 575.851407] binder: 27598:27604 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.963672] binder: 27621:27624 transaction failed 29189/-22, size 24-8 line 3012 [ 575.971905] binder: 27621:27624 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.996491] binder: 27583:27585 transaction failed 29189/-22, size 24-8 line 3012 [ 576.001854] binder: 27627:27628 unknown command 25373 03:33:32 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 576.001865] binder: 27627:27628 ioctl c0306201 20000140 returned -22 [ 576.001931] binder: 27627:27628 transaction failed 29189/-22, size 24-8 line 3012 [ 576.002137] binder: 27627:27628 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.003110] binder: 27627:27628 unknown command 25373 [ 576.003118] binder: 27627:27628 ioctl c0306201 20000140 returned -22 03:33:32 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_pts(r0, 0x214001) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) setpriority(0x1, r2, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 576.003148] binder: 27627:27629 transaction failed 29189/-22, size 24-8 line 3012 [ 576.003320] binder: 27627:27629 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.004370] binder: 27583:27625 unknown command -1136557364 [ 576.004380] binder: 27583:27625 ioctl c0306201 200003c0 returned -22 [ 576.088478] binder: 27631:27633 transaction failed 29189/-22, size 24-8 line 3012 [ 576.096933] binder: 27631:27633 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.152355] binder: 27634:27637 transaction failed 29189/-22, size 24-8 line 3012 [ 576.161464] binder: 27634:27637 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.192138] binder: 27588:27638 transaction failed 29189/-22, size 24-8 line 3012 03:33:32 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 576.199954] binder: 27588:27638 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.268567] binder: 27639:27642 transaction failed 29189/-22, size 24-8 line 3012 [ 576.276857] binder: 27639:27642 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x78, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xefc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffe1a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x35}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000001"], 0x0, 0x0, &(0x7f0000000180)}) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) [ 576.326037] binder: 27594:27643 transaction failed 29189/-22, size 24-8 line 3012 [ 576.334014] binder: 27594:27643 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.404417] binder: 27645:27647 transaction failed 29189/-22, size 24-8 line 3012 [ 576.417847] binder: 27645:27647 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0cfa6078"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 576.503996] binder: 27611:27649 transaction failed 29189/-22, size 24-8 line 3012 [ 576.504000] binder: 27611:27614 got transaction to invalid handle [ 576.504013] binder: 27611:27614 transaction failed 29201/-22, size 24-16 line 3012 [ 576.504032] binder: 27611:27614 ioctl c0306201 20000140 returned -14 [ 576.549566] binder: 27650:27652 unknown command 2019621388 [ 576.555437] binder: 27650:27652 ioctl c0306201 20000140 returned -22 [ 576.563569] binder: 27650:27652 transaction failed 29189/-22, size 24-8 line 3012 [ 576.572142] binder: 27650:27652 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.580858] binder: 27650:27653 unknown command 2019621388 [ 576.580865] binder: 27650:27654 transaction failed 29189/-22, size 24-8 line 3012 [ 576.580959] binder: 27650:27652 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000001c0)="595449e9ab75252f83880cbe369dc1576a5bd8a7f3bb3943bb94c1401263c87973196e5fdbc52664f7461a35326fe9add22b452686673dcde8", 0x39}, {&(0x7f0000000740)="d1ec2a19358bedc2891295e1f785f49795239564b609db443fac05ceca9a166db81aaac3ad83fa4b42b0c5c46720a7b3dfd2eb1975c65ace5482f9fce450bc0eb0819632c1544e1b43e0433a87fb4013c4cf241605c8e93278c31eea33a447e03c10c3f28ce8", 0x66}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="87f20d42b8f5139695ad8b10d5a88af532c987e397d53170e5ef3e169721d7b5e6f521d97228fd27f1c36e6c42c0f4d24fcab22f9babd29c4112aeded9adb6106d3e8e6201ab24360474448220a0c1b88b30f243b67889d4ae954c40f6dcb586874d85a8eec2039324a7ade20e99587354d30d361554429541d7eabed8de7e1e298e4f163aae3b468c5abd2bc86b61c0e6fc7882ce79f438c837ac01844849ed45e0a93b7fcb53e75ddc791e4feb3928b8049ef4092d54e25eac48a0f7bd439e12eb1b50adb33a3afd51ef3e32447731ae11cdeea77d781770d4e0efeedd190f", 0xe0}, {&(0x7f00000018c0)="e117ebc0b300237802de8c3fe26e2722a8342c43c79d299b319112e105e6d57d7a8fbb4fd23df40d6a287289149c08f2b4953bde47d09f854cef9480d8e12bfbc157a1a6fb45287cb32028e06ad49124b223e662e8f710fae464e57dd0e26bd59d84d96613d96dc65e55c607858393d144858593c7eb31878093519cbb2e11f0881d745dc2551063520c2e2973cb6d81fcfb39292ccd1129615a09397de231b55bd4274458e149c3ec0aeb122ba08ddf9dbe6749eda1ed8f7d1b1e849d6e19fe9492cbd904cb270f56712346261fe6adb74a18f54e565cded21fac7c1e7ed6e3562e00ca5414f4912ad46b991e428ba1685fa271593409", 0xf7}, {&(0x7f00000019c0)="70c5e7311a5f18e678ebcef9bd6a951ae31ed28368410ae27b22f03999543b9f25b59d5dcb3525e96981ae53d4c620d2fe92857c171937029b80eb1a9573ec94ee046f4f53c18d8910ef7ee0f4fd8c681f927dff0595", 0x56}], 0x6, 0x0, 0x0, 0x50}, 0x80) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x124, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffffffe0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000000000}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb2f6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xfbae}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2c}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x449b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 576.601156] binder: 27650:27653 ioctl c0306201 20000140 returned -22 [ 576.675348] binder: 27656:27658 transaction failed 29189/-22, size 24-8 line 3012 [ 576.683457] binder: 27656:27658 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.712588] binder: 27621:27659 transaction failed 29189/-22, size 24-8 line 3012 03:33:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffdeb, 0x0, &(0x7f0000000180), 0x1, 0x1009000000000000, &(0x7f00000002c0)="109f1291c6800a6c8280d000d8352ffa0a0fa7069bb23d8a23f8b021930651c025bcb9babf79dd60045c75107550554fa301"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x4, 0x1, 0x6}, 0x9}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="fffffffffffffffc"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00008da000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000cd5000/0x4000)=nil) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x50102, 0x0) munlockall() creat(&(0x7f0000000000)='./file0\x00', 0x0) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 576.721331] binder: 27621:27624 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.755903] binder: 27661:27662 ioctl c0306201 200001c0 returned -11 [ 576.765369] binder: 27661:27662 transaction failed 29189/-22, size 24-8 line 3012 03:33:33 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xa8002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 576.841797] binder: 27631:27663 transaction failed 29189/-22, size 24-8 line 3012 [ 576.850106] binder: 27631:27633 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:33 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB], 0x0, 0x0, &(0x7f0000000180)}) [ 576.911679] binder: 27634:27637 transaction failed 29189/-22, size 24-8 line 3012 [ 576.960265] binder: 27665:27671 transaction failed 29189/-22, size 24-8 line 3012 [ 576.974156] binder: 27665:27671 BC_ACQUIRE_DONE u0000000000000000 no match [ 576.997813] binder: 27661:27662 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@dev={[], 0x14}]}) socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x0, 0xf90e, 0x4, 0x7, 0x4, [{0x4, 0x1, 0x40, 0x0, 0x0, 0x400}, {0x0, 0x6, 0x8, 0x0, 0x0, 0x584}, {0x200, 0x1, 0x5, 0x0, 0x0, 0x408}, {0x0, 0x1, 0x9, 0x0, 0x0, 0x200}]}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x8c, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x843e}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:33 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x200000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000180)}) [ 577.023615] binder: 27639:27642 transaction failed 29189/-22, size 24-8 line 3012 [ 577.031473] binder: 27639:27675 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.039015] binder: 27672:27676 transaction failed 29189/-22, size 24-8 line 3012 [ 577.039135] binder: 27672:27676 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.115122] binder: 27678:27683 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.123327] binder: 27681:27685 transaction failed 29189/-22, size 24-8 line 3012 03:33:33 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 577.159712] binder: 27645:27647 transaction failed 29189/-22, size 24-8 line 3012 [ 577.168172] binder: 27645:27647 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.244331] binder: 27690:27692 transaction failed 29189/-22, size 24-8 line 3012 [ 577.252511] binder: 27690:27692 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="851c287477415c281e46ce852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 577.424863] binder: 27656:27693 transaction failed 29189/-22, size 24-8 line 3012 [ 577.432851] binder: 27656:27693 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.509329] binder: 27697:27699 transaction failed 29189/-22, size 24-8 line 3012 [ 577.517767] binder: 27697:27699 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000180)=0xc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$TIOCCONS(r0, 0x541d) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 577.693005] binder: 27665:27700 transaction failed 29189/-22, size 24-8 line 3012 [ 577.700887] binder: 27665:27700 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.733320] binder: 27702:27703 ioctl c0306201 20000140 returned -11 [ 577.740510] binder: 27702:27703 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 577.748707] binder: 27702:27703 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.757377] binder: 27702:27704 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 577.765829] binder: 27702:27704 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.773756] binder: 27672:27705 transaction failed 29189/-22, size 24-8 line 3012 03:33:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffea2, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)=[0x0, 0x28, 0x0, 0x28, 0x58, 0x18]}, 0x3f}}, @release={0x40046306, 0x2}], 0xfffffffffffffef6, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) linkat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1000) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:33:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESDEC=r2]], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62731f425fea", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="8b03bf3a00002e008ffa5d37e91500f4caa32aed6ef0913c1ae868d2695718c432e5c80410b3c591428d2c18930008d5d29baf41f94275a45056b751a3f50400bf81965acbc49e1925e162f8afbc28f61b88a743a3f61777a2a1f222aefd72a5f9ae63d4772ac7463b5df21c8a0613522a1c6bce5e2ec12d33b2c153a15727c6bd930151b90a0a403fb12624219d1c51772c82846ebbb35403b3228b10c9e4a4c002edc206a6ad5029b46467d272985b2896f69919b550539ccfb1dc8209a89136b76cff2faa8a7671720da889a146726127e8831a002be492cc4adb"], 0x0, 0x0, &(0x7f0000000180)}) [ 577.774363] binder: 27672:27706 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.822959] binder: 27711:27712 unknown command 536871296 [ 577.831155] binder: 27711:27712 ioctl c0306201 200000c0 returned -22 [ 577.838075] binder: 27711:27712 transaction failed 29189/-22, size 24-8 line 3012 [ 577.846429] binder: 27707:27713 transaction failed 29189/-22, size 24-8 line 3012 [ 577.850690] binder: 27707:27713 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.858324] binder_alloc: binder_alloc_mmap_handler: 27678 20001000-20004000 already mapped failed -16 03:33:34 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)=0x400000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:34 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pread64(r0, &(0x7f0000000180)=""/85, 0x55, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000a0f8231c80e27ba44e6d926ec8bc00000000000000000000000000000000000000000000000000000000001800", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09081040", @ANYRES64=0x0, @ANYBLOB="0000000000dea319130e15a65e650833e39028458fb9c924320b6f8dfc01c6aaef16de38cad5afb9ddb6564e12dd6b7c58345686036c1189cb62ddede3f312368198ef255e487615c7c32dedf15ad97b57137f04198fdbb4f2442ff66fcc8a067da8c1327080249000a274aeaa902052f3f5c5c538c25fc4d06bf4157c455bd8e2b9b201"], 0x0, 0x0, &(0x7f0000000180)}) [ 577.872895] binder: 27711:27712 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.879466] binder: 27678:27714 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.881319] binder: 27681:27716 transaction failed 29189/-22, size 24-8 line 3012 [ 577.898035] binder: 27711:27717 unknown command 536871296 [ 577.915931] binder: 27711:27717 ioctl c0306201 200000c0 returned -22 03:33:34 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x6, &(0x7f00000016c0)=[{&(0x7f0000000280)="3bfc4e3463c7ba6e5ffe5e329d5c044054aacf612181b31ee1eb1159c6996438efcab63188e2a55f2afe9187d9acd9f62d3ceb1845bd970d45c32915c42907e993cd02f8c1fcfc21278cfd28c47dd2504163eadd79414891483d8148f9381e2785ac91acce6f38257169b5e6b791e88db226c0", 0x73, 0x9}, {&(0x7f0000000480)="1c3d5cac83940bd362a13b7f998c283b455466d54fd54a541ee5767689e0ac0139c357a3ee1df5b83384ff087e534bbedb0547c9a63c58d99aca57d6f505dc0ea45e89ca4b5561b9e22609bf2531d3f96ad67a03160efa27be465f8aee06298c030c7e831eb92ee3822e", 0x6a, 0x401}, {&(0x7f00000001c0)="8e1fde3401e12f4e5d7025706705164a048326a9bedb0d96cab6c81a26c051f4657f69d6c722a7ad755b20eef8c001e59be59d746dae4c16", 0x38, 0x7}, {&(0x7f0000000500)="43dc99590393f5a3a07974e279126763f130c59d291304f028f983284fd2887d139232ddbb2f7c44f10371a0717d434fccb998d80fc3f944a83edf61b729a07af8b56115430e53d54f", 0x49, 0x3}, {&(0x7f0000000580)="95b5048e872cb004b4af0578bcd00b4604a3e8e087275d69b58daab5f7f6997316940802969ef5750c3c331ce2feba45cd98e2a0431ad9d1a05080d356ffe1671611ad4bfc5ac65cd0fe84452e90720c31fc62a67df7b07c40be0f78cda2aa475884aba850b293be76091564789c9aac9520ca911a55cc064845fddf70d8556e88a8b9bc43d934889d37bf21cfd43ed04d7079afa82d2c97c0f05fa34412e762ac12b6d97032533632762c6fc1ff59fca1fad35563ecfdcbcbce1d06f8d76c667fcca4d2ad293cc821e3d85e46d04274d0af9559559d100d", 0xd8, 0x83}, {&(0x7f00000006c0)="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", 0x1000, 0x59}], 0x2100020, &(0x7f0000001800)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@noquota='noquota'}, {@journal_async_commit='journal_async_commit'}, {@data_journal='data=journal'}, {@nogrpid='nogrpid'}, {@noacl='noacl'}, {@barrier_val={'barrier', 0x3d, 0x1000000000000000}}], [{@smackfsdef={'smackfsdef', 0x3d, '\''}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}, {@appraise='appraise'}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 577.923474] binder: 27711:27712 transaction failed 29189/-22, size 24-8 line 3012 [ 577.931668] binder: 27711:27717 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.978363] binder: 27720:27727 ioctl 40086610 20000040 returned -22 [ 577.985723] binder_alloc: 27718: binder_alloc_buf, no vma [ 577.990452] binder: 27718:27728 got transaction to invalid handle [ 577.990469] binder: 27718:27728 transaction failed 29201/-22, size 0-6755399441055744 line 3012 [ 577.990859] binder: 27718:27728 unknown command 1074792457 [ 577.990868] binder: 27718:27728 ioctl c0306201 200003c0 returned -22 [ 578.010333] binder: 27690:27729 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.010712] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.035594] binder_alloc: 27718: binder_alloc_buf, no vma [ 578.035611] binder: 27720:27727 transaction failed 29189/-3, size 24-8 line 3135 [ 578.035700] binder: 27720:27733 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.035707] binder: 27720:27733 unknown command 0 [ 578.035716] binder: 27720:27733 ioctl c0306201 200003c0 returned -22 [ 578.069186] binder: 27690:27692 transaction failed 29189/-3, size 24-8 line 3135 03:33:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) accept$unix(r0, &(0x7f0000000180), &(0x7f0000000280)=0x6e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="b72c5efbed7cac5f1312768a94f0387e240297656adde2edcbb2b7adab14d5c3fe2a72cc688f91"], 0x0, 0x0, &(0x7f0000000180)}) 03:33:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="5812608d61a3000400009d0596e8e690c4fb61e2aa9db79f7ccf4d69bef027f0f86940c95ab412c719b23c0ad13afb43b5b357c218578b9bdff26af0d63d30a1f057b71e01", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) [ 578.069190] binder_alloc: 27718: binder_alloc_buf, no vma [ 578.069226] binder: 27725:27730 transaction failed 29189/-3, size 24-8 line 3135 [ 578.076313] binder: 27725:27730 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.097919] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.187421] binder_alloc: 27718: binder_alloc_buf, no vma [ 578.193181] binder: 27740:27742 transaction failed 29189/-3, size 24-8 line 3135 [ 578.201489] binder: 27740:27742 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) socketpair$inet(0x2, 0xa, 0xc9, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f00000001c0)={@local, @multicast1, @broadcast}, &(0x7f0000000280)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) [ 578.260982] binder_alloc: 27718: binder_alloc_buf, no vma [ 578.266683] binder: 27697:27743 transaction failed 29189/-3, size 24-8 line 3135 [ 578.274814] binder: 27697:27699 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.347489] binder_alloc: 27718: binder_alloc_buf, no vma [ 578.353377] binder: 27745:27747 transaction failed 29189/-3, size 24-8 line 3135 [ 578.407418] binder: 27745:27748 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:34 executing program 4: r0 = socket$inet(0x2, 0x5, 0x6) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x9, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) getuid() r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000280)={0x0, 0x95, {0x57, 0xe1, 0x81, {0x2, 0x3}, {0x7fffffff, 0x4}, @ramp={0x0, 0xf376, {0xe1c4, 0x7fff, 0x0, 0x8}}}, {0x56, 0x4f6ab7da, 0x9, {0xe71, 0x3}, {0x9530}, @const={0x100000001, {0xfffffffffffff001, 0xffffffff, 0x101, 0x401}}}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 578.599718] binder_alloc: 27718: binder_alloc_buf, no vma [ 578.599876] binder: 27707:27749 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.612706] binder: 27707:27713 transaction failed 29189/-3, size 24-8 line 3135 03:33:35 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 578.697402] binder_alloc: 27718: binder_alloc_buf, no vma [ 578.703192] binder: 27751:27756 transaction failed 29189/-3, size 24-8 line 3135 [ 578.711605] binder: 27751:27756 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.717692] binder: 27720:27733 ioctl 40086610 20000040 returned -22 [ 578.717835] binder: 27720:27733 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.717906] binder_alloc: 27718: binder_alloc_buf, no vma 03:33:35 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 578.717933] binder: 27720:27727 transaction failed 29189/-3, size 24-8 line 3135 [ 578.740968] binder: BINDER_SET_CONTEXT_MGR already set [ 578.740980] binder: 27718:27728 ioctl 40046207 0 returned -16 [ 578.741997] binder: 27718:27757 got transaction to invalid handle [ 578.742041] binder: 27718:27757 transaction failed 29201/-22, size 0-6755399441055744 line 3012 [ 578.742516] binder: 27758:27759 ioctl 540c 0 returned -22 [ 578.742620] binder: 27718:27760 unknown command 1074792457 [ 578.742630] binder: 27718:27760 ioctl c0306201 200003c0 returned -22 [ 578.791563] binder: 27758:27769 transaction failed 29189/-22, size 24-8 line 3012 [ 578.791855] binder: 27758:27769 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.827751] binder: 27765:27770 transaction failed 29189/-22, size 24-8 line 3012 [ 578.827943] binder: 27765:27770 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:35 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000040)={0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5a9, 0xef, 0x8, 0x80000000, 0x7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000180)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f00000001c0)={&(0x7f0000000480)=""/170, 0xaa, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r2, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 578.828228] binder: 27725:27730 transaction failed 29189/-22, size 24-8 line 3012 [ 578.830427] binder: 27725:27771 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.830435] binder: 27725:27771 unknown command 0 [ 578.830445] binder: 27725:27771 ioctl c0306201 200003c0 returned -22 03:33:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c034d00"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040ae68ad8021f5f099169dd7dddc6339b0005ea0f440d74353e867c34e328d010558c9ff", @ANYRES64=0x0, @ANYBLOB="000000000000000089f103e720f2481ba72ff1940cfbf5c18beb6403877dfd2823ad601b9658b6726eb001ae5fed6a5a56e0e96d91a507000000000000006bc77fa20ac310751084d8a2e7615b34862699d45f36d83d7289fd00b08ed2222cc2f1d010eb8c054cbe997bdb79af27a09168b3ce9ecf694a02ad0e377de1515429e6e232040000005b5dc6c634e290efdc4288f96eaedefa16a9c9abb13c46b664d8c03ba04796beb68984d744767bdabd1e895913830514ff9c74f0861e8577ad8d26488753e653133ac5ffeb1d11c89895927daa8891"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) [ 578.940462] binder: 27740:27775 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.940534] binder: 27740:27742 transaction failed 29189/-22, size 24-8 line 3012 [ 578.962907] binder: 27773:27776 transaction failed 29189/-22, size 24-8 line 3012 [ 578.984065] binder: 27773:27776 ioctl 40086610 20000180 returned -22 [ 578.993133] binder: 27773:27776 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.001448] binder: 27778:27779 unknown command 5047052 [ 579.006952] binder: 27778:27779 ioctl c0306201 20000140 returned -22 [ 579.014904] binder: 27778:27779 transaction failed 29189/-22, size 24-8 line 3012 [ 579.023390] binder: 27778:27779 BC_ACQUIRE_DONE u99f0f52180ad68ae no match [ 579.031881] binder: 27778:27780 unknown command 5047052 03:33:35 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 579.037354] binder: 27778:27780 ioctl c0306201 20000140 returned -22 [ 579.044372] binder: 27778:27779 transaction failed 29189/-22, size 24-8 line 3012 [ 579.052353] binder: 27778:27780 BC_ACQUIRE_DONE u99f0f52180ad68ae no match [ 579.101809] binder: 27745:27748 transaction failed 29189/-22, size 24-8 line 3012 [ 579.110654] binder: 27745:27748 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.123361] binder: 27782:27785 transaction failed 29189/-22, size 24-8 line 3012 [ 579.131524] binder: 27782:27785 unknown command 0 [ 579.136406] binder: 27782:27785 ioctl c0306201 200003c0 returned -22 03:33:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 579.264587] binder: 27787:27789 transaction failed 29189/-22, size 24-8 line 3012 [ 579.272786] binder: 27787:27789 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:35 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c631900"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) fsync(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00000000000000009a02bcf31883512ae3653706690cdb665691a8acec2ef8a322190f06a04c4a386c49fc781f61115ebb5c3ff1c9257b1124e7237770a63d89b5766b0c315960e6dfc2c98e68a387f3c59d640294f73a72e164e25bd4f6bbe554d60d54a6074dcf44b9e94945e730fcd4c72d369d2c64ee0b39061d21adfffbbbcd2128c2b2972aad88eb3627088d79823b43d2de89436cd0cbb4dc00000000c7802cc7e398f85152c9e492073e07deb8629baa10bc0922aa229a887db66c093ca0eca1491548fe4b9c736c30ca4c99982917c8083f5e5cfb76d7e0ec48ca32f76f92039aa9824bea7eb7e1dd04af782662550dd3e59899165710d4b4f8b38b4b2505c49b833fddc26537159badbeb016dbcc6932658ea0dd8b4b928247c821d197ecdd36c6910d271d7c1617ee6395b001cdfd243d555e86fa4d36dfb0"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) [ 579.448491] binder: 27751:27762 transaction failed 29189/-22, size 24-8 line 3012 [ 579.456547] binder: 27751:27756 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.478267] binder: 27792:27793 unknown command 1663756 [ 579.484284] binder: 27792:27793 ioctl c0306201 20000140 returned -22 03:33:35 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 579.491978] binder: 27792:27793 transaction failed 29189/-22, size 24-8 line 3012 [ 579.502398] binder: 27792:27793 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.510461] binder: 27792:27796 unknown command 1663756 [ 579.516084] binder: 27792:27796 ioctl c0306201 20000140 returned -22 [ 579.523670] binder: 27792:27795 transaction failed 29189/-22, size 24-8 line 3012 [ 579.531796] binder: 27792:27795 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.543330] binder: 27758:27769 ioctl 540c 0 returned -22 03:33:35 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000004, 0x20015, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000fb530000000000000000000818000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 579.555064] binder: 27758:27797 transaction failed 29189/-22, size 24-8 line 3012 [ 579.563127] binder: 27758:27798 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.563137] binder: 27758:27798 unknown command 0 [ 579.563159] binder: 27758:27798 ioctl c0306201 200003c0 returned -22 [ 579.579732] binder: 27765:27770 transaction failed 29189/-22, size 24-8 line 3012 [ 579.579821] binder: 27765:27802 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:35 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$9p(r0, &(0x7f0000000200)="39b7221f68feac78d9eee7073653a9df16319f55bc37d30470c56a07f38cdeeb1eab42bf9d012b34ed8ea0c3eae49d3183e8f1c119c025d730", 0x39) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$int_out(r1, 0x5462, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3ad, 0x0, &(0x7f0000000300), 0xfffffffffffffeaf, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000", @ANYRES64=0x0, @ANYBLOB="09e5b669592743635d07cd4a6cc0e81281d01a8d9d9420f952473a0280e38234205321ce79"], 0x0, 0x0, &(0x7f0000000180)}) [ 579.579857] binder: 27765:27802 unknown command 0 [ 579.579880] binder: 27765:27802 ioctl c0306201 200003c0 returned -22 [ 579.617609] binder: 27800:27806 transaction failed 29189/-22, size 24-8 line 3012 [ 579.618671] binder: 27800:27806 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.653308] binder: 27804:27810 transaction failed 29189/-22, size 24-8 line 3012 [ 579.660906] binder: 27808:27809 ioctl 5462 200001c0 returned -22 [ 579.670748] binder: 27804:27810 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:36 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 579.706344] binder: 27808:27811 unknown command 0 [ 579.710108] binder: 27773:27812 transaction failed 29189/-22, size 24-8 line 3012 [ 579.710254] binder: 27773:27776 ioctl 40086610 20000180 returned -22 [ 579.710341] binder: 27773:27812 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.737827] binder: 27808:27811 ioctl c0306201 20000180 returned -22 [ 579.745802] binder: 27808:27811 unknown command 5 [ 579.750914] binder: 27808:27811 ioctl c0306201 200003c0 returned -22 [ 579.790404] binder: 27813:27816 transaction failed 29189/-22, size 24-8 line 3012 [ 579.798624] binder: 27813:27816 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x4080000) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000180)=0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 579.878520] binder: 27782:27785 transaction failed 29189/-22, size 24-8 line 3012 [ 579.879159] binder: 27782:27817 unknown command 0 [ 579.879168] binder: 27782:27817 ioctl c0306201 200003c0 returned -22 [ 579.960386] binder: 27818:27821 transaction failed 29189/-22, size 24-8 line 3012 [ 579.968664] binder: 27818:27821 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffeab, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) [ 580.019930] binder: 27787:27822 transaction failed 29189/-22, size 24-8 line 3012 [ 580.028269] binder: 27787:27789 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.101358] binder: 27824:27826 transaction failed 29189/-22, size 24-8 line 3012 [ 580.109837] binder: 27824:27826 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:36 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0010a4b7d8398d41c10800724e47a4fd859955ede0448f170181a75655d8b6babea099"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 580.366162] binder: 27800:27827 transaction failed 29189/-22, size 24-8 line 3012 [ 580.374430] binder: 27800:27828 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.405908] binder: 27804:27810 transaction failed 29189/-22, size 24-8 line 3012 03:33:36 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) io_setup(0x7, &(0x7f0000000040)=0x0) io_destroy(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 580.405927] binder: 27804:27832 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:36 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 580.449740] binder: 27808:27837 ioctl 5462 200001c0 returned -22 [ 580.454504] binder: 27830:27838 transaction failed 29189/-22, size 24-8 line 3012 [ 580.454651] binder: 27830:27838 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.471358] binder: 27808:27836 unknown command 0 [ 580.476207] binder: 27808:27836 ioctl c0306201 20000180 returned -22 [ 580.499607] binder: 27834:27842 transaction failed 29189/-22, size 24-8 line 3012 [ 580.508404] binder: 27834:27842 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.524764] binder: 27834:27842 transaction failed 29189/-22, size 24-8 line 3012 [ 580.530629] binder: 27834:27843 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.533836] binder: 27813:27844 transaction failed 29189/-22, size 24-8 line 3012 03:33:36 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000280)="2b8e2a34155e0b86e33f5a7924cffdd7005f97a342a3e7ac5ef59e78c6fb732e8e0dea5bc92ed58e4dbf6d1d04cac59ad78b1b472aa46d9d8be0596a313aed3400a7bfcffcfcfeacb9f0a254d8b2139e4ecf6981ed1d9058784244807045ed081dd1715695a547003918bb1d70ea533d") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0463080107000000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) get_thread_area(&(0x7f0000000040)={0x2703, 0x20000800, 0x7000, 0x7f, 0xb47, 0xeb, 0xe24b, 0xb0, 0x100000000, 0xa1d4}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair(0x11, 0x0, 0x4, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627320000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xaa, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xffffffffffffff89, 0x0, &(0x7f00000003c0)}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000480)=""/230) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 580.554442] binder: 27839:27845 transaction failed 29189/-22, size 24-8 line 3012 [ 580.571929] binder: 27839:27845 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:36 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 580.591546] binder: 27846:27848 unknown command 17326852 [ 580.591635] binder: 27846:27848 ioctl c0306201 20000140 returned -22 [ 580.593295] binder: 27846:27848 transaction failed 29189/-22, size 24-8 line 3012 [ 580.593639] binder: 27846:27848 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.601676] binder_alloc: binder_alloc_mmap_handler: 27846 20001000-20004000 already mapped failed -16 [ 580.602265] binder: 27846:27852 unknown command 17326852 [ 580.602304] binder: 27846:27852 ioctl c0306201 20000140 returned -22 [ 580.603388] binder: 27846:27852 transaction failed 29189/-22, size 24-8 line 3012 [ 580.642507] binder: 27849:27856 transaction failed 29189/-22, size 24-8 line 3012 [ 580.642659] binder: 27849:27856 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.682542] binder: 27853:27857 transaction failed 29189/-22, size 24-8 line 3012 03:33:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 580.682638] binder: 27853:27857 unknown command 0 [ 580.682646] binder: 27853:27857 ioctl c0306201 200003c0 returned -22 [ 580.714748] binder: 27818:27858 transaction failed 29189/-22, size 24-8 line 3012 [ 580.722716] binder: 27818:27858 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r2 = geteuid() r3 = geteuid() getresuid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000380)=0xe8) r8 = getegid() r9 = getgid() ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x6, r3}, {0x2, 0x4, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r6}, {0x2, 0x3, r7}], {0x4, 0x6}, [{0x8, 0x1, r8}, {0x8, 0x5, r9}, {0x8, 0x0, r10}], {0x10, 0x4}, {0x20, 0x4}}, 0x6c, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 580.753718] binder: 27860:27861 transaction failed 29189/-22, size 24-8 line 3012 [ 580.762116] binder: 27860:27861 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.770737] binder: 27860:27862 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.770752] binder: 27860:27861 transaction failed 29189/-22, size 24-8 line 3012 03:33:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000480)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000e00000000000000000000000040000000000000000000000000008000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 580.849254] binder: 27863:27866 transaction failed 29189/-22, size 24-8 line 3012 [ 580.857819] binder: 27824:27867 transaction failed 29189/-22, size 24-8 line 3012 [ 580.866567] binder: 27863:27866 BC_ACQUIRE_DONE u0000000000000000 no match [ 580.935389] binder: 27870:27872 transaction failed 29189/-22, size 2251799813685248-0 line 3012 [ 580.944992] binder: 27870:27872 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:37 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="14eeb29fefd8b85247", 0x9, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffeca, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 581.244403] binder: 27830:27873 transaction failed 29189/-22, size 24-8 line 3012 [ 581.244833] binder: 27830:27874 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000180)=0x1e) [ 581.299752] binder: 27839:27879 transaction failed 29189/-22, size 24-8 line 3012 [ 581.330721] binder: 27877:27883 transaction failed 29189/-22, size 24-8 line 3012 03:33:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000005, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000000d11490e396e168179396bde5b46ab1995aca4aab47e6e7690649ba84d303d3293f636480f4b80abf77548cf6c974bd2bdf27c591c14839b57d6dcc7b01c7f06f1d949b650e45dd9efc7c4bacccb38b5c04d3b072b485ed374dcf550e52ee360434bec407ee7f8f443424d0e3427f5f0ff05bcd7fe3a86844828d4ac59e65bb139d17884a2f39d186a30f1dd29d3367983895f1aa7cfac336d6bc3534d03d5a1e610180f1e860e287e17913208593a6af75ef6c142912bf3fbb04e11d10b31b4ca6ed0a30689567ab600c7908ae8fe2ece9e41c00bf0f1f090a2808b7e6c0c5d2"], 0x0, 0x0, &(0x7f0000000180)}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @local}, &(0x7f00000002c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) accept$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) accept$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) accept$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) getpeername$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000840)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000a40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000bc0)={'bridge0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14, 0x800) getpeername(r0, &(0x7f0000000c80)=@can={0x1d, 0x0}, &(0x7f0000000d00)=0x80) accept4$packet(r0, &(0x7f0000007800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007840)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007880)={'team0\x00', 0x0}) timer_create(0x7, &(0x7f00000008c0)={0x0, 0x8, 0x0, @thr={&(0x7f0000000880)='c', &(0x7f0000000d40)="729c4722716a694dc4ee4629ba6d108d311ae61ff33006433ee6039c80aeb073acb1c71bc5fed52879de54081063fb9b3850e3ea4c1526cbab816092fe6de6b94c868dc8f7b291d3c00ba72c2830f3996670936a4b4b5b6d1b5870c9f38b194efd633f20e76b2b51b54de77510696cce005076442e0b59887dbe5a86d2fcca0050e823636ef2871f79a44d820660e7"}}, &(0x7f0000000900)=0x0) timer_delete(r18) accept4$packet(r0, &(0x7f00000078c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007900)=0x14, 0x800) accept$packet(r0, &(0x7f000000c900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000c940)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000cf80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44000800}, 0xc, &(0x7f000000cf40)={&(0x7f000000c980)={0x5a4, r3, 0x306, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x164, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff842e}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xb0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x1ac, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa7}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x1b0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x32}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r20}}}]}}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x24004014}, 0x40480d5) [ 581.372327] binder: 27881:27884 transaction failed 29189/-22, size 24-8 line 3012 [ 581.380638] binder: 27881:27884 BC_ACQUIRE_DONE u0000000000000000 no match [ 581.392879] binder: 27849:27885 transaction failed 29189/-22, size 24-8 line 3012 [ 581.401058] binder: 27849:27886 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:37 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x7, {{0xa, 0x4e20, 0x61b487f3, @remote, 0x7f}}}, 0x88) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000040)=0x28a) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 581.432684] binder: 27888:27889 transaction failed 29189/-22, size 24-8 line 3012 [ 581.441211] binder: 27888:27889 BC_ACQUIRE_DONE u0000000000000000 no match [ 581.442280] binder: 27853:27857 transaction failed 29189/-22, size 24-8 line 3012 [ 581.442357] binder: 27853:27890 unknown command 0 [ 581.442385] binder: 27853:27890 ioctl c0306201 200003c0 returned -22 03:33:37 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 581.486089] binder: 27888:27895 transaction failed 29189/-22, size 24-8 line 3012 [ 581.494192] binder: 27888:27889 BC_ACQUIRE_DONE u0000000000000000 no match [ 581.518999] binder: 27892:27900 transaction failed 29189/-22, size 24-8 line 3012 [ 581.528250] binder: 27892:27900 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@dev, @rand_addr}, &(0x7f0000000200)=0xc) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000180)=0xffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="01005281a7fc78465dfc861cf2f9020071fe97c0b140e93bfb1f58300fde"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 581.574331] binder: 27899:27902 transaction failed 29189/-22, size 24-8 line 3012 [ 581.582491] binder: 27899:27902 BC_ACQUIRE_DONE u0000000000000000 no match [ 581.602660] binder: 27863:27903 transaction failed 29189/-22, size 24-8 line 3012 03:33:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="605205000000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000180)) rt_sigprocmask(0x2, &(0x7f00000000c0)={0x6}, &(0x7f0000000280), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 581.682362] binder: 27905:27907 transaction failed 29189/-22, size 24-8 line 3012 [ 581.691078] binder: 27870:27909 transaction failed 29189/-22, size 2251799813685248-0 line 3012 [ 581.691489] binder: 27905:27907 BC_ACQUIRE_DONE u0000000000000000 no match [ 581.727037] binder: 27911:27912 ioctl 400454da 20000480 returned -22 [ 581.734174] binder: 27911:27912 unknown command 348768 [ 581.739568] binder: 27911:27912 ioctl c0306201 20000140 returned -22 [ 581.747456] binder: 27911:27912 transaction failed 29189/-22, size 24-8 line 3012 [ 581.755897] binder: 27911:27912 BC_ACQUIRE_DONE u0000000000000000 no match [ 581.764089] binder: 27911:27914 ioctl 400454da 20000480 returned -22 [ 581.770887] binder: 27911:27913 unknown command 348768 03:33:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x40000, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00'}, &(0x7f00000002c0)=0x44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0xbe, 0x0, &(0x7f0000000500)="f41d33e52b6dbb9df331ed7d64a14780123b737566dcaa897fe9660301ba970621bee97a286adef598fd6a75335d9a753bf5a18ad5a47b792c1f6599f6a4f50303a8e7e220efc97655f0ebbc551b7e2a518d2e604260888bec436f4fc10e559fc5e13e2ef86adf7cdb14fd3013248bf04a5fe4eed9cb84b9dcab85d751a3f7cc448452ee3f1e9160d4edc648297635de301100c7695c970a8617272b16f6f351cce03629e1f6cf211dbd56fdcf8754b2c4bd01c9272b2a50697d36c968c2"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) fcntl$setpipe(r1, 0x407, 0x6b9eec24) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) [ 581.776336] binder: 27911:27913 ioctl c0306201 20000140 returned -22 [ 581.783294] binder: 27911:27912 transaction failed 29189/-22, size 24-8 line 3012 [ 581.784042] binder: 27911:27914 BC_ACQUIRE_DONE u0000000000000000 no match [ 581.863324] binder: 27917:27919 transaction failed 29189/-22, size 24-8 line 3012 [ 581.872078] binder: 27917:27919 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:38 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09ed10403a8940ebbccd443256be6459f335aa2d1cf90964d43d3a51dcf8d1b866e942af0fd0e90bad52b8df1ce80b9ec070c47cf5ea197ee7426e66e9013428a4", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 582.077923] binder: 27877:27883 transaction failed 29189/-22, size 24-8 line 3012 [ 582.103496] binder: 27923:27924 unknown command 0 [ 582.108580] binder: 27923:27924 ioctl c0306201 20000140 returned -22 [ 582.115915] binder: 27923:27924 transaction failed 29189/-22, size 24-8 line 3012 03:33:38 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="5f88697893c04be1"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180), &(0x7f0000000280)=0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 582.124228] binder: 27923:27924 unknown command 1074851081 [ 582.127664] binder: 27881:27925 transaction failed 29189/-22, size 24-8 line 3012 [ 582.127737] binder: 27881:27884 BC_ACQUIRE_DONE u0000000000000000 no match [ 582.148423] binder: 27923:27924 ioctl c0306201 200003c0 returned -22 [ 582.156570] binder: 27923:27929 unknown command 0 [ 582.161536] binder: 27923:27929 ioctl c0306201 20000140 returned -22 [ 582.168159] binder: 27923:27924 transaction failed 29189/-22, size 24-8 line 3012 03:33:38 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x9, 0x101, 0x7c0000000000000, 0x40, 0x5, 0x8, 0x4, 0x0, 0x8, 0x5, 0x9, 0x2000000000000000}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 582.168876] binder: 27923:27929 unknown command 1074851081 [ 582.168885] binder: 27923:27929 ioctl c0306201 200003c0 returned -22 [ 582.192386] binder: 27926:27931 transaction failed 29189/-22, size 24-8 line 3012 [ 582.207241] binder: 27926:27931 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:38 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c63000030fefde04cd372abbac21192c0b6eaabdfb5c6b19297459e296e63d0234d8b5a5195c626bde019576baad94be7f851425386ae922779367d201abd44"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r3 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='posix_acl_access)\x00', 0xfffffffffffffffa) r4 = add_key(&(0x7f0000000400)='logon\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="72a98f46c7e5dd6eca3b9bae30accca86acfd8479bea0194a43bde6aa2935675c96ae01d6c325275db9b697819795d85e631efe86a98b898bab38752f20fa98fb020968cd966c5d91b5bfd8e51365725f4926809ff476c44048c7b7ef5494c17121d7b5c123a6a1b56b2bcf4a108640944225f994710fe376f6601b5680a120a44e5840d21233f885b0031153e0c595c92", 0x91, 0xfffffffffffffffc) keyctl$search(0xa, r3, &(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, r4) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 582.258320] binder: 27933:27935 transaction failed 29189/-22, size 24-8 line 3012 [ 582.266878] binder: 27933:27935 BC_ACQUIRE_DONE u0000000000000000 no match [ 582.268724] binder: 27892:27936 transaction failed 29189/-22, size 24-8 line 3012 [ 582.268999] binder: 27892:27936 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:38 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 582.320094] binder: 27899:27940 BC_ACQUIRE_DONE u0000000000000000 no match [ 582.320128] binder: 27899:27902 transaction failed 29189/-22, size 24-8 line 3012 [ 582.352479] binder: 27938:27942 transaction failed 29189/-22, size 24-8 line 3012 [ 582.360964] binder: 27938:27942 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$RTC_PIE_ON(r0, 0x7005) [ 582.403363] binder: 27943:27945 transaction failed 29189/-22, size 24-8 line 3012 [ 582.411584] binder: 27943:27945 BC_ACQUIRE_DONE u0000000000000000 no match [ 582.431929] binder: 27905:27946 BC_ACQUIRE_DONE u0000000000000000 no match [ 582.431936] binder: 27905:27907 transaction failed 29189/-22, size 24-8 line 3012 [ 582.510830] binder: 27948:27950 transaction failed 29189/-22, size 24-8 line 3012 [ 582.519094] binder: 27948:27950 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) init_module(&(0x7f0000000040)='*[vmnet1cpuset\x00', 0xf, &(0x7f0000000180)='eth0.\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 582.664258] binder: 27917:27919 transaction failed 29189/-22, size 24-8 line 3012 [ 582.667318] binder: 27917:27952 BC_ACQUIRE_DONE u0000000000000000 no match [ 582.748360] binder: 27955:27957 transaction failed 29189/-22, size 24-8 line 3012 [ 582.756634] binder: 27955:27957 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:39 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='trusted.overlay.opaque\x00', &(0x7f0000000580)='y\x00', 0x2, 0x2) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x5a) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0xee, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/238}, &(0x7f0000000180)=0x78) [ 582.947328] binder: 27926:27931 transaction failed 29189/-22, size 24-8 line 3012 03:33:39 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="e0947351470c776c"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) write$binfmt_elf64(r0, &(0x7f0000002e40)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x400, 0x6, 0x10000, 0x200, 0x0, 0x3e, 0x9, 0x1c2, 0x40, 0x162, 0xffffffff, 0x7, 0x38, 0x1, 0x401, 0x7fffffff, 0x1f}, [{0x0, 0x80, 0xff, 0x7, 0x6, 0x3, 0xffffffff, 0x7}], "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", [[], [], [], [], [], [], []]}, 0xfffffffffffffe74) creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$P9_RREADDIR(r0, &(0x7f0000000500)={0xed, 0x29, 0x2, {0x8, [{{0x0, 0x3, 0x5}, 0x8da, 0x9, 0x7, './file0'}, {{0x0, 0x2}, 0x5, 0x1, 0x7, './file0'}, {{0x4, 0x3, 0x7}, 0x1f, 0x1000, 0x10, './file0/../file0'}, {{0x80, 0x2, 0x8}, 0x1, 0x9, 0x7, './file0'}, {{0x0, 0x0, 0x1}, 0x3, 0x3, 0x7, './file0'}, {{0x1, 0x0, 0x4}, 0x4, 0x6, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x8, 0x7, './file0'}]}}, 0xed) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', 'em0vboxnet0$ppp1%,$trusted\x00'}, &(0x7f00000006c0)=""/4096, 0x1000) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 583.012661] binder: 27933:27962 transaction failed 29189/-22, size 24-8 line 3012 [ 583.020584] binder: 27933:27962 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.022490] binder: 27960:27963 transaction failed 29189/-22, size 24-8 line 3012 [ 583.022628] binder: 27960:27963 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:39 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 583.100609] binder: 27938:27942 transaction failed 29189/-22, size 24-8 line 3012 [ 583.100713] binder: 27938:27967 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.116482] binder: 27965:27968 transaction failed 29189/-22, size 24-8 line 3012 [ 583.125848] binder: 27965:27968 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000300)=0x7) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xb8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06630440010000000e630c4000000000030000000000000008631040", @ANYRES64=r2, @ANYBLOB="020000000000000003630840", @ANYRES64=r3, @ANYBLOB="10630840010000000000000012634840020000000000000003000000000000000000000011000000000000000000000058000000000000004000000000000000", @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000100000000000000852a747001000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000001000000000000003000000000000000852a6b660000000008f3efaab903a403a1df32842ab25c6c92f197eb9edcf6ab379da7925d0eb43934af", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="080000000000000005630440000000000f630c400200000002000000000000001063084003000000000000000c630000"], 0x8d, 0x0, &(0x7f0000000540)="66f0ad044874fcd11133f7d351f9802fd20af288d91d2c7d6de39dc8b219632891fe7187de21c46f244d6273c04d26572a101c2db5adfe1217b2f9c493f61e90adcb0a1efb8bc979b2d34db0fd2cd5cb88fb78e72fc56cabfacae22c5ef73c1e8e627966c6d04d552e19cd208418e572ac3b6c956acb625bba5c3f28e3d2c9317e4a29c38cc55b97908a9eb80c"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) accept(r0, 0x0, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c6300006a9fb70a53269b5ddef00703891330118219d2126c3d28b18e08bbc348cce84debda5285d63466c1a3776e90a89a6f5f402a9f42167406e503715002bc62608aa4a865ff0ddac5585247ef50497dbd9d"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xd3, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000740)="6f465450504c02d41bed2a01c277f796d6495574e2baed37fdc059fe44e0e20d562c77853da72666b147a0d6dad55be383a986e5e6256ac47ef7af4446389ef6290ae2298b81fe555d724697bc546a3c36642e1b759eb6a2dc0ccc2f65ec72f414a583fce7f79955dfdd12cdbcfbdd2c2a3733a218f819c873191496486c0ae764211ceefde29dfbb2f0eba7638db05ed62cd2f5efb4b03ffae430d11fcfd660bc1b9574f011851fce7e27"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0xd8, 0x0, &(0x7f0000000880)=[@acquire_done={0x40106309, r3, 0x4}, @acquire_done={0x40106309, r3, 0x1}, @clear_death={0x400c630f, 0x3, 0x4}, @transaction={0x40406300, {0x1, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000340), &(0x7f0000000400)=[0x0, 0x20, 0x48]}}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x58, 0x28, &(0x7f0000000800)=[@ptr={0x70742a85, 0x1, &(0x7f0000000600), 0x1, 0x3, 0x2d}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000000640)=[0x58, 0x38, 0x28, 0x78, 0x78]}}, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x4}], 0x75, 0x0, &(0x7f0000000980)="ac211f0633b2ba38e59cb9f9b3f7b6410516a2275a3c4b687ee29a5f3cfafb94d95d0e70ba6cde1d6f014d38998c372660fa9bf519ea2d0c1e3e28efc18bceda648c0a836a1368f70c550c47d74229fd98008b6cc17b5176fe5afd946b6f01d787c4ca2d757e1228938c6b3dd3a4865e29d3c306fb"}) [ 583.157783] binder: 27943:27945 transaction failed 29189/-22, size 24-8 line 3012 [ 583.165626] binder: 27943:27972 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.192627] binder: 27969:27975 transaction failed 29189/-22, size 24-8 line 3012 [ 583.199345] binder: 27974:27976 Release 1 refcount change on invalid ref 1 ret -22 [ 583.199366] binder: 27974:27976 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 583.199382] binder: 27974:27976 BC_INCREFS_DONE uffffffffffffffff no match [ 583.199392] binder: 27974:27976 BC_FREE_BUFFER u0000000000000000 no match [ 583.199401] binder: 27974:27976 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 583.199412] binder: 27974:27976 got reply transaction with no transaction stack [ 583.199421] binder: 27974:27976 transaction failed 29201/-71, size 88-64 line 2920 03:33:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000001a"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x1f, 0xfff, 0xfff, 0x649e96e9, 0x765, 0x0, 0x2a4e, 0x81, 0x4, 0x2, 0xcdc, 0x58}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 583.239261] binder: 27969:27977 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.245453] binder: 27974:27978 transaction failed 29189/-22, size 24-8 line 3012 [ 583.270833] binder: 27948:27950 transaction failed 29189/-22, size 24-8 line 3012 [ 583.275212] binder: 27948:27979 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.308570] binder: 27981:27982 unknown command 436207616 [ 583.314330] binder: 27981:27982 ioctl c0306201 20000140 returned -22 [ 583.321809] binder: 27981:27982 transaction failed 29189/-22, size 24-8 line 3012 [ 583.330889] binder: 27981:27983 unknown command 436207616 [ 583.336538] binder: 27981:27983 ioctl c0306201 20000140 returned -22 [ 583.344646] binder: 27981:27983 transaction failed 29189/-22, size 24-8 line 3012 03:33:39 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl(r1, 0xe68, &(0x7f0000000040)="93884939f920602fe3739c91b545e50f4373bfad41956f") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c030000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\tc\x00@', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x420000, 0x0) [ 583.352588] binder: 27981:27982 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.352925] binder: undelivered TRANSACTION_ERROR: 29189 [ 583.365558] binder: undelivered TRANSACTION_ERROR: 29189 [ 583.394009] binder: 27985:27986 ioctl e68 20000040 returned -22 [ 583.400773] binder: 27985:27986 unknown command 780 [ 583.405968] binder: 27985:27986 ioctl c0306201 20000140 returned -22 [ 583.413400] binder: 27985:27986 transaction failed 29189/-22, size 24-8 line 3012 [ 583.421613] binder: 27985:27986 unknown command 1073767177 [ 583.427420] binder: 27985:27986 ioctl c0306201 200003c0 returned -22 [ 583.435704] binder: 27985:27987 ioctl e68 20000040 returned -22 [ 583.442164] binder: 27985:27986 unknown command 780 [ 583.442183] binder: 27985:27987 transaction failed 29189/-22, size 24-8 line 3012 03:33:39 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000380)={0x0, 0x0, {0x57, 0x0, 0x80000001, {0xd3, 0x4}, {0x0, 0x78}, @ramp={0x8, 0x0, {0xff, 0x0, 0x0, 0x90}}}, {0x51, 0x8, 0xfffffffffffffff7, {0x5, 0x2}, {0xff, 0x2}, @rumble={0x0, 0xfffffffffffffffd}}}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/92) nanosleep(&(0x7f0000000280)={0x77359400}, &(0x7f00000000c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000400)='keyring-@nodev^\x00', 0x10, 0x1) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="07630bb7ee070000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 583.444579] binder: 27985:27987 unknown command 1073767177 [ 583.444588] binder: 27985:27987 ioctl c0306201 200003c0 returned -22 [ 583.467757] binder: 27985:27986 ioctl c0306201 20000140 returned -22 [ 583.545387] binder: 27955:27957 transaction failed 29189/-22, size 24-8 line 3012 [ 583.546694] binder: 27989:27995 unknown command -1223990521 [ 583.546704] binder: 27989:27995 ioctl c0306201 20000140 returned -22 [ 583.546771] binder: 27989:27995 transaction failed 29189/-22, size 24-8 line 3012 03:33:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0036e7164746c90cac918abff8f959176d002d3d9865faef8ae57533067d8d867e519be85a416f7843e0afeb715cf38d2b991e230022954c4a99f2799344193057bdf2ff95d9fb5f3d85e67abe1a98f04f7175ea58517dfc5fd429be5f8756ce9cb33ae370d1ed1762535a4bfcbbbab1e347a3d6fb680dc80491aad4c8dcac3462a0eb07df687ed8ff8aabf70321215da2b6319034e47cd3978b6f4408c6adf82c67"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 583.546852] binder: 27989:27995 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.546942] binder: 27955:27994 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.631259] binder: 27989:27995 unknown command -1223990521 [ 583.637412] binder: 27989:27998 transaction failed 29189/-22, size 24-8 line 3012 03:33:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', '/dev/binder#\x00'}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 583.637559] binder: 27989:27998 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.655788] binder: 27989:27995 ioctl c0306201 20000140 returned -22 [ 583.657193] binder: 28000:28001 unknown command 384251392 [ 583.657202] binder: 28000:28001 ioctl c0306201 20000140 returned -22 [ 583.657269] binder: 28000:28001 transaction failed 29189/-22, size 24-8 line 3012 03:33:40 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x0, 'dh\x00', 0x30, 0x32, 0x3}, {@rand_addr=0x7, 0x4e22, 0x2, 0xee48, 0x58d386bc, 0x2}}, 0x44) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r2 = getpgrp(0x0) get_robust_list(r2, &(0x7f0000000380)=&(0x7f00000002c0)={&(0x7f0000000180)={&(0x7f0000000040)}, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)}}, &(0x7f0000000400)=0x18) [ 583.657347] binder: 28000:28001 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.658006] binder: 28000:28001 unknown command 384251392 [ 583.658014] binder: 28000:28001 ioctl c0306201 20000140 returned -22 [ 583.658048] binder: 28000:28002 transaction failed 29189/-22, size 24-8 line 3012 [ 583.658121] binder: 28000:28001 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.754711] binder: 28005:28012 transaction failed 29189/-22, size 24-8 line 3012 [ 583.776484] binder: 27960:27963 transaction failed 29189/-22, size 24-8 line 3012 [ 583.784599] binder: 28005:28012 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.784967] binder: 27960:28016 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040f14f9674f782bfd40a93d3836b6329ca8da0a6765279d2ec4d3e040ca841a98bb2efa886e13400000000b2ae6a9e2f83b568480cfe048a82dd0d855d4334538c3db6d0e36cf73d98210e0c9e90059784fd05a9fd2145a6acd16899db5f4a729d3a42437d90828b06ed13b5b03615ccdfb92cd80cc1756a601eb873c57b3ed94ba65516b98fa486a709fc", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x80) [ 583.814500] binder: 28011:28018 transaction failed 29189/-22, size 24-8 line 3012 [ 583.823457] binder: 28011:28018 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 583.864948] binder: 27965:28022 transaction failed 29189/-22, size 24-8 line 3012 [ 583.873350] binder: 27965:27968 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.881744] binder: 28020:28023 transaction failed 29189/-22, size 24-8 line 3012 [ 583.889903] binder: 28020:28023 BC_ACQUIRE_DONE ud4bf82f774964ff1 no match 03:33:40 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 583.942099] binder: 27969:27977 transaction failed 29189/-22, size 24-8 line 3012 [ 583.960584] binder: 28025:28027 transaction failed 29189/-22, size 24-8 line 3012 [ 583.973782] binder: 28025:28027 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.994217] binder: 27974:28031 Release 1 refcount change on invalid ref 1 ret -22 [ 584.002372] binder: 27974:28031 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 584.009530] binder: 27974:28031 BC_INCREFS_DONE uffffffffffffffff no match [ 584.017281] binder: 27974:28031 BC_FREE_BUFFER u0000000000000000 no match [ 584.024687] binder: 27974:28031 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 584.025711] binder: 28028:28032 transaction failed 29189/-22, size 24-8 line 3012 03:33:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x3}], 0x7a, 0x0, &(0x7f0000000180)="3c4fc7b790b78a38a7ed0ef61589c9c051ad2280926ae1001736d82aefbc3adadfac33316814eae0b03d0858abbd94062c071448cd6f61478857ef41888479cc129266c21d4565d3e301efa2eeec033205d5b71e875fa087dbddbe1ac7d9033d08cb9304805b13ace39d68e74dd93c80b4d4d9e3ecf1ad77985a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)={0x1, 0x7, [@broadcast, @dev={[], 0x11}, @local, @random="afcf183d70c1", @remote, @broadcast, @random="9cc90ba7e8c9"]}) [ 584.025803] binder: 28028:28032 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.047422] binder: 27974:28033 transaction failed 29189/-22, size 24-8 line 3012 [ 584.047426] binder: 27974:28031 got reply transaction with no transaction stack [ 584.047437] binder: 27974:28031 transaction failed 29201/-71, size 88-64 line 2920 [ 584.071127] binder: 27974:28031 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.071701] binder: undelivered TRANSACTION_ERROR: 29189 [ 584.085008] binder: undelivered TRANSACTION_ERROR: 29189 [ 584.145514] binder: 28034:28037 transaction failed 29189/-22, size 24-8 line 3012 [ 584.154002] binder: 28034:28037 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000280)=""/45) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000500)=""/156) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) rmdir(&(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="22a85bff", @ANYRES64=0x0, @ANYRESDEC], 0x25, 0x0, &(0x7f0000000040)="c5f136381770849e3363714b143718bfd1071c33a9cf0e9002edc44d648feb56d58ddc2706"}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 584.491019] binder: 28005:28038 transaction failed 29189/-22, size 24-8 line 3012 [ 584.499065] binder: 28005:28038 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.529016] binder: 28041:28042 ioctl 80404509 20000280 returned -22 [ 584.536062] binder: 28041:28042 ioctl 8040451a 20000500 returned -22 03:33:40 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) fgetxattr(r2, &(0x7f0000000040)=@random={'user.', '/dev/binder#\x00'}, &(0x7f0000000480)=""/230, 0xe6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) write$input_event(r0, &(0x7f0000000180)={{0x0, 0x2710}, 0x0, 0x1, 0x19d}, 0x18) [ 584.562556] binder: 28011:28018 transaction failed 29189/-22, size 24-8 line 3012 [ 584.570391] binder: 28011:28043 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.577567] binder: 28011:28043 unknown command 0 [ 584.582554] binder: 28011:28043 ioctl c0306201 200003c0 returned -22 [ 584.589363] binder: 28041:28045 transaction failed 29189/-22, size 24-8 line 3012 [ 584.604666] binder: 28041:28045 unknown command -10770398 03:33:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)={0x0}) fcntl$setlease(r1, 0x400, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000380)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0280c26947ca6596153103370000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400)}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$TIOCSBRK(r0, 0x5427) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x5, 0xe3a, 0x100000000, 0x1c}, {0x100000001, 0x4, 0x18431dc2, 0x5}]}, 0x10) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0xfffffffffffff2ac}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="e1ffffffffffffff"], 0x0, 0x0, &(0x7f0000000180)}) [ 584.610761] binder: 28041:28045 ioctl c0306201 200003c0 returned -22 [ 584.626782] binder: 28020:28049 transaction failed 29189/-22, size 24-8 line 3012 [ 584.634935] binder: 28020:28023 BC_ACQUIRE_DONE ud4bf82f774964ff1 no match [ 584.661075] binder: 28051:28052 unknown command 1774354434 [ 584.667158] binder: 28051:28052 ioctl c0306201 20000140 returned -22 [ 584.667306] binder: 28046:28053 transaction failed 29189/-22, size 24-8 line 3012 [ 584.667994] binder: 28046:28053 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.690930] binder: 28051:28052 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.699023] binder: 28051:28052 unknown command 1774354434 [ 584.700136] binder: 28051:28055 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:41 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:33:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/65) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 584.712086] binder: 28051:28052 ioctl c0306201 20000140 returned -22 [ 584.712764] binder: 28025:28027 transaction failed 29189/-22, size 24-8 line 3012 [ 584.712849] binder: 28025:28027 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.776668] binder: 28028:28063 transaction failed 29189/-22, size 24-8 line 3012 [ 584.785339] binder: 28058:28064 transaction failed 29189/-22, size 24-8 line 3012 [ 584.785479] binder: 28058:28064 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.805369] binder: 28028:28032 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.812909] binder: 28060:28065 transaction failed 29189/-22, size 24-8 line 3012 03:33:41 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x40000000000, 0x20011, r2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '!\x00'}, &(0x7f0000000180)='/dev/rtc0\x00', 0xa, 0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 584.821722] binder: 28060:28065 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x1, 0x3, 0x4, 0x0, 0x4a8}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) signalfd4(r1, &(0x7f00000000c0)={0x6b5}, 0x8, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ae729bda571283a8883fb7067a147dab947042ab3b815e7113e4e3b6c70e26fcf051d203e419e9fe806ad7f2a0f25f99d8005bca9c6699a45d3e70075014d74fac6eb692d59b6b6d5b7ec611a75763a8d6b7c24476e89d671b76073cf682c3528166ef57a87c5622df53871b1d936b75eef465b648fee249195f"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 584.897428] binder: 28067:28069 transaction failed 29189/-22, size 24-8 line 3012 [ 584.905875] binder: 28067:28069 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.913627] binder: 28034:28070 transaction failed 29189/-22, size 24-8 line 3012 [ 584.921542] binder: 28034:28037 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.947118] binder: 28071:28073 unknown command -627346770 [ 584.953573] binder: 28071:28073 ioctl c0306201 20000140 returned -22 [ 584.961015] binder: 28071:28073 transaction failed 29189/-22, size 24-8 line 3012 [ 584.969160] binder: 28071:28073 BC_ACQUIRE_DONE u0000000000000000 no match [ 584.977552] binder: 28071:28074 unknown command -627346770 [ 584.983913] binder: 28071:28074 ioctl c0306201 20000140 returned -22 [ 584.990669] binder: 28071:28074 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) write$tun(r0, &(0x7f00000006c0)={@val={0x0, 0x88f8}, @void, @ipv6={0x1, 0x6, "4da87c", 0x1177, 0x2f, 0x7, @local, @dev={0xfe, 0x80, [], 0x15}, {[@hopopts={0x3c905029cb0896f5, 0x1, [], [@pad1, @jumbo={0xc2, 0x4, 0x2}]}, @srh={0x8, 0x4, 0x4, 0x2, 0x9, 0x40, 0x8, [@remote, @ipv4={[], [], @multicast1}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x28, 0x38, 0x14000000000000, [@local, @mcast1]}, @srh={0x2f, 0x6, 0x4, 0x3, 0x2, 0x58, 0x2, [@loopback, @dev={0xfe, 0x80, [], 0xf}, @dev={0xfe, 0x80, [], 0x12}]}], @gre={{0x0, 0x0, 0x1, 0x9, 0x0, 0x9, 0x0, 0x1, 0x880b, 0x78, 0x2, [0x80000000], "906a27649abe061f865d9c20058fc6b7f7aa645d0d4eb735e76efb764ae0be8f83fa236cef4a33da9993caa871fb080d0c7b6c8fbbc9a44032d15f4d1bd827a0e145bfe5c6e22c59c3df919bab94dd1955f48acbd0022e86e409645c222366bd33e94da3e7dbdbc94f7eef3c83458ef937747eb91952eb9a"}, {0x8, 0x0, 0x401, 0x5, 0x0, 0x0, 0x800, [0x400, 0x800, 0x4], "8949"}, {0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x86dd, [0x8], "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"}, {0x8, 0x88be, 0x2, {{0x1000, 0x1, 0xcc, 0x9, 0x401, 0x5, 0x6, 0x7}, 0x1, 0x6}}, {0x8, 0x22eb, 0x2, {{0x800, 0x2, 0x3ff, 0x100000000000000, 0x4, 0x80000001, 0x1200000000, 0xfffffffffffffffd}, 0x2, 0x4, 0x61a, 0x100000001, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x3, 0x9, 0x8, 0x101}}, {0x8, 0x6558, 0x3, "be23750346d08a51ac958d5fb20a2f"}}}}}, 0x11a3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 584.990706] binder: 28071:28073 transaction failed 29189/-22, size 24-8 line 3012 [ 585.069382] binder: 28076:28079 transaction failed 29189/-22, size 24-8 line 3012 [ 585.077688] binder: 28076:28079 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x80000) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 585.323358] binder: 28041:28045 ioctl 80404509 20000280 returned -22 [ 585.325015] binder: 28041:28080 ioctl 8040451a 20000500 returned -22 [ 585.325336] binder: 28041:28080 transaction failed 29189/-22, size 24-8 line 3012 [ 585.325471] binder: 28041:28080 unknown command -10770398 [ 585.325487] binder: 28041:28080 ioctl c0306201 200003c0 returned -22 03:33:41 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000480)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000c700", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 585.405886] binder: 28046:28053 transaction failed 29189/-22, size 24-8 line 3012 [ 585.414165] binder: 28046:28085 BC_ACQUIRE_DONE u0000000000000000 no match [ 585.422394] binder: 28083:28087 transaction failed 29189/-22, size 24-8 line 3012 [ 585.430726] binder: 28083:28087 unknown command 2 [ 585.435720] binder: 28083:28087 ioctl c0306201 200003c0 returned -22 [ 585.490704] binder: 28088:28091 transaction failed 29189/-22, size 24-8 line 3012 [ 585.499447] binder: 28088:28091 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:41 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b994c5a5ebc79305bdd1b6248e43c86b9ce57cdb3a614e61abdaf12c51aea58632ecaaf043b4800f79f5149610e70006c352aeb8ef765b3b0d3f7ede7f9735fe0c"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 585.540777] binder: 28058:28064 transaction failed 29189/-22, size 24-8 line 3012 [ 585.548835] binder: 28058:28092 BC_ACQUIRE_DONE u0000000000000000 no match [ 585.577163] binder: 28096:28097 unknown command -1513777991 [ 585.583123] binder: 28096:28097 ioctl c0306201 20000140 returned -22 03:33:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) waitid(0x2, r2, &(0x7f0000000180), 0x8, &(0x7f0000000480)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@ipv4={[], [], @local}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) setfsuid(r3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f0000000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0xf4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09632e8856b7969435a140", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 585.590340] binder: 28096:28097 transaction failed 29189/-22, size 24-8 line 3012 [ 585.598429] binder: 28096:28097 BC_ACQUIRE_DONE u0000000000000000 no match [ 585.606584] binder: 28096:28099 unknown command -1513777991 [ 585.612975] binder: 28096:28099 ioctl c0306201 20000140 returned -22 [ 585.617399] binder: 28060:28065 transaction failed 29189/-22, size 24-8 line 3012 03:33:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000180)=0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:41 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 585.617541] binder: 28060:28100 BC_ACQUIRE_DONE u0000000000000000 no match [ 585.617547] binder: 28060:28100 unknown command 0 [ 585.617556] binder: 28060:28100 ioctl c0306201 200003c0 returned -22 [ 585.652153] binder: 28096:28097 transaction failed 29189/-22, size 24-8 line 3012 [ 585.652273] binder: 28096:28097 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/loop-control\x00', 0x511900, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)="aad4d5636be8c377dd72d3d4fb26acb7a77f4d43663c041b9aec0ce1ae921ef9e8e16b9b096aff84ea5282178b0ed1", 0x2f) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00c\x00\x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) rt_sigprocmask(0x0, &(0x7f0000000380), &(0x7f0000000400), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x5, 0x81f]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) accept4$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e, 0x80800) [ 585.652365] binder: 28101:28104 unknown command 240 [ 585.652375] binder: 28101:28104 ioctl c0306201 20000140 returned -22 [ 585.652443] binder: 28101:28104 transaction failed 29189/-22, size 24-8 line 3012 [ 585.652698] binder: 28101:28104 ioctl 40086602 200001c0 returned -22 [ 585.652757] binder: 28101:28104 unknown command -2010225911 [ 585.652764] binder: 28101:28104 ioctl c0306201 200003c0 returned -22 03:33:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'irlan0\x00', 0xf03}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 585.655133] binder: 28067:28103 transaction failed 29189/-22, size 24-8 line 3012 [ 585.659830] binder: 28067:28069 BC_ACQUIRE_DONE u0000000000000000 no match [ 585.661808] binder: 28101:28105 unknown command 240 [ 585.661817] binder: 28101:28105 ioctl c0306201 20000140 returned -22 [ 585.661848] binder: 28101:28106 transaction failed 29189/-22, size 24-8 line 3012 [ 585.661927] binder: 28101:28105 ioctl 40086602 200001c0 returned -22 [ 585.661951] binder: 28101:28106 unknown command -2010225911 [ 585.661958] binder: 28101:28106 ioctl c0306201 200003c0 returned -22 [ 585.743919] binder: 28115:28116 unknown command 25344 [ 585.743929] binder: 28115:28116 ioctl c0306201 20000140 returned -22 [ 585.744117] binder: 28115:28116 transaction failed 29189/-22, size 24-8 line 3012 [ 585.744838] binder: 28115:28116 unknown command 25344 [ 585.744846] binder: 28115:28116 ioctl c0306201 20000140 returned -22 [ 585.744933] binder: 28115:28116 transaction failed 29189/-22, size 24-8 line 3012 03:33:42 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 585.745432] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.745471] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.768781] binder: 28110:28118 transaction failed 29189/-22, size 24-8 line 3012 [ 585.768885] binder: 28110:28118 BC_ACQUIRE_DONE u0000000000000000 no match [ 585.820274] binder: 28120:28122 transaction failed 29189/-22, size 24-8 line 3012 [ 585.820380] binder: 28120:28122 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:42 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4013, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0xfffffffffffffffb, 0x204000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) [ 585.830422] binder: 28076:28079 transaction failed 29189/-22, size 24-8 line 3012 [ 585.941289] binder: 28125:28130 transaction failed 29189/-22, size 24-8 line 3012 [ 585.960436] binder: 28128:28131 transaction failed 29189/-22, size 24-8 line 3012 [ 585.968643] binder: 28128:28131 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) [ 586.177309] binder: 28083:28132 transaction failed 29189/-22, size 24-8 line 3012 [ 586.185257] binder: 28083:28087 unknown command 2 [ 586.190281] binder: 28083:28087 ioctl c0306201 200003c0 returned -22 03:33:42 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 586.243905] binder: 28088:28136 transaction failed 29189/-22, size 24-8 line 3012 [ 586.266393] binder: 28134:28137 transaction failed 29189/-22, size 24-8 line 3012 [ 586.277448] binder: 28134:28137 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.315325] binder: 28138:28141 transaction failed 29189/-22, size 24-8 line 3012 [ 586.323717] binder: 28138:28141 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:42 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = add_key(&(0x7f0000000400)='big_key\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)="30f4c1727a47e2315a5739472b9377bd1b99c0a4ab5023d30a8b8e97fefb98370e657ccd0e40a6d5e4eb035b0b6149fd8186806249530f94e193beda30ac5f0cecac8b3f845dc45bbed9b2d14d49ef2f100c6b188d01f11a2ac22e5fc81bea55d2f15c5a19f1e485dd4e7b52a64adfdd755e9f2b979f728d6231ce1f89945a0179ddc05003fee57e27e98e6709ea3d63219c77a34dd8c504d76658a72cc447f1cd19975ce0786ac6e6e7a6938d229ebd3ce9b70b91e2a58a6ada7a3059cd255661688b76a7e518936b214bae6676e17d437c43e14dd5d969", 0xd8, 0xfffffffffffffff8) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x15) keyctl$set_timeout(0xf, r3, 0x7fff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000900)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffff7fff, 0x3, &(0x7f0000000580)=[{&(0x7f0000000480)="50c5652c427ad6e8bc4fb0909b74473bc076c3b3338b8d97b8da626db73b98412ece2926badef521493e7a61f17d5703d4b9595152c84af103e5d830c6dd47d15ebc12fc7cf31048ee6dabe648ad6f23b7007aa5b96f041546e8fe3eb918acb355941005b124d8efe8e79023dded55a43f22eb0b4b6d41eee06b550ae0f4f3776f5cec5818fcf85366ea495b17005d91b9617704902eac99709fd1cc8ab58a7b186b5f90969a399ce939e4ac8d26cf3c2c4099343b867c7da1a46450c1bb0a04bc3f9509a8aa80cd49d2ec08424ebcebc80c9f", 0xd3, 0x8}, {&(0x7f0000000280)="31f46aa436f267aab727baaba064bb7f3b8cddb472b85b6b76199d20a8908c769228f0245819b4a64c0f303465cd544024f5129c6a7dc514f9dc84f925ff8e2c16c64d9f8db7138ad5d1294744b9116298f39e5af229114f400c4c035fd1e268340cf26426e64a9c9f37bf1c04e6a03492a5d830ad", 0x75}, {&(0x7f00000001c0)="2eeeb29000025c11184f412433cc1a950b6d8e5f625cc39f499c9cbf2cc89e6bd8", 0x21, 0x8000}], 0x100000, &(0x7f0000000600)={[{@grpquota={'grpquota'}}, {@usrquota={'usrquota', 0x3d, 'securitybdev(#systemvmnet1system'}}, {@noflush_merge='noflush_merge'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}], [{@fowner_lt={'fowner<', r4}}]}) [ 586.498514] binder: 28110:28118 transaction failed 29189/-22, size 24-8 line 3012 [ 586.498569] binder: 28110:28142 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:42 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='net/ip_tables_targets\x00') fcntl$getownex(r1, 0x10, &(0x7f0000005240)) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000005280)=0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x1000000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r2, 0x5428) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000005480)={0x9, {{0x2, 0x4e20, @remote}}}, 0x88) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x4) r4 = open(&(0x7f0000005440)='./file0/file0\x00', 0x4000, 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000052c0)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r7, 0x1, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000005200)={0x1b, 0xe, 0x4, 0x16, 0x3, 0xd8, 0x3, 0xde}) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000053c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000005540)={{0xa, 0x4e22, 0xffff, @empty, 0x9}, {0xa, 0x4e24, 0x73, @empty, 0x5}, 0x400, [0x3, 0x2, 0x1ffe000000, 0xfffffffffffffff7, 0x200000000, 0x7, 0x20000000000000, 0x80000]}, 0x5c) ioctl$TIOCEXCL(r6, 0x540c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000005340)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1f}]}, 0x10) sendto$inet(r7, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0x6, &(0x7f0000005380)) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000005180)={@loopback, @loopback}, &(0x7f0000005300)=0xc) [ 586.569351] binder: 28120:28146 transaction failed 29189/-22, size 24-8 line 3012 [ 586.569360] binder: 28120:28147 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.579438] binder: 28143:28148 transaction failed 29189/-22, size 24-8 line 3012 [ 586.579535] binder: 28143:28148 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:43 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001700"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 586.711209] binder: 28125:28130 transaction failed 29189/-22, size 24-8 line 3012 [ 586.719778] binder: 28125:28156 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.720841] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.734615] binder: undelivered TRANSACTION_ERROR: 29189 03:33:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) getsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000480)=""/11, &(0x7f0000000580)=0xb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x0, 0x0, {0x2, 0x16, 0x17, 0x7, 0x0, 0xf4f, 0x0, 0xf2, 0x1}}) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r0, 0x10, &(0x7f0000000740)={&(0x7f00000006c0)=""/92, 0x5c, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r0, 0x10, &(0x7f00000007c0)={&(0x7f00000005c0)=""/169, 0xa9, r4}}, 0x10) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [{0x2, 0x0, r2}, {0x2, 0x2, r3}], {0x4, 0x2}, [], {}, {0x20, 0x1}}, 0x34, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 586.756323] binder: 28158:28160 unknown command 1507328 [ 586.762169] binder: 28158:28160 ioctl c0306201 20000140 returned -22 [ 586.769699] binder: 28158:28160 transaction failed 29189/-22, size 24-8 line 3012 [ 586.774306] binder: 28128:28131 transaction failed 29189/-22, size 24-8 line 3012 [ 586.774415] binder: 28128:28131 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:43 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f0000000280)=[@release={0x40046306, 0x3}, @dead_binder_done={0x40086310, 0x2}, @reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000180)=[0x48, 0x38, 0x48]}}, @exit_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 586.809037] binder: 28158:28160 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.817355] binder: 28158:28166 unknown command 1507328 [ 586.823176] binder: 28158:28166 ioctl c0306201 20000140 returned -22 [ 586.829997] binder: 28158:28165 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.830028] binder: 28158:28160 transaction failed 29189/-22, size 24-8 line 3012 [ 586.860232] binder: 28163:28169 transaction failed 29189/-22, size 24-8 line 3012 [ 586.860546] binder: 28167:28170 Release 1 refcount change on invalid ref 3 ret -22 [ 586.860555] binder: 28167:28170 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 586.860564] binder: 28167:28170 got reply transaction with no transaction stack [ 586.860572] binder: 28167:28170 transaction failed 29201/-71, size 0-24 line 2920 [ 586.860592] binder: 28167:28170 ioctl c0306201 20000140 returned -14 [ 586.907138] binder: 28167:28172 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.910531] binder: 28163:28169 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x7fe) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000009, 0x1cdd, 0x20) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a62730000000005649f2202e8202226ce3f5eb15190a0f241ba8b0d9e143d25136b54e189e86f2c48", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 587.016588] binder: 28134:28173 transaction failed 29189/-22, size 24-8 line 3012 [ 587.025125] binder: 28134:28137 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:43 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 587.070847] binder: 28138:28177 transaction failed 29189/-22, size 24-8 line 3012 [ 587.099265] binder: 28174:28179 transaction failed 29189/-22, size 24-8 line 3012 [ 587.110529] binder: 28174:28179 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.143372] binder: 28180:28182 transaction failed 29189/-22, size 24-8 line 3012 [ 587.152194] binder: 28180:28182 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:43 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) fchmod(r1, 0x4) r3 = fcntl$getown(r0, 0x9) syz_open_procfs(r3, &(0x7f0000000040)='net/sockstat6\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 587.334099] binder: 28143:28183 transaction failed 29189/-22, size 24-8 line 3012 [ 587.342036] binder: 28143:28148 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:43 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'io'}, {0x2d, 'rdma'}]}, 0xa) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x64, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x1}, @increfs_done={0x40106308, r2, 0x2}, @register_looper, @reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x60, 0x8, &(0x7f0000000280)=[@fda={0x66646185, 0x2, 0x4, 0x35}, @fda={0x66646185, 0x6, 0x0, 0x25}, @fda={0x66646185, 0x0, 0x3, 0xa}], &(0x7f0000000380)=[0x58]}}], 0xd, 0x0, &(0x7f0000000400)="ac6bcd6be19342f11d9c623579"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f00000006c0)=""/4096, &(0x7f0000000040)=0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 587.423342] binder: 28185:28187 transaction failed 29189/-22, size 24-8 line 3012 [ 587.436636] binder: 28185:28187 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.538575] binder: 28191:28193 transaction failed 29189/-22, size 24-8 line 3012 [ 587.546928] binder: 28191:28193 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="d8c006c9b5de40a44d50674eee9d2d54892988e13765693e074e0e87d1f80b5b517fc95781d91121fb4501c394de7d3f0c2436107a7b8c48e51a835666337d75d7242b2c034c87f3a0e5b02e303f4b940dd09e73a0063c62b3d555dce52499f363d5550cb915b23f4faec187519c7f6ad559e9a1ac819ee3759cdf", 0x7b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x1, 0x4}], 0x0, 0x0, &(0x7f0000000400)}) syz_open_pts(r0, 0x111300) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000005c0)="b9d866c91cf8b5b633c31ab591fc7fa0a9fa85f8af231c0a47b67b946b29d125a2d6431f4601af5ba8bea38f7acfe91f1cea13bacf81656d636fe10c0babe78399e961c12fa7b13e84ff30d52b3dc8abddf05d549834ae68e41719a611aacf2c8a4e683b2f90aa44f5a1aeaba6a70ffe1c00e208ea94348ef3c8780b993f0d3f324913632a0ce74cf74f6c0a59724e11ffa0710f5749653fcc723fd343151fbbb2c735de24774918476a2a83b225eb9788befb94a83afe8fe6c39e5088bed86aeef440e7662ab74b0a6e98c6c353f525ad") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x3c, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x58, 0x20, &(0x7f0000000280)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000000180)=[0x0, 0x18, 0x30, 0x18]}}], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)) [ 587.609190] binder: 28163:28171 transaction failed 29189/-22, size 24-8 line 3012 [ 587.618101] binder: 28163:28171 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.660906] binder: 28167:28198 Release 1 refcount change on invalid ref 3 ret -22 [ 587.668735] binder: 28167:28198 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 587.676543] binder: 28167:28198 got reply transaction with no transaction stack [ 587.684571] binder: 28167:28198 transaction failed 29201/-71, size 0-24 line 2920 [ 587.692538] binder: 28167:28198 ioctl c0306201 20000140 returned -14 [ 587.695545] binder: 28196:28199 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 03:33:44 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '/dev/rtc0\x00'}, &(0x7f00000001c0)='/dev/rtc0\x00', 0xa, 0x1) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 587.695739] binder: 28196:28199 got reply transaction with no transaction stack [ 587.695747] binder: 28196:28199 transaction failed 29201/-71, size 88-32 line 2920 [ 587.706374] binder: 28167:28172 transaction failed 29189/-22, size 24-8 line 3012 [ 587.710144] binder: 28167:28200 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.710153] binder: 28167:28200 unknown command 0 [ 587.710163] binder: 28167:28200 ioctl c0306201 200003c0 returned -22 03:33:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x200080, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x9fb85bc94c52769c, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="15ea12a582fbf7eaff3bd1c2fd850338cce016751027d650a283f83615de5be68a4d86e2622393dd8afe02a23b7948e47583dac79283338f1be7"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 587.818532] binder: 28202:28204 transaction failed 29189/-22, size 24-8 line 3012 [ 587.826839] binder: 28202:28204 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.847781] binder: 28174:28205 transaction failed 29189/-22, size 24-8 line 3012 [ 587.855693] binder: 28174:28205 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:44 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e24, @multicast1}}) [ 587.878007] binder: 28207:28209 unknown command 12 [ 587.883080] binder: 28207:28209 ioctl c0306201 20000140 returned -22 [ 587.889922] binder: 28207:28209 transaction failed 29189/-22, size 24-8 line 3012 [ 587.898202] binder: 28207:28209 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.899042] binder: 28180:28210 transaction failed 29189/-22, size 24-8 line 3012 [ 587.915323] binder: 28207:28211 unknown command 12 [ 587.921038] binder: 28207:28211 ioctl c0306201 20000140 returned -22 03:33:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x40000) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x80800) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) futimesat(r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={{0x0, 0x7530}, {0x77359400}}) socket$inet6(0xa, 0x5, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) [ 587.927680] binder: 28207:28209 transaction failed 29189/-22, size 24-8 line 3012 [ 587.935445] binder: 28207:28211 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.992302] binder: 28213:28218 transaction failed 29189/-22, size 24-8 line 3012 [ 588.001312] binder: 28213:28218 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.012333] binder: 28216:28219 transaction failed 29189/-22, size 24-8 line 3012 [ 588.020571] binder: 28216:28219 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:44 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 588.173951] binder: 28185:28222 transaction failed 29189/-22, size 24-8 line 3012 [ 588.182425] binder: 28185:28187 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:44 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000040), &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="aa8cc6d028c43c35c4e5be28a3adf4c234c4fa52068ad6227bdf8056a89d89fa51032310f4f516cb93f02512aea08011d06c1c3ff7fb5df83f812a14088144caf70253a062d2cba4f223a61deafeb31d5ed90284e2b12a2b21b82b397ad6a5d8582ba08b263860cfa521651273069d2c50069e7d714b46a8cb23dc9b881960ee4c0074e5b5", @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64, @ANYBLOB="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", @ANYPTR64, @ANYBLOB="e8dce91e6f8ca647de1887e39d18b42a026756a4acf7975a03e5fcdeb36ba8f49dc958a7d8f1888c3b4ec4a87376570e11f9e2238b0ef1711215921d20291fdffbb0bd7c79f0ee41a7bbbda1e30feda39ca52951a58bd2549d90f058e1a2359e113ba70331ee9b3e01415c0bae8a488529aa8ab57c31ee1c384a6df4133f49ca35b72c19fe4c8515a7f5abb92a44433647f77331e4c3f9102795beee1c10add7fb4e0fe30d865dc42f83d8396b500595b4cdba0b509d8f04b9ffa45521efaaf669f7b9dcbc510ab4e234f287b8e93d65", @ANYRES32=0x0, @ANYBLOB="6f5d7b554e554ead83399372e524b3d67eabed9b1dd09675e74aec3adf9fe57df177ab16fd558923143c204f3d50a975bdaf85561b875f4a2891b5d2a018cf9ce981a28247e930d8b52b1f50013e10af310060438e8a98"], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64, @ANYRESDEC, @ANYRESDEC=r2], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=r2, @ANYPTR, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="8711c458534c2fe236bce627584c1eeb4710e587226f90ee49f632bb8d70c6cf70e5938b19daf92bba75b807672dccb91adea6965f5c6c9ab677502acb1203a806a56ce69074d2ea50de909f40e0c79b8a8cef26ee04e7a6998facec0ef6253f39aba0e8ff8d78a32e7d72efc62a7f0ce589d91e3113d732a037613dba"], @ANYRESHEX=r2, @ANYRES64=r0], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 588.260988] binder: 28224:28226 transaction failed 29189/-22, size 24-8 line 3012 [ 588.269261] binder: 28224:28226 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.294045] binder: 28191:28227 transaction failed 29189/-22, size 24-8 line 3012 03:33:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 588.320667] binder: 28228:28230 transaction failed 29189/-22, size 24-8 line 3012 [ 588.330152] binder: 28228:28231 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.330407] binder: 28228:28230 transaction failed 29189/-22, size 24-8 line 3012 [ 588.346158] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.351865] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.416380] binder: 28232:28235 transaction failed 29189/-22, size 24-8 line 3012 [ 588.424705] binder: 28232:28235 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.448427] binder: 28196:28236 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 588.456162] binder: 28196:28237 got reply transaction with no transaction stack 03:33:44 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000280)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) timerfd_gettime(r0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000140)={&(0x7f0000000000)=""/36, 0x24, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) [ 588.463784] binder: 28196:28237 transaction failed 29201/-71, size 88-32 line 2920 [ 588.472587] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.478254] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.495448] binder: 28238:28240 transaction failed 29189/-22, size 24-8 line 3012 [ 588.503919] binder: 28238:28240 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:44 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xd7, 0x1009000000000000, &(0x7f0000000500)="2bc5142cd80087087bea4e061e891b181fa541029b6648a5fd9f8582adb78dfc48484de1f11bb9ff7094df3cc6cbaad44a2c953d1c968ac21aa3cd31a8f7aed2c603f8fa379e84bfce45be4811e8b6e0e9508183c3d4fc60a25c3119d2fb77c950afe0ff41b61ed365ef33e9184f1473c9d7e883aeee133db2efb4092751ee6133c68ab65ec8600e5589ccab59acefaddc7ddc641c1dee11cf0796efc0586a3d10b10ba3482ccc535ac9dcf910088628516d953420081d04563e7e1d841e97651034e745aed06b786a3adeed5ff8430000000000000000"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000040000000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x2f, 0x0, &(0x7f0000000480)=[@request_death={0x400c630e, 0x4}], 0x32, 0x0, &(0x7f00000006c0)="1816dfa4a39ee34f1b37fbd272ec3371756aeea6071852e1639b766d1b4b92f7f54bbbcb1aea34525c18a505f92c7739459d3dcfdf3b361c0d5c2312844e2c6bebd83e12cb1b06ceaca1595718977fe38664380874fd988eaabe69d9fc6fc4f22e7fd31027731131e42f19b68a81c82d42171539c15d1f7cdf1f1c6a74905f1a8a161da796a6ac0120c388ee8cac764f790c1745a5d1d6ccfb9013ea9c68d63cafbb355c535d"}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x3000000000, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 588.513358] binder: 28238:28241 transaction failed 29189/-22, size 24-8 line 3012 [ 588.515980] binder: 28238:28242 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:44 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 588.569263] binder: 28202:28246 transaction failed 29189/-22, size 24-8 line 3012 [ 588.577219] binder: 28202:28204 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.595352] binder: 28244:28247 transaction failed 29189/-22, size 24-8 line 3012 [ 588.618768] binder: 28244:28247 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 588.631630] binder: 28244:28247 unknown command 0 [ 588.636565] binder: 28244:28247 ioctl c0306201 200003c0 returned -22 [ 588.686382] binder: 28248:28251 transaction failed 29189/-22, size 24-8 line 3012 [ 588.695124] binder: 28248:28251 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:45 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000056ab28027840fab41e3e"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="004a02d2a2f3e5ddd928b28d03000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) [ 588.746303] binder: 28213:28218 transaction failed 29189/-22, size 24-8 line 3012 [ 588.754243] binder: 28213:28252 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.766917] binder: 28216:28253 transaction failed 29189/-22, size 24-8 line 3012 [ 588.775043] binder: 28216:28219 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.831562] binder: 28255:28263 transaction failed 29189/-22, size 24-8 line 3012 [ 588.860354] binder: 28261:28264 ioctl 660c 0 returned -22 [ 588.866336] binder: 28261:28264 transaction failed 29189/-22, size 24-8 line 3012 [ 588.874678] binder: 28261:28264 unknown command -771601920 [ 588.880699] binder: 28261:28264 ioctl c0306201 200003c0 returned -22 03:33:45 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$perf(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 589.012806] binder: 28224:28265 transaction failed 29189/-22, size 24-8 line 3012 [ 589.022267] binder: 28224:28226 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.095479] binder: 28266:28269 transaction failed 29189/-22, size 24-8 line 3012 [ 589.104102] binder: 28266:28269 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:45 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000ce78b0fc58515f3a9c757a91afcbfe8dc18ddd003ac7c09ae1fa9bde265c3d27a7ccf2fa0aeb907ca7dfbc1e8d9fd79beafe2da0c63ca49e9c324961e456fa9e82c81c52b291d656ec13b80b366cd3137f4e701129bfa3c3973ea83f8a076c6ea1b59f265857c86ea7616e1fc6689ea19f30ccc7186010f04529d018a875ee89ba"], 0x0, 0x0, &(0x7f0000000180)}) [ 589.171335] binder: 28232:28271 transaction failed 29189/-22, size 24-8 line 3012 [ 589.179361] binder: 28232:28235 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.246308] binder: 28272:28275 transaction failed 29189/-22, size 24-8 line 3012 [ 589.254506] binder: 28272:28275 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) creat(&(0x7f0000000280)='./file0\x00', 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c430080"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) io_setup(0x2, &(0x7f0000000040)=0x0) io_destroy(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000180)={0x3f, 0x80000000, 0x1}) 03:33:45 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 589.393371] binder: 28244:28276 transaction failed 29189/-22, size 24-8 line 3012 [ 589.393803] binder: 28244:28277 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 589.393819] binder: 28244:28277 unknown command 0 [ 589.393830] binder: 28244:28277 ioctl c0306201 200003c0 returned -22 [ 589.421674] binder: 28248:28279 transaction failed 29189/-22, size 24-8 line 3012 [ 589.452635] binder: 28281:28284 unknown command -2147466484 [ 589.458695] binder: 28281:28284 ioctl c0306201 20000140 returned -22 [ 589.468046] binder: 28282:28285 ioctl 6611 0 returned -22 03:33:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 589.513347] binder: 28281:28286 transaction failed 29189/-22, size 24-8 line 3012 [ 589.521241] binder: 28282:28287 transaction failed 29189/-22, size 24-8 line 3012 [ 589.521876] binder: 28281:28284 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.536177] binder: 28281:28286 unknown command -2147466484 [ 589.536188] binder: 28281:28286 ioctl c0306201 20000140 returned -22 [ 589.540492] binder: 28281:28286 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.540560] binder: 28281:28284 transaction failed 29189/-22, size 24-8 line 3012 [ 589.566284] binder: 28282:28292 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.586604] binder: 28255:28293 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.586610] binder: 28255:28263 transaction failed 29189/-22, size 24-8 line 3012 [ 589.603178] binder: undelivered TRANSACTION_ERROR: 29189 03:33:45 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe32, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000040)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) close(r1) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x401}}, {@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x401}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0xff}}], [{@audit='audit'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rtc0\x00'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x1b, 0x0, &(0x7f00000001c0)="7e31b5fb927adda55756dfe7c9fc7753cd106db1de34dea3562665"}) 03:33:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80000, 0x7) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr\x00', 0x4) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000500)="3c268f6ba800069b9312fe66eff05b1989608728c7491a4284040829d081eac960c55197798d05269c2dd733a0f016543ba24f5187bf23d63980cf32543a90b9dcdbca8da5f3fdc3b1d5380f8a484c82df731255a859c9c125782f5085602d33492d87f3c19ccca391fb78dccbd6e44953540ef516043e831c8926e70632206dee84e0a0620e6fc0", 0x88}, {&(0x7f0000000040)="13d65f3367b305761db34240aa17a69e492e432baa37cd33951b296a9ad1", 0x1e}], 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10, 0x800) sendto$inet(r2, &(0x7f0000002a00)="6360a0c44fa6e217cb1c806022f4eb4daaeb326b9d2d1e4e9c8a52096618ca93422e24c1b699e892b1d7941d3d6386dd23b81bffdad38ba619864d773f7950bb270a402458424848f650c832d1a7495acc1fa44354c79bf0be9f76603f472e1d695cdbd74ce01aaad6f587e9a331ed8fffabab700226aea0910575cbc96d", 0x7e, 0x84, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 589.608935] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.613707] binder: 28289:28294 transaction failed 29189/-22, size 24-8 line 3012 [ 589.613864] binder: 28289:28294 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.619800] binder: 28261:28295 ioctl 660c 0 returned -22 [ 589.619870] binder: 28261:28264 transaction failed 29189/-22, size 24-8 line 3012 [ 589.619909] binder: 28261:28295 unknown command -771601920 [ 589.619918] binder: 28261:28295 ioctl c0306201 200003c0 returned -22 [ 589.683389] binder: 28297:28304 transaction failed 29189/-22, size 24-8 line 3012 [ 589.684297] binder: 28297:28304 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.708324] binder: 28300:28305 transaction failed 29189/-22, size 24-8 line 3012 [ 589.716693] binder: 28300:28305 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 589.848150] binder: 28266:28306 transaction failed 29189/-22, size 24-8 line 3012 [ 589.857014] binder: 28266:28306 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.934467] binder: 28307:28310 transaction failed 29189/-22, size 24-8 line 3012 [ 589.942704] binder: 28307:28310 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:46 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) listen(r0, 0x1) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x32c, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xffffffffffffff7b, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) write$P9_RREADDIR(r0, &(0x7f0000000280)={0xfc, 0x29, 0x2, {0x40, [{{0x4, 0x0, 0x7}, 0x1ff, 0x8, 0x7, './file0'}, {{0x80, 0x2}, 0xaf, 0x4, 0x7, './file0'}, {{0x87, 0x4, 0x2}, 0x1, 0xf, 0x7, './file0'}, {{0x40, 0x4, 0x8}, 0x6d, 0x6, 0x7, './file0'}, {{0x4, 0x1, 0x8}, 0x7, 0x9}, {{0x28, 0x3, 0x7}, 0x7, 0x1ff, 0x7, './file0'}, {{0x9a, 0x2, 0x3}, 0x1, 0x9, 0x7, './file0'}, {{0x1, 0x2}, 0x4, 0x20, 0x7, './file0'}]}}, 0xfc) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x22, 0x2, 0x8}, 0x94d3}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000200)={0x9}) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)='&[[\x00', 0x4, 0x3) [ 590.001468] binder: 28272:28311 transaction failed 29189/-22, size 24-8 line 3012 [ 590.031442] binder: 28313:28314 unknown command 0 [ 590.036543] binder: 28313:28314 ioctl c0306201 20000140 returned -22 [ 590.044055] binder: 28313:28314 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:46 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="97df75ee11a07177a35c068f5cddf3b4e56a4af28654ced0aeb7a1c6b1e4241e6990d066288721c30ff4d6e150aa8332c0707c237ac959860cd4c5d0d88e35d66ff8e348554d4144cf17d9c731c80df63ce310e1a3f83852a955185b39ae18445ba5ecbb3e84b5276bff00f8ffd3071023ce68eec0f7d869edb2be16d2eb094abdbbcee29cd301e54a60d92fcbf6aca9790626cd30e32511a6d956283bbcab349ceaf9a7e08c9dfff34b63e80686acbb6f7a953600751b7bed36ef724fb6c6e61849d3f19ad2ddaddea00cfecb778bf8b0c46c57795d19c24a7728b020ff23e536f9c5b1"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "5b1bebe4191e5d69eb8640f9aeca4a00"}, 0x11, 0x2) fcntl$setflags(r0, 0x2, 0x1) [ 590.052666] binder: 28313:28315 unknown command 0 [ 590.057516] binder: 28313:28315 ioctl c0306201 20000140 returned -22 [ 590.064769] binder: 28313:28315 BC_ACQUIRE_DONE u0000000000000000 no match [ 590.095213] binder: 28318:28319 unknown command -294264937 [ 590.101009] binder: 28318:28319 ioctl c0306201 20000140 returned -22 [ 590.108190] binder: 28318:28319 transaction failed 29189/-22, size 24-8 line 3012 [ 590.117143] binder: 28318:28320 transaction failed 29189/-22, size 24-8 line 3012 [ 590.117182] binder: 28318:28319 unknown command -294264937 [ 590.117190] binder: 28318:28319 ioctl c0306201 20000140 returned -22 [ 590.138243] binder: 28318:28319 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:46 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x8}, 0x32d, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 590.143249] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.151672] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.216381] binder: 28321:28324 transaction failed 29189/-22, size 24-8 line 3012 [ 590.224631] binder: 28321:28324 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:46 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a62730000000087f52c1613cbda8fa35500d835fb3a7359d39341f9bd161862cc7ae78216e0382aa1ae9bcbf98981ab3aa2", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) socket$key(0xf, 0x3, 0x2) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)=""/171) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r2}) [ 590.258873] binder: 28282:28292 ioctl 6611 0 returned -22 [ 590.265172] binder: 28282:28292 transaction failed 29189/-22, size 24-8 line 3012 03:33:46 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) write$P9_RSTATFS(r0, &(0x7f0000000280)={0x43, 0x9, 0x1, {0xff, 0x1, 0x1000000000000000, 0x7, 0x8, 0x14, 0x8001, 0x6, 0x101}}, 0x43) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 590.337454] binder: 28325:28328 transaction failed 29189/-22, size 24-8 line 3012 [ 590.346140] binder: 28325:28328 BC_ACQUIRE_DONE u0000000000000000 no match [ 590.363111] binder: 28289:28329 transaction failed 29189/-22, size 24-8 line 3012 [ 590.371049] binder: 28289:28329 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000380)) socketpair(0x10, 0x1, 0xb8, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e24, 0x1ff, @ipv4={[], [], @local}, 0x1}, {0xa, 0x4e24, 0x32, @mcast2, 0xfb9}, 0x0, [0xffff, 0x9, 0x7c7b, 0x5, 0xa8, 0x3, 0xfffffffffffffc01, 0x16b]}, 0x5c) write$P9_RRENAME(r2, &(0x7f0000000180)={0x7, 0x15, 0x2}, 0x7) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) eventfd2(0x1, 0x0) [ 590.431681] binder: 28297:28334 transaction failed 29189/-22, size 24-8 line 3012 [ 590.441028] binder: 28297:28334 BC_ACQUIRE_DONE u0000000000000000 no match [ 590.442087] binder: 28330:28336 transaction failed 29189/-22, size 24-8 line 3012 [ 590.442217] binder: 28330:28336 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:46 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x16}, r2}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00000000000000135e4c7d6bd9a06ac51febd1e300"], 0x0, 0x0, &(0x7f0000000180)}) socketpair(0xa, 0x3, 0x3, &(0x7f0000000180)) ioctl$TIOCNXCL(r0, 0x540d) [ 590.449541] binder: 28300:28339 transaction failed 29189/-22, size 24-8 line 3012 [ 590.449614] binder: 28300:28337 BC_ACQUIRE_DONE u0000000000000000 no match [ 590.519253] binder: 28341:28347 transaction failed 29189/-22, size 24-8 line 3012 [ 590.527549] binder: 28341:28347 BC_ACQUIRE_DONE u0000000000000000 no match [ 590.557774] binder: 28344:28348 transaction failed 29189/-22, size 24-8 line 3012 [ 590.566051] binder: 28344:28348 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000001700"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) write$P9_ROPEN(r0, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x40, 0x2, 0x6}, 0x7}}, 0x18) [ 590.684201] binder: 28307:28349 transaction failed 29189/-22, size 24-8 line 3012 [ 590.693606] binder: 28307:28310 BC_ACQUIRE_DONE u0000000000000000 no match [ 590.765468] binder: 28351:28353 transaction failed 29189/-22, size 24-8 line 3012 [ 590.773671] binder: 28351:28353 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0xee, 0x4) readv(r1, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/105, 0x69}], 0x1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000400)=""/6) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000380)={{0x0, @rand_addr, 0x4e22, 0x2, 'nq\x00', 0x10, 0x100000000, 0x27}, {@rand_addr=0x4, 0x4e21, 0x10000, 0x3, 0x40, 0x5d}}, 0x44) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x94, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="06000000000000006a6c82436d7092f2f55e258a53b3c3eb151f2781c9a8a4647c62f772ec3bb815d85ded68a6355fe83928e16b256c41109825ac1bd2d30ebe1b5dced61d3667d73a00acd62e7fb4ace9ad96362653e25986bc89d4a93a4984007eca74e9ceab6ba4cc08c245b60976cf0ec93f9d0fa6a471de1ad3d120ae0d464685ceee6bde06"], 0x14e, 0x0, &(0x7f0000000540)="77a2cd05458e2f7de2880df7f38025c76af83c5ddb79c72bd8c0d353ec233b98b4ffa1dd477a8a13894b877fd6365df9a0ea3f48e262d4987de4eb5adbc439edb9ec9bbfb9f1f16bfe3f1a94b40f23217a2d6920c178ea36cd30a611313c9b1e02d744a7ced215ba4caa31d65824258d2200b2e9fb3de96bf5915602e93406dbab859c4bfb93012b705128c84a7b708f85d14035bef476acb85001a89dee7a374d7c358ebfca0b616770762a0fcb4fab33e0ed6815b335db187cad8e36f95af37d55247794a012b372b33ce046d4d7f528609aeb5e18b7eec130e7f80b94bc501d7704e804b546c0b4209cae0aab16523cde98dd5ca0e0648174bd8515388cab74220797b32bf782072d1680eebd7717e98133c51fef313fd3dd0bc9f8b805cb1a0bba1ad32aa4375e4c9ce8a8f02d5cbb9f91f2b2c3a94aab64326e49e4b1c0a1a23719c4f2fce59eb452fa33b3"}) [ 591.015460] binder: 28321:28354 transaction failed 29189/-22, size 24-8 line 3012 [ 591.015574] binder: 28321:28355 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.089276] binder: 28325:28328 transaction failed 29189/-22, size 24-8 line 3012 [ 591.095311] binder: 28325:28360 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.097764] binder: 28357:28361 transaction failed 29189/-22, size 24-8 line 3012 [ 591.107574] binder: 28357:28361 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.107582] binder: 28357:28361 unknown command 1132620906 [ 591.107590] binder: 28357:28361 ioctl c0306201 20000280 returned -22 03:33:47 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 03:33:47 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[@enter_looper], 0xfffffee1, 0x1009000000000000, &(0x7f0000000180)="cff6d6ab77b21949ab2df08374cd9f40bc0aafb14470e003a5fa6c7abc3190a9d959194015e7d331e8224911a11b47455439476ae5bfda51"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 591.195682] binder: 28330:28365 transaction failed 29189/-22, size 24-8 line 3012 [ 591.203779] binder: 28330:28365 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.235310] binder: 28363:28369 transaction failed 29189/-22, size 24-8 line 3012 [ 591.243647] binder: 28363:28369 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 591.273103] binder: 28341:28370 transaction failed 29189/-22, size 24-8 line 3012 [ 591.280926] binder: 28341:28347 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.298338] binder: 28367:28372 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.310975] binder: 28344:28376 transaction failed 29189/-22, size 24-8 line 3012 03:33:47 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 591.319036] binder: 28344:28348 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.355785] binder: 28374:28380 transaction failed 29189/-22, size 24-8 line 3012 [ 591.363846] binder: 28374:28380 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.397461] binder: 28378:28381 transaction failed 29189/-22, size 24-8 line 3012 [ 591.406120] binder: 28378:28381 unknown command 783467712 [ 591.411863] binder: 28378:28381 ioctl c0306201 200003c0 returned -22 03:33:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0xa1) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0xfffffffffffffe4d, 0x0, &(0x7f0000000280)="1a1c29aff1f9a865fee64017103e0398bb96196738fc4cb00f9dfc53dbcfa4d56eb5a67113f6f200453b56d167506faedb7f5f742535342336df2ba72703863a79749a6f99a05389e619c6b6f92e6c8cb76b"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000002000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09630340", @ANYRES64=0x0, @ANYBLOB="0000000000000000a2d67a852b2f42f886c7cd4c54e027535b6d96e04beac12b82cbfe889224d1b80e7d2ffc57c827609487ca054d7a8e5d046175b94b92f9d141c68d7b6977a4f94e859050444c0031695ae57d646ae1768f497f1370fa7b94bc8a9c377b3f07a836634c65da7b287ef643db34f692d1728e331620d97b54cd7f70e11089e5d2929396267d9ff50003d43441d39f32cfd9607070dd6359fa2321"], 0x0, 0x0, &(0x7f0000000180)}) [ 591.520626] binder_alloc: binder_alloc_mmap_handler: 28351 20001000-20004000 already mapped failed -16 [ 591.531119] binder: 28351:28353 transaction failed 29189/-22, size 24-8 line 3012 [ 591.538925] binder: 28351:28353 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.668367] binder: 28384:28387 unknown command 1073963785 [ 591.674179] binder: 28384:28387 ioctl c0306201 200003c0 returned -22 03:33:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getpeername$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 591.851540] binder_alloc: 28384: binder_alloc_buf, no vma [ 591.857143] binder: 28357:28361 transaction failed 29189/-3, size 24-8 line 3135 [ 591.929359] binder_alloc: 28384: binder_alloc_buf, no vma [ 591.935495] binder: 28391:28393 transaction failed 29189/-3, size 24-8 line 3135 [ 591.944060] binder: 28391:28393 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:48 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x6c, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, r1, 0x4}, @increfs_done={0x40106308, r1, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x20, 0x28, &(0x7f0000000040)=[@fda={0x66646185, 0x3, 0x0, 0x13}], &(0x7f0000000180)=[0x68, 0x20, 0x0, 0x0, 0x20]}}], 0xaa, 0x0, &(0x7f0000000480)="252585b705fd4b5641996f6339bbb310d0efc9f0bed0f4d5d723a5ba7987ebc532a0024db1e816e3b7abbc8bc4314f2cc0aa0f840b25cc776311e4ac8770c43521dff57de28ea836463540d5a79bc94e567b43fc0b0d16160ffff21467e9891a23c1e1f7fc280526d59b62c3dac3431fda4f14f0462ac80758a7dfbdcfe7e3c52891bd293ec8474ced8d60a89f405787c60667ff67c775bfd7c34a1b4db960a897cb8192ef09a8302554"}) 03:33:48 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 591.991020] binder: 28363:28394 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.991042] binder_alloc: 28384: binder_alloc_buf, no vma [ 591.991065] binder: 28363:28369 transaction failed 29189/-3, size 24-8 line 3135 [ 592.030147] binder: 28367:28398 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.073370] binder_alloc: 28384: binder_alloc_buf, no vma [ 592.079058] binder: 28395:28402 transaction failed 29189/-3, size 24-8 line 3135 [ 592.087894] binder: 28395:28402 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.096024] binder: 28395:28402 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.103580] binder: 28395:28402 BC_INCREFS_DONE u0000000000000000 no match [ 592.103698] binder_alloc: 28384: binder_alloc_buf, no vma 03:33:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x100010, r0, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0x6e, 0x80000) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000280)={'bond_slave_1\x00', {0x2, 0x4e24, @remote}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x29, 0x0, &(0x7f00000002c0)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 592.103734] binder: 28399:28403 transaction failed 29189/-3, size 24-8 line 3135 [ 592.111561] binder: 28399:28403 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.125589] binder: 28374:28404 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.125601] binder_alloc: 28384: binder_alloc_buf, no vma [ 592.125631] binder: 28374:28380 transaction failed 29189/-3, size 24-8 line 3135 03:33:48 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$packet_int(r0, 0x107, 0x1b, &(0x7f0000000040), &(0x7f0000000180)=0x4) [ 592.153434] binder_alloc: 28384: binder_alloc_buf, no vma [ 592.153466] binder: 28378:28381 transaction failed 29189/-3, size 24-8 line 3135 [ 592.153557] binder: 28378:28405 unknown command 783467712 [ 592.153565] binder: 28378:28405 ioctl c0306201 200003c0 returned -22 [ 592.200151] binder_alloc: 28384: binder_alloc_buf, no vma [ 592.205797] binder: 28395:28402 transaction failed 29189/-3, size 32-40 line 3135 [ 592.223405] binder_alloc: 28384: binder_alloc_buf, no vma [ 592.229109] binder: 28407:28412 transaction failed 29189/-3, size 24-8 line 3135 [ 592.237504] binder: 28407:28412 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.245491] binder_alloc: 28384: binder_alloc_buf, no vma [ 592.251402] binder: 28409:28413 transaction failed 29189/-3, size 24-8 line 3135 [ 592.259591] binder: 28409:28413 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:48 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 592.369330] binder_alloc: binder_alloc_mmap_handler: 28384 20001000-20004000 already mapped failed -16 [ 592.381928] binder: BINDER_SET_CONTEXT_MGR already set [ 592.387381] binder: 28384:28415 ioctl 40046207 0 returned -16 [ 592.491529] binder: 28417:28419 transaction failed 29189/-22, size 24-8 line 3012 [ 592.499884] binder: 28417:28419 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:49 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="8506000000020000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 592.684388] binder: 28391:28420 transaction failed 29189/-22, size 24-8 line 3012 [ 592.692266] binder: 28391:28420 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.768335] binder: 28422:28424 transaction failed 29189/-22, size 24-8 line 3012 [ 592.776588] binder: 28422:28424 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x9fc, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x4, 0x2, 0x2, 0xffffffff, 0x3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20012, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000000000005cc837540cc6e42e5928d2683e9bef30b24daafa051920a5283da25f170fe4a5b38bfc08b395bf44104ce335db036dcfcc6f90b54d9360920521ba9e9e0f384b674389def6ededda3c3505887237414f2cd238bc6c88059a53842d7acb1b8f8795a62d35ff289df69ae38a93dcba2bad5f88fcbee01762718577c009489941858d836c37be51fd2953ae3a7d6779aab23a8524aede59e6b1c4e6d42d28776789"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) 03:33:49 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000000000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x2000000000002) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 592.827213] binder: 28395:28425 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.827220] binder: 28395:28402 transaction failed 29189/-22, size 24-8 line 3012 [ 592.857682] binder: 28399:28403 transaction failed 29189/-22, size 24-8 line 3012 [ 592.864806] binder: 28427:28429 ioctl 401c5820 20000040 returned -22 03:33:49 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="f96721ee2a66e95b2558972bc52febf0777cc33d15f30702ae624ca650c1e9d486aabef42f44276ba5c8be0ab8020000000000000070b64e3cb3d7ea63afbd871e3e562895ecfbf9a9ad602023bcc0ef03bf81e4a9038a42c1e2528a4a987e4e21222141542712bc4b9cda904fdca9e6c4e51baef818250a193e72bf8da59966c913cdbdbaa3a33f2485"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) r2 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 592.865181] binder: 28427:28429 transaction failed 29189/-22, size 24-8 line 3012 [ 592.865415] binder: 28427:28429 unknown command 2 [ 592.865424] binder: 28427:28429 ioctl c0306201 200003c0 returned -22 [ 592.865920] binder: 28427:28430 ioctl 401c5820 20000040 returned -22 [ 592.866427] binder: 28399:28428 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.866461] binder: 28427:28429 transaction failed 29189/-22, size 24-8 line 3012 [ 592.943754] binder: 28432:28435 transaction failed 29189/-22, size 24-8 line 3012 [ 592.951945] binder: 28432:28435 BC_ACQUIRE_DONE u0000000000000000 no match [ 592.969549] binder: 28407:28438 transaction failed 29189/-22, size 24-8 line 3012 [ 592.977544] binder: 28407:28438 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:49 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ftruncate(r0, 0x100000001) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$P9_RCREATE(r1, &(0x7f0000000180)={0x18, 0x73, 0x1, {{0x8, 0x2}, 0x100000}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 592.994447] binder: 28409:28413 transaction failed 29189/-22, size 24-8 line 3012 [ 592.995297] binder: 28409:28439 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.009708] binder: 28436:28440 transaction failed 29189/-22, size 24-8 line 3012 [ 593.018441] binder: 28436:28440 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.080800] binder: 28442:28447 transaction failed 29189/-22, size 24-8 line 3012 [ 593.088887] binder: 28442:28447 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.096634] binder: 28444:28448 transaction failed 29189/-22, size 24-8 line 3012 [ 593.096855] binder: 28444:28448 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000480)=""/154) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x2000}) [ 593.230178] binder: 28417:28419 transaction failed 29189/-22, size 24-8 line 3012 [ 593.230230] binder: 28417:28449 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.315745] binder: 28451:28453 transaction failed 29189/-22, size 24-8 line 3012 [ 593.324110] binder: 28451:28453 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:49 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing={0x2c, 0x2, 0x1, 0xdaf, 0x0, [@mcast2]}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r2 = getpgid(0x0) ioprio_set$pid(0x2, r2, 0x6) [ 593.519884] binder: 28422:28454 transaction failed 29189/-22, size 24-8 line 3012 [ 593.527815] binder: 28422:28424 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.605698] binder: 28456:28458 transaction failed 29189/-22, size 24-8 line 3012 [ 593.614072] binder: 28456:28458 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) dup(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 593.692800] binder: 28432:28435 transaction failed 29189/-22, size 24-8 line 3012 [ 593.692883] binder: 28432:28459 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.727641] binder: 28461:28462 ioctl 40086602 20000040 returned -22 03:33:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x0}) flock(r1, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 593.753494] binder: 28436:28440 transaction failed 29189/-22, size 24-8 line 3012 [ 593.792311] binder: 28461:28469 transaction failed 29189/-22, size 24-8 line 3012 03:33:50 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, &(0x7f00000001c0)=0x10) [ 593.819547] binder: 28461:28469 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.835976] binder: 28442:28475 transaction failed 29189/-22, size 24-8 line 3012 [ 593.863357] binder: 28470:28480 transaction failed 29189/-22, size 24-8 line 3012 [ 593.871788] binder: 28470:28480 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.893297] binder: 28444:28448 transaction failed 29189/-22, size 24-8 line 3012 [ 593.893737] binder: 28444:28481 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:50 executing program 2: lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x110010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r2 = getgid() getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) lstat(&(0x7f0000000380)='\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x3, &(0x7f0000000480)=[r2, r3, r4]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a667300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000400", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffc8e, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 593.907395] binder: 28477:28482 transaction failed 29189/-22, size 24-8 line 3012 [ 593.907536] binder: 28477:28482 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.986727] binder: 28483:28486 transaction failed 29189/-22, size 24-8 line 3012 [ 593.995384] binder: 28483:28486 unknown command 262144 [ 594.001108] binder: 28483:28486 ioctl c0306201 20000180 returned -22 03:33:50 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 594.071026] binder: 28451:28453 transaction failed 29189/-22, size 24-8 line 3012 [ 594.071112] binder: 28451:28487 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.156414] binder: 28489:28491 transaction failed 29189/-22, size 24-8 line 3012 [ 594.164569] binder: 28489:28491 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:50 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000480)={0xe, 0x2, 0xffff, 0x3, 0xbd, "eedc8a24230525150b6c2d3a2693747c1f5f3029647257ad92876b7a1551c90509ebdbd6065634b6559f904f69fea8136e43e2ff7aef90f4aef0d181206475e03f3170a48c8e6f81924b8735976ab941184a3afbe083f3d1ab5852a2c774dad294ad0686341db6324051c97a92eb6545bfa6e1dc33ea0f688c758b50e4b022ab3eb1e7d5258f507c7edda291331727313596283e96ef7aefae1de3418142ec0b1a9225356bd8338e64b78b092007de5e28cc95fca70551f8db85a6a702"}, 0xc9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000680)=[@dead_binder_done], 0xec, 0x0, &(0x7f0000000100)}) [ 594.352947] binder: 28456:28458 transaction failed 29189/-22, size 24-8 line 3012 [ 594.361247] binder: 28456:28458 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.435448] binder: 28494:28496 transaction failed 29189/-22, size 24-8 line 3012 [ 594.443693] binder: 28494:28496 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) eventfd2(0xb77, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="455442790300000000000000cdfc10684da7d8db4e23c363613144e353a840a9509f636940daf38b7eec40083b8577a7de8b7f219e325c428c8c9a3c08398769776e88f760"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09ab1040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 594.528232] binder: 28461:28497 ioctl 40086602 20000040 returned -22 [ 594.535626] binder: 28461:28497 transaction failed 29189/-22, size 24-8 line 3012 [ 594.536123] binder: 28461:28498 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.568912] binder: 28500:28501 unknown command 2034390085 [ 594.575277] binder: 28500:28501 ioctl c0306201 20000140 returned -22 [ 594.582867] binder: 28500:28501 transaction failed 29189/-22, size 24-8 line 3012 [ 594.591381] binder: 28500:28501 unknown command 1074834185 [ 594.597249] binder: 28500:28501 ioctl c0306201 200003c0 returned -22 [ 594.605648] binder: 28470:28503 transaction failed 29189/-22, size 24-8 line 3012 03:33:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2001e, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U+'}, 0x28, 0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) openat$cgroup(r0, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) getdents64(r0, &(0x7f0000000540), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x80, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x9) fstatfs(r0, &(0x7f00000006c0)=""/187) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000000000000079fe45c99a759e4ff6c855"], 0x0, 0x0, &(0x7f0000000180)}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/policy\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="00fbd4040410b72b20b477d3435aa8c3da0f141d36fc11f60451320940396891eea9821037b97d612097eb5c8e1476cb4c3a5f9c55265b688c70a7d621efa09f1eab60a96c0d5171d2a52c6d2d899e617ff7b02fe1e9e5c1338db9592b5d482229dc347914bf5a03a153bc561ab1c742d1590d0614df6b87c9d35d243d53e69a3e77d6520b999baccf7ff394a2b25bca96f669cd6898db0eb5a1b55ce5456ea88ae61c23726b3150072997fbff0e94c6f63a3f30928dfbc9f8ce7caa927ed15b71461cd9a3e06dac7d56002c8b5b0f304d50"], 0xd4, 0x3) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 594.614543] binder: 28500:28501 unknown command 2034390085 [ 594.620321] binder: 28500:28505 unknown command 1074834185 [ 594.620331] binder: 28500:28505 ioctl c0306201 200003c0 returned -22 [ 594.620350] binder: 28500:28504 transaction failed 29189/-22, size 24-8 line 3012 [ 594.630137] binder: 28470:28506 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.658582] binder: 28500:28501 ioctl c0306201 20000140 returned -22 03:33:50 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) getgroups(0x1, &(0x7f0000000640)=[0xee00]) r6 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0}, &(0x7f0000001700)=0xc) getgroups(0xa, &(0x7f0000001740)=[0xee00, 0xee01, 0xee00, 0x0, 0xee00, 0xee00, 0xee00, 0x0, 0xee01, 0xee00]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001900)=0x0) r10 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0, 0x0}, &(0x7f0000001980)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) fstat(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() stat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000002180)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01]) r18 = getpid() r19 = geteuid() r20 = getgid() r21 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000021c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f00000022c0)=0xe8) fstat(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = getpgrp(0x0) stat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = getpgrp(0x0) r28 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0, 0x0}, &(0x7f0000002880)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000028c0)=0x0) stat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002ac0)={0x0, r0, 0x0, 0xa, &(0x7f0000002a80)='/dev/rtc0\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002b00)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000002c00)=0xe8) fstat(r0, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002d00)={0x0, r0, 0x0, 0xa, &(0x7f0000002cc0)='/dev/rtc0\x00'}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002d40)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000002e40)=0xe8) fstat(r2, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r39 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002f00)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000003000)=0xe8) getgroups(0x2, &(0x7f0000003040)=[0xee00, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000035c0)={0x0}, &(0x7f0000003600)=0xc) fstat(r1, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0}) r44 = getegid() r45 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r47 = getegid() fcntl$getownex(r2, 0x10, &(0x7f0000003740)={0x0, 0x0}) stat(&(0x7f0000003780)='./file0\x00', &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r51 = socket$inet_tcp(0x2, 0x1, 0x0) r52 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003900)='/dev/ppp\x00', 0x800, 0x0) sendmmsg$unix(r0, &(0x7f0000003a40)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000040)="f3db917e8622766087b2", 0xa}, {&(0x7f0000000280)="323aa130c12c3a900b5f51d25e5d9c2f36976c9a4ebfba9e297990", 0x1b}, {&(0x7f00000002c0)="f0a4bc95aebf9859e0200b767ad122364850280d9192e20f5cfb16f088b8c22a27e7ad3574bbbca97765c4568bd67927858fa8d21ce1981564d67cd5e9", 0x3d}], 0x3, 0x0, 0x0, 0x40}, {&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000006c0)="c7b829e82c9d6707c854a0ea7e61a6ed94fb088c35ba3c91c8138ffa1fecd64573751df96f961d9ec9b928c48c6ff50ef1d33eeafc5af27316faf2e2f22f5587c9487d3a4c07258af0933e21943b95dc9e949843a406684bda7fe220d79084266c2b0ff09fc76bbaafcc1728c85123aa993e334ae45f258c923aaeff174377a7a7f5d269bd2012bdbe517fc66f18f0738cf7232eb1db9b2f07c63bb782f4b6f42e2c0de89e5af621190b73f3bc57e01b038e11e20d9768fdfe6216e031fa32d3a038ea86176f4581f5f8b8880f5b0d661516f196ed96dbf918b5b8c171f4b0e46e8a694881e6da1cbb48efb7f32733fc6588202a927310ebe53f2ad586ab8fee7e467e1b768117be8db3f9727203555b5b84427587ef9667d29ed1472986aab25c799121a57ca5efc7d775f59ef6db575760d0d66857209416a5bd11e56b60d5c56da1b69395083579fedf9fcba7b66a0c659193946af79a31b5ece194fbe36af262fa657aeb3898155a063b20e01eb862eb26e99bcbeb4353600c25a430c33ef88ddb54200d929f16418101d44e915eb85ef62e7150387bf73fd41a3b8d2a3ae7b9904dd63803ecb7906d3ef809628dbc93e31ee1e142608223cbd658aa37733e74f586baac4201d11196cdeb7bafa57bb75d85ab78536abb2530872a870f3a7109f1821574b8525a9f67fe2a8d26ea859f4b968211f13a6d8da64d54225dcb68ffd7e0e4319d897b3d1e67c52b67249d3eded7fb968d8d395fd52fbac22c63eded6751d1830587ef8b60fb6e1133e02717363a980b41fb7b9d509c7a2d9fae7438f9e63a3ed3f57d853ce24f7e047e65f75c2d6302b5ec59e77e809103547e22354dbd31fc71c0eed1a06b423be87765fbee2f20b77d01aca4542627f626922d7fe5967fb86ab4fc7c2598949a3eb4123778d7af1280a8990823743029d65aa73599423596da290f35606955d169c9cf7ffc34533e83dd6c99b144ce7d30ceb8cc8483e54d9cf22c9a4c93277b55d1b272bed9e6df39d53c7f11ad116322569a4d211aa5bd3512bb3aeb9fa01bfa9c329437a25eb0a4c0199556eaf3e08154169388eaf078320a45e18163a4343e61597ae1e4774d2e9cec921e5062f7fe075c87c5f64741178286f2e7e58bc8284179de8454e8ad7d1d3da84cd2f01ef5a16a905fb7207227fd446a5543c4ae2a043794638b594a29b934a75ac38ede6d82c4e312d2af7bc0439f525af183e65eaf0365abd4acc863445ec018caf1eded44f0f71c94acc5a645d82199f21d034e7df2fe554ded9f4c815aba8d0b03f56f0422b4ed0c6db748f9a778a7ef1be793e2bf38c92eac2d300bdffb16f465393b5c2cc9e577208cd7983773d5d225ed3592badeb51f4fd090f05339bff1c3eab94d5f8dc7dfe6787e4f16be80e5fca3c1dab5907b926ade392d519054262ccb55e155c2e20ddb619d5b5186d44ff4556e3ee8fab169cc33d9b52e10b7d90edca87dd64f009b91ba4effae825f0acb119d7abfba0d706e9aabd2a7b67a126d9b02994b6b6199c9a1ffd7bda5a7766016097b40b627e2c812ac958bebb7aa66217992030e7448bcf7d4a5f7530f20eef6020ac1a3ba0d683c08faa2758214b3b0494b9d6ab77c58b24f53cfbebc87db24cd145c2631b49feec121e328be1420bcb2c2b6ebe4908bc194c906979ddc8a0873d4fb7ee1510e22a4a1e125f938f26f65b5180df6fb2a1eed1fdd8066592f4db1a1571af9062e9e8d843d8c99fcc84b7f63129f7534d7b9858d6c79d2538b019fcc84d76476f2672118573a32b10ed2fe69104ed3b12844084862b1f9aaf79694246152f6354c5e3f0af502cba2cc2424260b6c7e97b66825064f7ba3de5463ad5af09428e67bca908a7fbf30716dee6837c7e0d4b22ea4ad660d93551a2d6737342e820ebf496d62186d148f9a57e16b1f0ec8a0175bfa1cf2770c4e5cdea483d30de5f2ec95eb94c03815a47118edfe5f928799024e80be8eec895b0edcdcf2c32921bf9f2ad5d08cfb1b91aca6d0c637a4bbdd5227c7eb058b386c82c24ac0e95719773edab57ac971615a2bbbf78b38b80d5090cccf6544f33b167c1e511f681ac3e2a3c38e624cdff64a58461d92a19873afa6ccd4e365a6d77fb70017c9726168ec63d3233ae047fa84d648fb05c18072e3d22e3b60c891ff2a4e98a1b5bda2da7c7fdf5950e84479a65fe433f2c0ee47c917c223f7777dcad4f09002b7df05c08bcd684658793f0f6c66c90eb00ce7b7740f5ffa1aa64800a42d152ec91dc842723f9167d1fef662b982e583498df71090e921e7c9b39f416483f0c520531ac0326d4b34b04b022ee55c38872259220d8184a7e3eb4243981f6f83b567bd199ff7089cfa536644679bc8a9df763d2e8bba894029ac8e31a392f1c3af4b07eecc9da664d45d76f043e2d2a43cddc4f8cc613435ae5b721d81824822bd014cdc731bb9cdd4c907ba7550ca2d689cbdd3d2403a5513e1320b9b7d267d1431eec8ca284f948df6c68e64eb9f73b2da805d46f8782568ed4177e4d70edebbd0003f61c4f2f4d2dc42ee8a371dbefe57cdca98d5a79dcd782d68aad3d6ac95d449dbe74df8b54fa7350417c79d3c0f66c97e7af56286eed4c5f21162f86868da35e44c2e6776811272e17bb1b2ff1398d96c9bf49b8399b034b0f00cb1187aa8abdfed46dc4761f1beb66ae430a814ec2bc09858e8d5713b00c6a50d3abfe6e112ee4bf4fd4f376e6b0173098c5deced2e9ded5226ac4a6060f99a81c930e014a5c03d4a04f6a24219a2c13dead32ecf5ad08fe3f8a181c6d4833fa0c177270feaaaebb9f71fc96f9387c1f29a35201d94d376756a398c63b69115832da71f2cc6de93716a0f26a0dd4e9c4723f6434bd6aaa61c4f16809382fffbe6aeea349c3199d584d32da0325ea3d210920669f3880e90f290c15a16cf7d0507566edd667291ad3b993500195823b3021af33f376dbd8b8e1acd98b54d0c83cec7b50582c8326bddc886c1ce1bbf76e7abf36d2a5aa8c81e5ca2d749a3710cc94a54b5d03ab4e91bd3f4d481f4ae564ff1e40b3b96f3a90408003fd96f898b5b74335ff4f1ec4b66c02f2eea7a0f330cd74970f3c9ca635b54f769deb76ba5a01ebb2609b671102ce38d7e4857c2b31d674c7a6e0bb650266cebc056e15a06442daff382e91b02fc2f2d51ccc803699bd8489a8032f82b6f60da0b0bb22ba73176509ddd3633cb7e12648cf2a81d2dde2d0c1e5c5b52991cb194bbb4d180e08e0ad2424b3aa2484c802474f784c6e1cd8beac8f895fefb09b98289124fe0251b325007b5d0fb2949c0658a62d145cdd034bf0b9a3a44d2e791ac173324f3a1d9802e242eff37e5da22a7c35e43b2f823417a8f85e00e2ae30231730346009785c567c46e69bc6cba132e7e19382ea9298748ab829bd38a90b9a06c02ea9f822dfc86b855177e41a2ba58a874dd86502998849a29726ce1adecae03f3dc8c722b754023a6d815f8cad2d50adbc0321c58a0315300765266abb07d3db3f948cf6435e2f5254df9fd2d6ecedd7e0c4c3e37ed429b1f428273ebd1a06851936e11a45bbf2aad6e7ded29be9749760d2635348e623ecb7b2485f12b5cc5edeb429ff60f0d21c31d989c9d1354d6d45793becb6139a19d1cc98541ed01ea487ac366a345b2f9b2a280b7f22883f11c9910d2c050526d9b89467193824cc840f3e7c9fb7754ebd179cdb53cf6b74cf581c13bc4d0c37afad9a65335f0a33b455e3e99a60d7617c11fb592fe11a363d2a619112a8b2f5b4c7cf9affc7b6d454e973d35ff9765af1e14490f23c6babac4269da19c213cbd2613a20c5b6f520df680615518de9e06625bde49a934ae7d1fb353741d1fe36a7e4ea034546da91fae4dccfb66ac55028eb45f6d3aa085ff31615098c048411d8b18f7fd052eada74c0797a8b36b4c368d0b8ee8331bff8be361c77be8edcbb3f377d1d84120287600e1b3c754efb56cf43d8c51697fa9a41daf9e600643897b2c7a6dbe0989d3aab82f5ed8ec7a55bc8bb81fc5b56e3fceb34ce45e3fece0332babcef017cd348fa44841414910ed30a4cf54c483f70f3e715d20c5f60896b1462312e967d1b16c1e76624f4696120fb49c21f2d359659bbf0c400c2490d56eadbf1bbe4c809ab5b2b2cb34437b93e52b48a6426f6205cf1794650d6abfa2ffe962e630a0d0deeddfb8c77622cb456bbd5df97c2f0233b151a9798497926d23e67186c24cdba7b1c4204ad93a85e352d33aba5a4783ecc357dcf6f583af58d89e623eef27da0d87ead0e37d95470197350a599ab85ed72285d358c040370576a9f9ec3cd5e21ff3686fd3f3f02810718b09709caa162a033633fe0b678643b6e247a33801e7bc5d9d657e0396e838afc925779b2cd76752b6046d96c52e1674ff0d2b0a9756d79161225d88b9fe178da2a998f8afaf17aa9dca7d75d0ac4fb9acc85546efdfbdfc2ab4fd17d404295acedfc0b0fdbba786c3b2342db18038b02b7d2263e0d444ad168272e352d78988112d770ee7d072b74fc3858b8596e82f6e71b939c5bb2a46c3fe5d6085beab7479b7182326581dd36fa0f38b46e545404463b02e6dd33d790f90421f920daa2f439b0385d4ef3e7a57de31756569e030cecdeab7d5b5c93b5b9511f68ce85e76ece77162b6e195d1ae8772809ed10527aad716b4090a6bcda3e629709ede3e68d28843967083603fa6bce3f113d4928fc02b3ec4095435d951022f64b8bd88d26a42b5ddd887e7eebeeefe3f4bd706c4c7c1237dc9da7fb45a4eac20011265a47f8df55f2697e1baf2299d457585b10b057482d918d725178c5091d165861843f63819bfc59984daabc914035b5e7f55d43c9dca3ad06660b5228a20a8063cc3684a43d8d120a2f7f9fae0b1d0320ab533e01e8edc1b6016ff9005cf9c73c78dfec3353c31d4fa9ca4e4c353691b6ff2978ca17ff4d8c43c49d2f03a2259f5fadd66568388d26efc854f9d66af687c57ee5f5a50056ea5f12c231275f0f84e0c7975105919db85e0cfc0a27bb52ee847d9d318113294cf748a75fd954be43dc284a35446b73cbcbd771c6ac0030c0224d9594a90711735255ff1951e76f62666ca7b868548f5188db547f7b21310952735a932dcb8e50fd1bfa26b93864d6e3bce215bdbdba1fc0488b20eec5806880f9d6cc9ca42458a4a2ac61c8e6d86f63d1475102cf043db5c4b8a5bf957a93cfb8a99701ba682f6223f2accaaec930d497b4bd7c9a1a1221c6423b84f4fbf7b3bd19455da2ea9b1041a57839ab0e7bfad5fccd8cd3ef3c6fde07c06d57beb2c73555409251ceed02450a1fb985792753ed1583d9e3b9c5f88ee7effa1ba5b09217800c93758cd80847ff733ef3e39f18d85656d41207726f4b5b2af970cd928bd7d32aed515442248df2d21283a61a361fef1f63f694f683f147e01447b9125812635d1c119f5b5cb4db93bfdceae3c45c0ddde1e80b0918c039066fb875727f533b4325c3b12307322c73e849a7287820fa60ce8be4db7bd5832230a658c751813e5d665e6476e9feab123adcb966e5b97e102394ea38531060eb82f630016b668523a1a81251c2c5e7aef13b6e07ca73d3f7648a38d70b5103d6a1881f358d50b9ec9a1a421567c6b1143b961b563fbc9c7f47b720f63a42db79cf81f62f2c421e1a5f1a4640a534d724e6b5c942f23ac6f13cfbfa0c87cee64a557f7d7e84a7a6e22776ea1fc14aa789ea8a7f71f726bbbd89b58fbc57a7e5fa9032248ef246ea3", 0x1000}], 0x1, 0x0, 0x0, 0x24004000}, {&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000001780)=[@rights={0x10}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x50, 0xfb8fc399ec2c6e0c}, {&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001880)="2e2db25f30587bd1f165f02f26f6667aa542a025de2f79fe9cc0eac4", 0x1c}], 0x1, &(0x7f0000001b40)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x40, 0x4040000}, {&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001c00)="fc373747bc7a8ad98bcf7b343168283bd81cbae824932a3eac8776b67a3011a6737fa7910402b1b41127140c71324eda5e2456d88b90125c4e5bb31957705fad11301b93e1d3191a23915a09d22d54ed7d5556e4b8524b66228ee4cdd6bf359b42001323752f8d2a4583576e529ff65240d4f6137c259301f125e310cb748897b4864d7e9a94654b1495410dd59ab2da", 0x90}, {&(0x7f0000001cc0)="ce17575d58db7ce56fb7637b86367ddb08420ccdcc60ecb13f0f8f5227c9332f465ce26acce0d9462e609c2379a90b96cd085a744c8fbb51ac1ed0cdbc21859140cdf933652e47c16cd24611d38f8543d92c025ff2dce56f0d29737b1c29a3cc1efcb7fb3d0816a8ae2d976efb19bcdda6172f963815974777cbe0f0f6ec91665bf32c8d59982c98f822950d8032b004046293b6a2ac4d838b60f2ceba4e6a9f1afdc0da4d0c0cec8f8bd1dc", 0xac}, {&(0x7f0000001d80)="137b462e855cbacfe9d99d11f1abb8e59642139542f9c43372203675aedf3127a891d258c3367e501a96dedb785939b38c160cf2e8e8bece7592893dbfe1b88bda21b89752778e16c7a1c0e17adf8b8aeaeee8dea3b182d588414099dda68d4a2f0d233e0f9cd5693d26a30e2aea74d8cbd5c4aa385b6d02f197fa650178e196ee77fb3e53de1d64a22b50fcc8529f337276fff733f65d296e242075fdd0e16d8d42913d166293", 0xa7}, {&(0x7f0000001e40)="c44e17023980b469d0937c04347c0b4e3da27117dc1468cd858f4931fe0670371977dd787a305ce5e0493d2c6d95579d55744c960b8521201810b747aa4feea09fdda39e6b37d1689ab3cb7bbc3e0be5c3c3babd22719d8f21be56e192170ccb608dcb363dde9d626c8d9fb899de4d577c28a2eee2f02d53bd9e6ecec83f68a4885fb187fbeb0fcd25fd966fbdf50694c6f082ebd9e1449119bea7fa0fd3dae6c5d8181e060f6365b2cbf4a1d3422f1e12208f8c0fa71dccc101f9c743ddde5a6f95875bfbe42ee75f6ea4312aba3614e6d8a96deb88fc410452d57edec5704436f1b7424dd8a96b9c8f3f450400746e9fd9", 0xf2}, {&(0x7f0000001f40)="edb10c0b6442478c9e3643bed34fc4458e3ba49aee96f1df78505e5540d44e801489f7769d5fddf1e6bc1add8fca3b4b0b5bc4b0ef5b2a0b4534d0d33df0878410fd643f5496cde8bf42766e22316d1c9dc5ef1a4b75e68f6cbbc1e7b1b03323ae10fe6bfaa6a8612c4c34583edfe460ee8f9a471dfb5ff73bc53a63cf88e5f21b84b49103c6b550e15519386c1f8e7f484b207f4bf707fa60388b3995dfe43700f07260db9f43bc4080678795aad05578fb4251f30bb407fc6266b8a12a14c51a8baa943727ae70bc1ccd3003cb4872a6e9316104fbbdfb", 0xd8}], 0x5, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x30, 0x1, 0x1, [r2, r0, r0, r1, r2, r2, r0]}], 0x90, 0x4000000}, {&(0x7f0000002440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002680)=[{&(0x7f00000024c0)="c8bc1429904ffa656772dfb1414803154e0065fdce30334ba77faa8e85032b14a06964313793a156e901d769dd344a1b09698b252c565b82c825432b4153cc41f3081d00a7d59ecb13c8c3f483d768f3627cf73834f0c18dbe1498f6d2f2ad399ff9a7cfd0d2c3fd635a867481a470a493719afdd791621889da180572490cc36509b8c6dbe74a67273b1dd29b15d97f308dab2df790da118be9b356dfa6c8c624909c9ce4765aa2fb6e500d65f875c13d5cfbcd88dcb525923185cd16ed16d2238ded9f772cd8925128b4a8372155847ca41fe64349d278021c105e6019687d6c0392619ebad7922d9ba2363b2f38a1174e7b45c3228d82", 0xf8}, {&(0x7f00000025c0)="c0e44d34fe3dcf8e7ff0c5f1c1e1865818a205a1c7548d6c0484ba5a3f9937461ca2c8cc1412b340ba939c19f28e1eedcdbff31fc8d98f84afa71d220e11abe8891a1158f92c07d485ccd5b888cefd7e820a25b3bad08d4f3afc07ccda914e2b927d68ca8378170dfbfee940a2e2d84d05156172f685c079f2c6d7cd2435ef941c5465db719405d2769d1b4ea398f161adaf429f85bfa75aabd28fee46c98df3befdb0dbf30adb21e354a601972d591ab7212818", 0xb4}], 0x2, &(0x7f0000003080)=[@cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x20, 0x1, 0x1, [r2, r0, r0]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @cred={0x20, 0x1, 0x2, r39, r40, r41}], 0xe0}, {&(0x7f0000003180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003200)="1e46c05527200a28", 0x8}, {&(0x7f0000003240)="c7233088ce8e4bd1e04644bcf5a3d4b7d106d25ac3b2de3725da7b093a43ba02855410dca6d919220100980dd42ae8695050f7fdf2403e5976d253806a91d4b9a6744b24c07d65fb14b0f1c52f70ae6ddd1ac00b79284488f875e518247580d7ec32fdee2151a035710202ffa08d89827668dcab5a70774d7b8e730ae3ea3a9be436066b938da235a79590ccc497a8784524c3060e5b26c528094ea2e49999", 0x9f}, {&(0x7f0000003300)="3e620e967283a998acecafa5f7d485816b13475f27c9b437541fdd17a3084d4bec503a20fedf60e91b547efe113f13b81698facb644d1cc6e778e24aec99417fd5c3ff43d825ee6357155e48d98fff785cd9363d5dd6cc917c1bf1d5c52caf6b3b2d5bc71bf69b4932fb2b0b6045a05f5189a286b074", 0x76}, {&(0x7f0000003380)="9aae963b7629e2a6e2993135fcb33f11baa658b6656180ccb7fe8ad912318f72c4ceaf04f3e27d3b42a99dbce648f34f3128797ee65e448f8490eb95e51c400af8b571e71244c88d6584b9d85dc6a6b35b494a46af55975409f0563ccea9f2e98c71dd0547284ba775b19291c52456d91e9a54bd36e4ede62570753ad5b96931a0dc779d300bb6fbb50f661bf994f1b27f5f99f849b401e4d01ef6d37648daa9ba856b2a9ecfa984c3e88f38ede831ae39d5bea19a7581985d4fa7fb7f5d796df9695b2a4374fbd9a4feccd4a5c32f26d06a93d054c6f9a5e21c719477a5d33e77405d16d32c154139f6d93dd9595f1f59c2f3563687b2", 0xf7}, {&(0x7f0000003480)="d25d809ad9b9340e80df76795f0b17d88f3080d5a2b84fc0700a9616fd4dcd66594327bec3cbe3f61b098b2949555b6591b8e5cfa4279bb66a71296482e64360ef5e110d69fe783dc718460a8ecd5d13dcbc752c61fcff9c8928b9191623511862f1fe3742b0ed9f034ccb046573fae309793ece42ffbeb7594756971f4999b6efec079778d644af6f0d64ab3011a7a2d6714e86aa2f61108ae57a4accc275de54ee146f7a09d7f5e071e47cb1f005", 0xaf}], 0x5, &(0x7f0000003940)=[@cred={0x20, 0x1, 0x2, r42, r43, r44}, @rights={0x20, 0x1, 0x1, [r0, r2, r2, r1]}, @cred={0x20, 0x1, 0x2, r45, r46, r47}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r48, r49, r50}, @rights={0x30, 0x1, 0x1, [r1, r51, r52, r1, r1, r0, r0]}], 0xe8, 0x800}], 0x7, 0x4000004) 03:33:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x2) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000400)={0x7ff, 0x3, 0x3, 0x9, 0x7f, 0x80000000}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x4000, 0x0) dup2(r0, r2) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000180)={0xf46, 0x0, 0x400, 0x0, 0x8000}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000280)={r3, 0x0, 0x81, 0xffffffff, 0x1014}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x400000, 0x0) r5 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) fcntl$dupfd(r4, 0x0, r5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00090000ac003a9b09b2dd18ac00e60b050000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffe12, 0x0, &(0x7f0000000180)}) [ 594.662958] binder: 28477:28482 transaction failed 29189/-22, size 24-8 line 3012 [ 594.663046] binder: 28477:28482 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.701799] binder: 28507:28513 transaction failed 29189/-22, size 24-8 line 3012 [ 594.716844] binder: 28507:28513 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:51 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10}) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000500)="1a67806bb71e74733f9573c2db9eb74211e31dc2dee57c5486146bd40a62e6737e64dc25b8256ec100392a0b19e3c106110a8d0e0f0c01fb74d221801bfafcce46a347399e13d1439e2e24a21222135db2537da03bab8321b9e31c9ebf1eeb49d5264ac03b68af2aff1b810795a7f0a75c25dae1b0efbeb5462ca4e5b2a692a0679565beed7373d98631fd76bf81b05abdc3f3cc300999c8b7334f69ee4f228ab9ac9a3ec2ce3788", 0xa8) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getsockname$unix(r0, &(0x7f00000005c0)=@abs, &(0x7f00000002c0)=0x6e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r5 = dup3(r4, r4, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000004c0)) [ 594.742963] binder: 28483:28518 transaction failed 29189/-22, size 24-8 line 3012 [ 594.751115] binder: 28483:28486 unknown command 262144 [ 594.756730] binder: 28483:28486 ioctl c0306201 20000180 returned -22 [ 594.762346] binder: 28512:28519 transaction failed 29189/-22, size 24-8 line 3012 [ 594.762444] binder: 28512:28519 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.825238] binder: 28515:28516 transaction failed 29189/-22, size 24-8 line 3012 [ 594.833388] binder: 28515:28516 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.842391] binder: 28522:28524 transaction failed 29189/-22, size 24-8 line 3012 [ 594.850671] binder: 28522:28524 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:51 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 594.907471] binder: 28489:28491 transaction failed 29189/-22, size 24-8 line 3012 [ 594.907502] binder: 28489:28525 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.002385] binder: 28526:28529 transaction failed 29189/-22, size 24-8 line 3012 [ 595.010695] binder: 28526:28529 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:51 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00'}, 0x30) rt_sigqueueinfo(r2, 0x35, &(0x7f0000000280)={0x1d, 0x4, 0xaeb4, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 595.189666] binder: 28494:28530 transaction failed 29189/-22, size 24-8 line 3012 [ 595.191060] binder: 28494:28531 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 595.267409] binder: 28533:28536 transaction failed 29189/-22, size 24-8 line 3012 [ 595.276125] binder: 28533:28536 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:51 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b040000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) [ 595.497404] binder: 28507:28537 transaction failed 29189/-22, size 24-8 line 3012 [ 595.503405] binder: 28512:28519 transaction failed 29189/-22, size 24-8 line 3012 [ 595.503496] binder: 28512:28540 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.503502] binder: 28512:28540 unknown command 0 [ 595.503511] binder: 28512:28540 ioctl c0306201 200003c0 returned -22 03:33:51 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 595.525896] binder: 28507:28538 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.545825] binder: 28542:28545 unknown command 1035 [ 595.545837] binder: 28542:28545 ioctl c0306201 20000140 returned -22 [ 595.546201] binder: 28542:28545 transaction failed 29189/-22, size 24-8 line 3012 [ 595.546281] binder: 28542:28545 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.547397] binder: 28542:28545 unknown command 1035 [ 595.547406] binder: 28542:28545 ioctl c0306201 20000140 returned -22 03:33:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a63e100"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000034650fa5cfd42dd9cfe4f8982f3d760b801c22868cfbf6e3fab877bcd47b0be065d6b7b55e52572d8556ea6ebc975322cf52b77a77caf5a772abaea55f778beb66a3fc6f339b7ce3b3a4b95874e15b612fa28af873"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 595.547447] binder: 28542:28546 transaction failed 29189/-22, size 24-8 line 3012 [ 595.547535] binder: 28542:28545 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.575671] binder: 28548:28549 ioctl 40087602 20000040 returned -22 [ 595.588195] binder: 28515:28543 transaction failed 29189/-22, size 24-8 line 3012 [ 595.588239] binder: 28515:28550 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.588246] binder: 28515:28550 unknown command 0 03:33:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a60730000f5bc", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x100000142, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000040)="40fd76"}) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000180)=0x5, 0x4) 03:33:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80001002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, r2, {0xe, 0xfff3}, {0xfff3, 0xe}, {0x1, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 595.588256] binder: 28515:28550 ioctl c0306201 200003c0 returned -22 [ 595.610948] binder: 28522:28551 transaction failed 29189/-22, size 24-8 line 3012 [ 595.611026] binder: 28522:28524 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.639779] binder: 28554:28555 unknown command 14770970 [ 595.639790] binder: 28554:28555 ioctl c0306201 20000140 returned -22 [ 595.639857] binder: 28554:28555 transaction failed 29189/-22, size 24-8 line 3012 [ 595.639930] binder: 28554:28555 unknown command 0 [ 595.639937] binder: 28554:28555 ioctl c0306201 200003c0 returned -22 [ 595.641026] binder: 28554:28555 unknown command 14770970 [ 595.641034] binder: 28554:28555 ioctl c0306201 20000140 returned -22 [ 595.641080] binder: 28554:28556 transaction failed 29189/-22, size 24-8 line 3012 [ 595.641165] binder: 28554:28555 unknown command 0 [ 595.641173] binder: 28554:28555 ioctl c0306201 200003c0 returned -22 [ 595.643501] binder: 28548:28552 transaction failed 29189/-22, size 24-8 line 3012 [ 595.644326] binder: 28548:28552 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.722016] binder: 28558:28562 transaction failed 29189/-22, size 24-8 line 3012 [ 595.728395] binder: 28558:28562 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.728402] binder: 28558:28562 unknown command 0 [ 595.728411] binder: 28558:28562 ioctl c0306201 200003c0 returned -22 [ 595.748373] binder: 28560:28564 transaction failed 29189/-22, size 24-8 line 3012 [ 595.749031] binder: 28560:28564 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:52 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7267c310", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) 03:33:52 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02640000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) [ 595.788442] binder: 28526:28565 transaction failed 29189/-22, size 24-8 line 3012 [ 595.795648] binder: 28526:28529 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.848268] binder: 28570:28571 unknown command 25602 [ 595.854227] binder: 28570:28571 ioctl c0306201 20000140 returned -22 [ 595.862235] binder: 28570:28571 transaction failed 29189/-22, size 24-8 line 3012 [ 595.870953] binder: 28570:28571 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.879038] binder: 28570:28573 unknown command 25602 [ 595.880377] binder: 28567:28574 transaction failed 29189/-22, size 24-8 line 3012 [ 595.880470] binder: 28567:28574 unknown command 281241458 03:33:52 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:33:52 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x480, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000000280)=@un=@abs, &(0x7f0000000040)=0x80) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\fc \x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="d0a2090000100000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 595.880478] binder: 28567:28574 ioctl c0306201 200003c0 returned -22 [ 595.905176] binder: 28570:28573 ioctl c0306201 20000140 returned -22 [ 595.912245] binder: 28570:28571 transaction failed 29189/-22, size 24-8 line 3012 [ 595.912281] binder: 28570:28572 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.966638] binder: 28579:28580 unknown command 2122508 [ 595.972328] binder: 28579:28580 ioctl c0306201 20000140 returned -22 [ 595.979285] binder: 28579:28580 transaction failed 29189/-22, size 24-8 line 3012 [ 595.988664] binder: 28579:28580 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.997478] binder: 28579:28580 unknown command 2122508 [ 595.997544] binder_alloc: 28579: binder_alloc_buf, no vma [ 595.997581] binder: 28579:28582 transaction failed 29189/-3, size 24-8 line 3135 03:33:52 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000002c0)="65d04c98a6186b09949e0dfccdb20b8ff261121fd16875e8f55f619805a1b802c94e29442d48e9270ca8e020f178ff407498e24d7e5340d767abbe43", 0x3c, 0xffffffffffffffff) keyctl$describe(0x6, r2, &(0x7f0000000280)=""/31, 0x1f) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=0x0) wait4(r3, &(0x7f0000000400), 0x4, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:52 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x41, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x40010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={r2}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) [ 596.000566] binder: 28579:28582 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.001048] binder: BINDER_SET_CONTEXT_MGR already set [ 596.001059] binder: 28579:28583 ioctl 40046207 0 returned -16 [ 596.022667] binder: 28533:28584 transaction failed 29189/-22, size 24-8 line 3012 [ 596.023067] binder: 28533:28584 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.051557] binder: 28579:28580 ioctl c0306201 20000140 returned -22 [ 596.107292] binder: 28586:28591 transaction failed 29189/-22, size 24-8 line 3012 [ 596.116820] binder: 28586:28591 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.120369] binder: 28588:28592 transaction failed 29189/-22, size 24-8 line 3012 [ 596.120519] binder: 28588:28592 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:52 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xfffffffffffffe8d, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000000d553213b90c77cd0bae15c5e8cd53763d74b284d5516ecae210671c42501095579d6e5e1463d73b7a05ea125c6960c478e21a92e42df2664ee114e1b1f27ee619132a4624d167bafd57aaa4c063d18b90d445948d60245d95c1218d10b8b23bfe754ba1201712519d1515ce52e0f37d7af97925d6434ee0734f6d2b7e2a07c6d8e852e6a00cf44bbcedebfa4b62404c98d188742a3d71e45bf1965d69cc1e496a5820bc7b21ed30e69601468fc80d2147473aa63148618b172f0ff144326497d72bc1ba06e164fe98e6017c5751d68092cf3724fe193f6a12b83033da2eb4ff4dcbd"], 0x0, 0x0, &(0x7f0000000180)}) [ 596.374389] binder: 28548:28552 ioctl 40087602 20000040 returned -22 [ 596.377038] binder: 28548:28594 transaction failed 29189/-22, size 24-8 line 3012 [ 596.412828] binder: 28595:28597 ioctl 6611 0 returned -22 03:33:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000480)=""/185, 0xb9) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x2, 0x1f, 0x3f, 0x3f, 0x5ff79fc}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xffffffffffffff99, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r5 = getgid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={r3, r4, r5}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r1}, @request_death={0x400c630e, 0x1, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000280)=[@flat={0x73622a85, 0x101, r1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0x2e}], &(0x7f00000002c0)=[0x38, 0x30, 0x48, 0x38, 0x38]}}], 0x74, 0x0, &(0x7f00000006c0)="b3dc0f77a4fde17acaf2046445dcc9ed537d1e342fb7bbc7817a479e1faef9672049d25fccd34d89affa5e4cc21d54193972502b0b68804a46a9d43d3860fa7b098f76efc4bd8f8790d28fcf735fb6034c238da5654411ef70e7b1ac02cf56f53bb3ef805fd9665c523afff24bcb69fd30348d46"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 596.464365] binder: 28595:28598 transaction failed 29189/-22, size 24-8 line 3012 [ 596.466844] binder: 28558:28562 transaction failed 29189/-22, size 24-8 line 3012 [ 596.466886] binder: 28558:28599 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.466892] binder: 28558:28599 unknown command 0 [ 596.466901] binder: 28558:28599 ioctl c0306201 200003c0 returned -22 [ 596.502240] binder: 28560:28603 transaction failed 29189/-22, size 24-8 line 3012 [ 596.502521] binder: 28560:28603 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.519628] binder: 28595:28605 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.538319] binder: 28600:28608 transaction failed 29189/-22, size 24-8 line 3012 [ 596.546588] binder: 28600:28608 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.568452] binder: 28604:28609 transaction failed 29189/-22, size 24-8 line 3012 [ 596.577579] binder: 28604:28609 BC_FREE_BUFFER u0000000000000000 no match [ 596.584696] binder: 28604:28609 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 596.591996] binder: 28604:28609 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 596.599020] binder: 28604:28609 got transaction to invalid handle [ 596.605428] binder: 28604:28609 transaction failed 29201/-22, size 64-40 line 3012 03:33:52 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x478, 0x260, 0x0, 0x260, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000400), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @loopback, @multicast1, 0x5, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @local, 0xffffffff, 0xff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}, 0xad, 0x7fffffff, 0x1332, 0x80000001, 0x7fffffff, 0x0, 'rose0\x00', 'teql0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffff, 0x7f, 0x2}}}, {{@arp={@local, @broadcast, 0xffffffff, 0xff, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, 0x3f, 0x83, 0x701, 0x6, 0xca8, 0x10c3, 'sit0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1000, 0xffffffffffffff7f, 0x200}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001cc0)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000001c80)='$keyring\x00', 0xffffffffffffffff}, 0x30) r6 = getuid() getresgid(&(0x7f0000001d00)=0x0, &(0x7f0000001d40), &(0x7f0000001d80)) r8 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001dc0)={{{@in=@dev, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000001ec0)=0xe8) fstat(r0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000001f80)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001fc0)={0x0, 0x0}, &(0x7f0000002000)=0xc) r13 = getegid() sendmsg$unix(r0, &(0x7f0000002140)={&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000bc0)="2c01c26bdb002c5bb7c60220c7a4e4e5b8004cd3d19a8a71c80b2a3e0d33d3d2d1710e2269f5eb83429c03f22d579b83765e2a526d965927eff036159ae48cc432e95714006fdc413a869424ee", 0x4d}, {&(0x7f0000000c40)="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", 0x1000}], 0x2, &(0x7f0000002040)=[@rights={0x20, 0x1, 0x1, [r1, r2, r0]}, @rights={0x28, 0x1, 0x1, [r4, r0, r4, r0, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r3, r4]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xc8, 0x4080}, 0x8000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000280)={0x0}) r15 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000480)=[@release={0x40046306, 0x1}, @acquire_done={0x40106309, r14}, @increfs_done={0x40106308, r15, 0x4}, @acquire_done={0x40106309, r16, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe6, 0x0, &(0x7f0000000500)="d4692264821e7589fc11f1d923223b6cc9d543590d8c1c40c21aeed0941e4f6899f3270e20c074ad8d1f428b12f37adca2b7224db62833bbf41b1a2f854d366fa706b21323ec811acccc48f2229a92c29f4014a6e19c9561635c0d75e0531498712a8e62157ca2adf14c7641dc96aaf332ec070dca3a45916c7d65f4957d63e5c804143b02028dd66fb3bd8625a08e9d5d5244137cb01bb18c9f7ac5dba40a846d71d7ebe95b578eed919c08fcf7840317469a413dc95761e10c015e8bb385a29a9947a170b044b0e2739abb3f5a8f3b525ceb03b15ed05e24619c9679f2d1faf73470598b29"}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBENT(r17, 0x4b46, &(0x7f00000001c0)={0x80000001, 0x8, 0x8228}) ioctl$BINDER_SET_CONTEXT_MGR(r18, 0x40046207, 0x0) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x4, 0xe4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="ec90b15598ad0412"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 596.614560] binder: 28604:28609 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.633441] binder: 28567:28574 transaction failed 29189/-22, size 24-8 line 3012 [ 596.633484] binder: 28567:28610 unknown command 281241458 [ 596.633506] binder: 28567:28610 ioctl c0306201 200003c0 returned -22 [ 596.729509] binder: 28611:28614 transaction failed 29189/-22, size 24-8 line 3012 [ 596.737785] binder: 28611:28614 unknown command 1074815746 [ 596.743848] binder: 28611:28614 ioctl c0306201 200003c0 returned -22 03:33:53 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) io_setup(0x80000001, &(0x7f0000000040)=0x0) io_submit(r2, 0x6, &(0x7f0000001940)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0xf, 0x3, r0, &(0x7f0000000280)="7f29a82a7364ada441958f46292b3b1ef307a00055924aa81aff80ae3af534d1d5c054a1ac897ff26f2a57f67403b7940a880dbead8afe313ca4bc36c526da64b456", 0x42, 0x3ff, 0x0, 0x0, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3ff, r0, &(0x7f0000000500)="b38653aea63dfddac52c9bcaa489f06ec83168976c2031f119c12b1ccf5aad315329f99933b5246b35f1472c7e6fc4efe482aac41ea40fa1fd7b603154d120940ef312fa6ecee0c0ea262e8a3d7ae2e4a31e6718a77f4b3b73b88b60416a6b37bce9b46ed08501ecc9e5298776e979da7d0c53ead7c7e907779cfbebc61bbacdfcf2eb5d49709b87f979f71d6a1652e6e2835cce4c8b024f54fb4a1438810fc09c41def95b7eca94e37c9b76c154d3dd0c199f477a6a2c023a147379bc72a7e5ff8ac1336de10d7a15", 0xc9, 0xfffffffffffffffc, 0x0, 0x1, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000006c0)="0e90f6d4978ac5146ce80e19b050b6c3c15dde557fab1da6b4788e103479d67d9dc3cbf2bf2f891cdab05c4eb026a93ecc19b57702dab7b9bf0606be225b81a9737481a2353bc7f7f492bb48b0187d0976ed16313b03f8e6551e35d75699681e8fc81a94c709a4f13e4e04c6301ae8f4dd5dc977644afd4fe2d1345daa852ea2042af0837f746473a3416e8d07be206b83a7f4fcf7b63206be6b0403b6c681667ba769f3228c", 0xa6, 0x7a40000000000, 0x0, 0x1, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000780)="c61d4ce88535f2360b30b173098cb82ff4d12dc6df2665fb8ce5d2787eb6111e9bede47dbc9c682873eb63c74d2094e03dc0c497a2b6c2f9281d3e50c8f64d67bc944273bae879ad7da8f0620c2b0d10a0e9042b8e43597b2a276e011feb0ef246d1f0978117d47a2b0fe76be5f13fdec4110e81310e05c756c84b0c25a25ad12bbd769a1147", 0x86, 0x4, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000840)="4b10e5dff20588cf47e18ba17ae2b008f14021571ef817b84d83c98f32da378ea3ff15a1d8d23ffd8f121c9ac3361c0a45aa9034cd5172c1b601585420a81229ee3ee3b175835be986618aa00a8a48676e82bd6bfa4b818b249bf1a3fdc2b9169a93231f95556253e831a1f3b222ab6d62cd96c7308883a56ee9600691329d3deeb63fa6dd4a0843eb7950d254cedaef1ab1fce4b6a8b17aaf87c671e386eac1c718b24a5413ab7a25139045b41f8da5c44062a03da4030ffcc77209fb73844689c783d1f5bce137a7e2a1f59454713b34", 0xd1, 0x10001, 0x0, 0x3, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x80000001, r1, &(0x7f0000000940)="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", 0x1000, 0x0, 0x0, 0x2, r1}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:33:53 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0c630000a69f1f92e0bd9b1f8a5454b0b6045a7e6fb6a5596c714ec0285823265d0491cd958fbec6fcd458969cd84ba58f993a09cf2320c663573963a7da4adf6ef89cefe54db33a9620cf74f3408e7719cab887ec70eb9b3c3c3fea6148bc16c530d43ed0b12d9ce9db4506967ec565ad607b9986c6a97b74526373594032af1b0678eaa50b256e0775c81137398187fe5a787464bbb1040f112d60c4"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) write(r0, &(0x7f0000000480)="52bc2dcd334698e71f5035989b367ceeff835b37bdfacdf66974b775b90405ddce899d87a69d2cf2d49f1e902fb0526c769bacfed14644bacc571151816e03554b5a47128062b5ac064e58eeb714b7c4d32a1e2c0f2bca3de8a55914e1246d128daff6043a483f653fcf970434ab367aa37f02336db8c155dcafe6330ad20e4a11cdf52b5ea53a67070c5e6ddd846a3bda036bd6ebed53d9c55e79628cfb1fb90007a58a0ce6e99270c8d194e72ec064cb5197aba511fcb52aca", 0xba) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000280)="dcf8d7bc119dd527a16b8fb4f51d075bacb36eef6b6d0ca5a787bd2ed89debe8d8779e24f8c47bdc3b547aa783d7246599250f835038d8ee63d090aa306846", 0x3f, 0xfffffffffffffff8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000002c0)=0xe8) r4 = getgid() keyctl$chown(0x4, r2, r3, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendfile(r1, r0, &(0x7f0000000100), 0x5) r5 = add_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000640)="1c8b5431b8b0b96338558916df9afe651522db276318256ccf700b2bf16e", 0x1e, 0xfffffffffffffff8) keyctl$reject(0x13, r2, 0x7, 0x3, r5) [ 596.860702] binder: 28586:28615 transaction failed 29189/-22, size 24-8 line 3012 [ 596.869010] binder: 28586:28615 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.875459] binder: 28588:28616 transaction failed 29189/-22, size 24-8 line 3012 [ 596.875710] binder: 28588:28617 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.964624] binder: 28619:28624 transaction failed 29189/-22, size 24-8 line 3012 [ 596.973155] binder: 28622:28625 transaction failed 29189/-22, size 24-8 line 3012 [ 596.973222] binder: 28619:28624 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.973646] binder: 28622:28625 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:53 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) lsetxattr$security_smack_entry(&(0x7f0000000400)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPIN\x00', &(0x7f0000000380)="8db7ab50bade", 0x6, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300000016e9a6936a56421610b7562edc618ae364170c6824eb840211369e9f95f70134403359c31c58e5191a2dc4466bc219370e0d4e39cf0079515dfc223dc88fde230223e485d48e19ba13e67c8bcff6710cea3626176d4c4c763a24ab9809"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000d7f65dccbd79e0992845f346f26e855f43ac8fa88dace8d9cc663d2f8ea1f73886121547cac86bb5f738d6927f88f203", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00\b'], 0x0, 0x0, &(0x7f0000000180)}) [ 597.205773] binder: 28595:28605 ioctl 6611 0 returned -22 [ 597.212498] binder: 28595:28626 transaction failed 29189/-22, size 24-8 line 3012 [ 597.220532] binder: 28595:28598 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r2, 0x12, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x448c1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 597.293567] binder: 28600:28608 transaction failed 29189/-22, size 24-8 line 3012 [ 597.293573] binder: 28600:28630 BC_ACQUIRE_DONE u0000000000000000 no match [ 597.301581] binder: 28628:28631 transaction failed 29189/-22, size 24-8 line 3012 [ 597.301715] binder: 28628:28631 BC_ACQUIRE_DONE u0000000000000000 no match [ 597.323921] binder: 28604:28632 transaction failed 29189/-22, size 24-8 line 3012 [ 597.332519] binder: 28604:28632 BC_FREE_BUFFER u0000000000000000 no match 03:33:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 597.340018] binder: 28604:28632 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 597.349591] binder: 28604:28632 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 597.357177] binder: 28604:28632 got transaction to invalid handle [ 597.364343] binder: 28604:28632 transaction failed 29201/-22, size 64-40 line 3012 [ 597.372935] binder: 28604:28609 BC_ACQUIRE_DONE u0000000000000000 no match [ 597.417293] binder: 28634:28640 transaction failed 29189/-22, size 24-8 line 3012 [ 597.427482] binder: 28634:28640 BC_ACQUIRE_DONE u0000000000000000 no match [ 597.443761] binder: 28637:28641 transaction failed 29189/-22, size 24-8 line 3012 [ 597.451975] binder: 28637:28641 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:53 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r0, &(0x7f0000000040), 0xcf83) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 597.526338] binder: 28611:28643 transaction failed 29189/-22, size 24-8 line 3012 [ 597.614958] binder: 28645:28647 transaction failed 29189/-22, size 24-8 line 3012 [ 597.623197] binder: 28645:28647 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0xd8f2a7152eb58d3, r0, 0x0) 03:33:54 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 597.710688] binder: 28619:28624 transaction failed 29189/-22, size 24-8 line 3012 [ 597.722971] binder: 28622:28625 transaction failed 29189/-22, size 24-8 line 3012 [ 597.737327] binder: 28622:28649 BC_ACQUIRE_DONE u0000000000000000 no match [ 597.782288] binder: 28651:28657 transaction failed 29189/-22, size 24-8 line 3012 [ 597.790651] binder: 28651:28657 BC_ACQUIRE_DONE u0000000000000000 no match [ 597.809398] binder: 28654:28658 transaction failed 29189/-22, size 24-8 line 3012 [ 597.817651] binder: 28654:28658 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:54 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) lseek(r1, 0xa, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="ef2d2227f27bf0a002dde4207a9649b9eb65de2f088318f2e9b0774b5ac1a3dcc39a824d1155c4abcae25f3d2ca2a85dd68bd0a0295498f68edd603537edab520b898d71e7e20ad0948a8b9eb36eec46f3315b023e4e3b8da2f343811c5ad6") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 598.049931] binder: 28628:28659 transaction failed 29189/-22, size 24-8 line 3012 03:33:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x40047, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x80000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xffffffbf, 0x1009000000000000, &(0x7f00000000c0)="eb558bcb9390a8d53b0567baa0fa98c7394b05e4a924cdd4b191350c2a59730fde77a1952975fdd1"}) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x82013, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000020000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 598.130958] binder: 28661:28663 transaction failed 29189/-22, size 24-8 line 3012 [ 598.139176] binder: 28661:28663 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.154341] binder: 28634:28640 transaction failed 29189/-22, size 24-8 line 3012 [ 598.155453] binder: 28634:28664 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c63000016cb0c918c16c2826941cab098955ce305231e7e6ad3ed4204bf11318a03c79ae396ac047003234b71af80f7b06bd14643d33de71925f7ffbc1e22be2706eb66463b964a814040c545c4"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) close(r0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="1f00000000000000"], 0x0, 0x0, &(0x7f0000000180)}) 03:33:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x4, 0x0, 0x0, 0x800000000116}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 598.199295] binder: 28637:28641 transaction failed 29189/-22, size 24-8 line 3012 [ 598.201082] binder: 28637:28670 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000ffff00000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 598.269948] binder: 28671:28681 transaction failed 29189/-22, size 24-8 line 3012 [ 598.281019] binder: 28671:28681 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.315357] binder: 28679:28682 transaction failed 29189/-22, size 24-8 line 3012 [ 598.323582] binder: 28679:28682 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:54 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 598.364882] binder: 28645:28647 transaction failed 29189/-22, size 24-8 line 3012 [ 598.364900] binder: 28645:28683 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.447801] binder: 28685:28687 transaction failed 29189/-22, size 24-8 line 3012 [ 598.456089] binder: 28685:28687 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:54 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80002, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x31, 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) lseek(r0, 0x0, 0x7) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:33:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) setrlimit(0xf, &(0x7f00000002c0)={0x0, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000380)=0x8, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) epoll_pwait(r0, &(0x7f0000000400)=[{}, {}], 0x2, 0xfffffffffffeffff, &(0x7f0000000580)={0x2}, 0x8) chown(&(0x7f0000000080)='./file0\x00', r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf59096389a06647) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 598.537279] binder: 28651:28657 transaction failed 29189/-22, size 24-8 line 3012 [ 598.540646] binder: 28651:28688 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.569305] binder: 28654:28691 transaction failed 29189/-22, size 24-8 line 3012 [ 598.599091] binder: 28694:28696 transaction failed 29189/-22, size 24-8 line 3012 [ 598.607477] binder: 28694:28696 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.616491] binder: 28694:28696 transaction failed 29189/-22, size 24-8 line 3012 [ 598.624589] binder: 28694:28697 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.625344] binder: 28692:28698 transaction failed 29189/-22, size 24-8 line 3012 [ 598.625503] binder: 28692:28698 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0xfffffffbfffffffc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x358, 0x0, &(0x7f00000003c0)}) fcntl$setstatus(r0, 0x4, 0x4800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:55 executing program 0: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(0xffffffffffffff9c) dup2(r0, r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r4 = gettid() ptrace$getregs(0xe, r4, 0x8000, &(0x7f0000000480)=""/211) [ 598.646933] binder: 28694:28697 unknown command 0 [ 598.651854] binder: 28694:28697 ioctl c0306201 200003c0 returned -22 [ 598.750424] binder: 28704:28706 transaction failed 29189/-22, size 24-8 line 3012 [ 598.758807] binder: 28704:28706 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000180)=0x30) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 598.929451] binder: 28661:28708 transaction failed 29189/-22, size 24-8 line 3012 [ 598.937996] binder: 28661:28708 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e22, @loopback}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffff0, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 599.011410] binder: 28710:28712 transaction failed 29189/-22, size 24-8 line 3012 [ 599.015993] binder: 28671:28713 transaction failed 29189/-22, size 24-8 line 3012 [ 599.030947] binder: 28710:28712 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="872a627301000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x8}, {0x7fffffff, 0x7}], r1}, 0x18, 0x2) [ 599.070411] binder: 28679:28717 transaction failed 29189/-22, size 24-8 line 3012 [ 599.078351] binder: 28679:28682 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.087437] binder: 28715:28718 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.152475] binder: 28720:28722 transaction failed 29189/-22, size 24-8 line 3012 [ 599.160899] binder: 28720:28722 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:55 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 599.201106] binder: 28685:28687 transaction failed 29189/-22, size 24-8 line 3012 [ 599.209186] binder: 28685:28723 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.287481] binder: 28724:28727 transaction failed 29189/-22, size 24-8 line 3012 [ 599.295811] binder: 28724:28727 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:55 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x299, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02adab59", @ANYRES64=0x0, @ANYBLOB], 0x0, 0x0, &(0x7f0000000180)}) rt_sigreturn() ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 599.376138] binder: 28692:28728 transaction failed 29189/-22, size 24-8 line 3012 [ 599.384693] binder: 28692:28728 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x40, 0x5, 0x80000001, 0x8}]}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 599.453492] binder: 28729:28732 unknown command 1504423170 [ 599.459315] binder: 28729:28732 ioctl c0306201 200003c0 returned -22 [ 599.490822] binder: 28734:28735 unknown command 17104960 [ 599.496537] binder: 28734:28735 ioctl c0306201 20000140 returned -22 03:33:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="f69cf75f817f313cd8724c657392f88bb36312c531dbf2a695992ceb43d6cf2adb622346ef9b15720dbcda8bc188bb882952e4b3e1ef52a81a704acb5d8344d2d5267b70450c430bab789986a2c1797fffc87e161a8a0509de99a90f1ec1403e"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000e0ff00af099a0a84043bcf7d27704b17cd7bb2f5524c839f4fbaeed9f49f12a906a93a177595f01ad695441f99a5cc5cf09edbf0c5000a0f4c437b3efb84bf6a16aeedf56ed96452e1"], 0x0, 0x0, &(0x7f0000000180)}) [ 599.504220] binder: 28734:28735 transaction failed 29189/-22, size 24-8 line 3012 [ 599.505149] binder: 28704:28736 transaction failed 29189/-22, size 24-8 line 3012 [ 599.505394] binder: 28704:28737 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.537816] binder: 28734:28735 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.546560] binder: 28734:28741 unknown command 17104960 03:33:55 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001780)={0x8, 0xfffffffffffffff9, 0x1000, &(0x7f0000000780)="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"}) write$P9_RREADLINK(r0, &(0x7f0000000480)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x3) epoll_pwait(r1, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000000)={0xffffffff}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x1009000000000000, &(0x7f0000000180)="d7afcf630d41f27fb8b21d63322b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000680)={'security\x00'}, &(0x7f0000000700)=0x54) write$P9_RMKDIR(r1, &(0x7f0000000380)={0x14, 0x49, 0x1, {0x10, 0x4}}, 0x14) write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a65637482723a73797374656defaf20280000000000000072756e5f743a73302073797361646d5f7500"], 0x35) fcntl$getflags(r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0673a9c29f7cf85a6923149be9520693a32dbf710f762659b0792dedea09a25831b0164e5ddad67b5ee73fe90dcd010197cb8541554025a74d5e8406f64996a7fc532adda72eb91d2b281884269dc7262db8f7ce740baa70f7534ebab1832826033d8b5914ac230cafdf29742ffa3d511df1773e148f03166da054002415e0e8d29a79e3687309fac6bca7264ac98d3142a187d15f772abdffc70000"], 0x0, 0x0, &(0x7f0000000180)}) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000005c0)="64cead9391af3a4c31937aa68a5f73e7113417563b2ad3bd143b0232b334edd221fe48634f6a956b210ccf30819e4e323c3de738bb24854e3734bc1354cbc8e1eb3c165291b5cb0922d12cbb237ee416364b5463bda4492c8797f36f9a0ba9710e1406d8a616685511d9879220fbc6feea25a7e87c13408e1fdaaffd383ee9166b9a56c362b122b4", 0x88) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 599.547866] binder: 28734:28742 transaction failed 29189/-22, size 24-8 line 3012 [ 599.548023] binder: 28734:28735 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.567144] binder: 28734:28741 ioctl c0306201 20000140 returned -22 [ 599.574277] binder: 28738:28743 transaction failed 29189/-22, size 24-8 line 3012 [ 599.574751] binder: 28738:28743 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:55 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)={{0x10b, 0x9, 0x9, 0x11b, 0x4e, 0x400, 0x182, 0x100000000}, "b8997494c2272f1f", [[], [], [], [], [], [], [], []]}, 0x828) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 599.607075] binder: 28745:28746 transaction failed 29189/-22, size 24-8 line 3012 [ 599.617848] binder: 28745:28746 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.626439] binder: 28745:28746 transaction failed 29189/-22, size 24-8 line 3012 [ 599.630677] binder: 28745:28747 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.711323] binder: 28750:28752 transaction failed 29189/-22, size 24-8 line 3012 [ 599.719639] binder: 28750:28752 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) pipe(&(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xce7f) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x2000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x1, 0x0) [ 599.766642] binder: 28710:28753 transaction failed 29189/-22, size 24-8 line 3012 03:33:56 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) lstat(&(0x7f0000000280)='./control/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000380)='./control\x00', &(0x7f0000000640)=[&(0x7f0000000440)='cpuset\x00', &(0x7f0000000480)='++cpuset.security\x00', &(0x7f0000000540)='-[lo\x00', &(0x7f0000000600)='++cpuset.security\x00'], &(0x7f00000008c0), 0x1900) r4 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) fchown(r3, r1, r2) clock_gettime(0x0, &(0x7f0000002000)) close(r4) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000180)='syz1\x00', &(0x7f00000008c0)='cpuset\x00', &(0x7f00000003c0)='\x00'], &(0x7f0000000a40)=[&(0x7f0000000a80)='++cpuset.security\x00', &(0x7f0000000980)='\x00', &(0x7f0000000ac0)="2d5ba4949686ab7072dc10d40b6c6f30", &(0x7f0000000a00)="7f00"]) unlink(&(0x7f0000000200)='./control/file0\x00') socket$inet(0x2, 0xe, 0x3) socket(0x8, 0xa, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000000c0)={r4, 0x0, 0x3, 0x3ff, 0x401}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001e40)=""/43, &(0x7f0000001f40)=0x2b) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, &(0x7f00000001c0)={{}, 'syz*\x00', 0x4c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 599.838699] binder: 28754:28757 transaction failed 29189/-22, size 24-8 line 3012 [ 599.847321] binder: 28754:28757 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.907612] binder: 28720:28764 transaction failed 29189/-22, size 24-8 line 3012 [ 599.915287] input: syz1 as /devices/virtual/input/input13 [ 599.932251] binder: 28720:28722 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.938585] binder: 28760:28761 unknown command 0 [ 599.938664] binder: 28760:28761 ioctl c0306201 20000140 returned -22 [ 599.939020] binder: 28760:28761 transaction failed 29189/-22, size 24-8 line 3012 [ 599.939609] binder: 28760:28761 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.968372] input: syz1 as /devices/virtual/input/input14 [ 599.971405] binder: 28760:28767 unknown command 0 [ 599.971508] binder: 28760:28767 ioctl c0306201 20000140 returned -22 03:33:56 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000000100), 0x8000fffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ff634040000000000000000000000000000000f8ffffff00000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 599.972053] binder: 28760:28770 transaction failed 29189/-22, size 24-8 line 3012 [ 599.973710] binder: 28760:28767 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.056117] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 [ 600.068975] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 [ 600.081373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 [ 600.094177] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 03:33:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r3, 0x109cd86b51293530, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8aec}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 600.094262] binder: 28724:28779 transaction failed 29189/-22, size 24-8 line 3012 [ 600.106158] binder: 28724:28727 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.106656] binder: 28773:28780 transaction failed 29189/-22, size 24-8 line 3012 [ 600.107130] binder: 28776:28781 unknown command 1077961727 [ 600.107139] binder: 28776:28781 ioctl c0306201 20000440 returned -22 [ 600.107250] binder: 28776:28781 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.114620] binder: 28773:28780 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.161131] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 [ 600.173460] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 [ 600.185904] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 03:33:56 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 600.198117] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28777 comm=syz-executor1 [ 600.199466] binder: 28783:28785 transaction failed 29189/-22, size 24-8 line 3012 [ 600.217597] binder: 28783:28785 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.292326] binder: 28788:28790 transaction failed 29189/-22, size 24-8 line 3012 [ 600.300500] binder: 28788:28790 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.328177] binder: 28738:28743 transaction failed 29189/-22, size 24-8 line 3012 03:33:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000180)=""/92) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0600001a00000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 600.335916] binder: 28738:28791 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.406149] binder: 28793:28795 transaction failed 29189/-22, size 24-8 line 3012 [ 600.414369] binder: 28793:28795 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:56 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xf8, 0x0, &(0x7f00000006c0)="161a47d53fed30b4871bd11c50773b46348585569aeba8bf701c6670e08ebb8858be35db49a8fc7edd9352457b72e1aa21f7faf5cda7adcaa650b3928121171378372d8e2baf7fedcca270fdecc69150bff0216ac0dbc65cbb8a33d3865e067b848244e8a6c8999ab292b1b10989421344dc834d7c51c22cdbefe67bc36089f50321e3f1b6b82fa79a6a4ec7ab555afa5c666895ff23b16b3e0efac7366cb3b547928b917609550c1252f4a857ed38aceb10cd06715323dc6d9cddb9add71fa6b3f2cbaed27b2500429d1c206e1e345fbe0f80914068580bcbd424e063b3ed91564003bbdcb9ede32d209e46786dde8d6732bb5c1a3a3486"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 600.458967] binder: 28750:28796 transaction failed 29189/-22, size 24-8 line 3012 [ 600.467502] binder: 28750:28796 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.541336] binder: 28798:28800 transaction failed 29189/-22, size 24-8 line 3012 [ 600.549608] binder: 28798:28800 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:56 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000040)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 600.593771] binder: 28754:28757 transaction failed 29189/-22, size 24-8 line 3012 [ 600.598884] binder: 28754:28801 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.631750] binder: 28804:28805 transaction failed 29189/-22, size 24-8 line 3012 03:33:56 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) fcntl$dupfd(r1, 0x406, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 600.639896] binder: 28804:28805 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.648620] binder: 28804:28805 transaction failed 29189/-22, size 24-8 line 3012 [ 600.648626] binder: 28804:28806 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.733384] binder: 28808:28810 transaction failed 29189/-22, size 24-8 line 3012 [ 600.741707] binder: 28808:28810 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000080"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="7000040127000000010069"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 600.849469] binder: 28773:28811 transaction failed 29189/-22, size 24-8 line 3012 [ 600.857353] binder: 28773:28780 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.880927] binder: 28812:28814 unknown command 0 [ 600.886070] binder: 28812:28814 ioctl c0306201 20000140 returned -22 03:33:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='.vmnet0selinux/em1cgroupbdevtrustedsecurity}\x00', 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, &(0x7f00000002c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '%', 0x20, 0x9}, 0x28, r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000004c0)) [ 600.893255] binder: 28812:28814 transaction failed 29189/-22, size 24-8 line 3012 [ 600.901517] binder: 28812:28814 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.909483] binder: 28812:28815 unknown command 0 [ 600.913472] binder: 28812:28816 transaction failed 29189/-22, size 24-8 line 3012 [ 600.913573] binder: 28812:28814 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.929878] binder: 28812:28815 ioctl c0306201 20000140 returned -22 03:33:57 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0xc0, 0x2, 0x7}}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 600.950110] binder: 28783:28785 transaction failed 29189/-22, size 24-8 line 3012 [ 600.968883] binder: 28783:28817 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.999327] binder: 28818:28825 transaction failed 29189/-22, size 24-8 line 3012 [ 601.010666] binder: 28818:28825 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') accept$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x800) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/5, 0x5}, {&(0x7f00000016c0)=""/125, 0x7d}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/127, 0x7f}], 0x5, &(0x7f0000001880)=""/173, 0xad, 0xffffffffffffa457}, 0xf074}, {{&(0x7f0000001940)=@ax25, 0x80, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/221, 0xdd}, {&(0x7f0000001ac0)=""/150, 0x96}, {&(0x7f0000001b80)=""/28, 0x1c}, {&(0x7f0000001bc0)=""/224, 0xe0}, {&(0x7f0000001cc0)=""/100, 0x64}], 0x5, 0x0, 0x0, 0x19}, 0x9}, {{&(0x7f0000001dc0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003000)=[{&(0x7f0000001e40)=""/161, 0xa1}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x3, &(0x7f0000003040), 0x0, 0x2}, 0xe5e}, {{&(0x7f0000003080)=@ipx, 0x80, &(0x7f0000004240)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/115, 0x73}, {&(0x7f0000004180)=""/41, 0x29}, {&(0x7f00000041c0)=""/118, 0x76}], 0x4, &(0x7f0000004280)=""/223, 0xdf, 0x2c}, 0x1000}, {{&(0x7f0000004380)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005700)=[{&(0x7f0000004400)=""/2, 0x2}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/91, 0x5b}, {&(0x7f00000054c0)=""/86, 0x56}, {&(0x7f0000005540)=""/218, 0xda}, {&(0x7f0000005640)=""/45, 0x2d}, {&(0x7f0000005680)=""/4, 0x4}, {&(0x7f00000056c0)=""/35, 0x23}], 0x8, &(0x7f0000005780)=""/236, 0xec, 0x7}, 0x20}], 0x5, 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000059c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000005ac0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005b80)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000bb40)={0x0, @multicast2, @broadcast}, &(0x7f000000bb80)=0xc) accept$packet(r0, &(0x7f000000bbc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000bc00)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000bd00)={'ip6_vti0\x00', 0x0}) getpeername$packet(r0, &(0x7f000000bd40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000bd80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000be80)={'team_slave_0\x00', 0x0}) getsockname$packet(r0, &(0x7f000000bec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000bf00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000bf40)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f000000c040)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000c080)={0x0, @multicast2, @loopback}, &(0x7f000000c0c0)=0xc) accept$packet(r0, &(0x7f000000c100)={0x11, 0x0, 0x0}, &(0x7f000000c140)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000c1c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f000000c2c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000ce40)={{{@in6=@ipv4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f000000cf40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000d840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000d800)={&(0x7f000000cf80)={0x87c, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xf8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0x160, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x588}}}]}}, {{0x8, 0x1, r7}, {0x8c, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x80000000, 0x9, 0x400, 0x9}, {0x2, 0x6, 0x7ff, 0x914}, {0x1, 0x9, 0x80000001, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1dc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x81, 0x3, 0x1000, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xbd9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r12}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffc1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r15}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r17}, {0x90, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r18}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x5, 0x1000, 0x5, 0x6}, {0x0, 0xfffffffffffffe00, 0xdf0, 0x4}, {0x1, 0x9, 0x3}]}}}]}}, {{0x8, 0x1, r19}, {0x13c, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xffffffffffffffe0, 0xffff}, {0x370, 0x3ff, 0x2, 0x2}, {0xef1, 0x3, 0x3c, 0x5}]}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x6, 0x24d1, 0x5, 0x1}, {0x8, 0x2, 0x9, 0x7fff}, {0xfffffffffffffff7, 0xfffffffffffffffd, 0xffffffff, 0x1}, {0x8, 0x4, 0xb3ab, 0x3e}, {0x5, 0x361400000, 0xfffffffffffff000, 0xffff}, {0x9, 0x8, 0xff, 0xffffffff}, {0x100000000, 0x8000, 0x1, 0x2}, {0x20, 0x7f, 0xe5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r20 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r20, 0xc018620b, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000280)={{0x3, 0x0, 0x9, 0x3, 0xdc}, 0x5, 0x7}) ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 601.044377] binder: 28822:28826 transaction failed 29189/-22, size 24-8 line 3012 [ 601.052996] binder: 28822:28826 BC_ACQUIRE_DONE u0000000000000000 no match [ 601.058457] binder: 28788:28827 transaction failed 29189/-22, size 24-8 line 3012 03:33:57 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) getegid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040070000000000000000000000000000000000008000000000000000000000000018000000000000000800007400000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000180)}) [ 601.142423] binder: 28829:28832 transaction failed 29189/-22, size 24-8 line 3012 [ 601.150707] binder: 28829:28832 BC_ACQUIRE_DONE u0000000000000000 no match [ 601.160903] binder: 28793:28833 transaction failed 29189/-22, size 24-8 line 3012 [ 601.232499] binder: 28836:28838 got transaction to invalid handle [ 601.238919] binder: 28836:28838 transaction failed 29201/-22, size 24-1946157064 line 3012 [ 601.248332] binder: 28836:28838 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:57 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'security.', '}\x00'}, &(0x7f0000000500)=""/236, 0xec) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 601.296577] binder: 28798:28800 transaction failed 29189/-22, size 24-8 line 3012 [ 601.304662] binder: 28798:28839 BC_ACQUIRE_DONE u0000000000000000 no match [ 601.374372] binder: 28841:28844 transaction failed 29189/-22, size 24-8 line 3012 [ 601.382670] binder: 28841:28844 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:57 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000008000e833a5ab5412f491ce668dfcf3cf5f79db3e6e31a24634d7590915ceb031c2040ba72dcafa5a65c6eaa64228d98f8e6c238e754800fa528e29d9283901ea53c0eca2c7c8370ab3662138e7f120c30104efe29b4796930cd3a896872156706f77887a2a339ec090e9d1a6fa565711d0332a4a421679"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 601.484762] binder: 28808:28810 transaction failed 29189/-22, size 24-8 line 3012 [ 601.564324] binder: 28847:28849 transaction failed 29189/-22, size 24-8 line 3012 [ 601.572858] binder: 28847:28849 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 601.754057] binder: 28818:28850 transaction failed 29189/-22, size 24-8 line 3012 [ 601.762094] binder: 28818:28825 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:58 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="af854ffa3e"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 601.797497] binder_alloc: binder_alloc_mmap_handler: 28822 20001000-20004000 already mapped failed -16 [ 601.807819] binder: 28822:28854 transaction failed 29189/-22, size 24-8 line 3012 [ 601.816474] binder: 28822:28826 BC_ACQUIRE_DONE u0000000000000000 no match [ 601.831316] binder: 28852:28855 transaction failed 29189/-22, size 24-8 line 3012 03:33:58 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) [ 601.846978] binder: 28856:28857 unknown command -95451729 [ 601.847044] binder: 28856:28857 ioctl c0306201 20000140 returned -22 [ 601.847473] binder: 28856:28857 ioctl 400c6615 20000040 returned -22 [ 601.847855] binder: 28856:28857 transaction failed 29189/-22, size 24-8 line 3012 [ 601.848187] binder: 28856:28857 BC_ACQUIRE_DONE u0000000000000000 no match [ 601.869647] binder: 28856:28857 unknown command -95451729 03:33:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 601.869695] binder: 28856:28857 ioctl c0306201 20000140 returned -22 [ 601.869812] binder: 28856:28860 transaction failed 29189/-22, size 24-8 line 3012 [ 601.884502] binder: 28852:28861 BC_ACQUIRE_DONE u0000000000000000 no match [ 601.917476] binder: 28829:28867 transaction failed 29189/-22, size 24-8 line 3012 [ 601.958359] binder: 28862:28871 transaction failed 29189/-22, size 24-8 line 3012 [ 601.966742] binder: 28862:28871 BC_ACQUIRE_DONE u0000000000000000 no match [ 601.985970] binder: 28836:28838 got transaction to invalid handle [ 601.992430] binder: 28868:28873 transaction failed 29189/-22, size 24-8 line 3012 [ 601.992532] binder: 28868:28873 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:58 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 602.007274] binder: 28836:28872 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.015491] binder: 28836:28838 transaction failed 29201/-22, size 24-1946157064 line 3012 [ 602.088396] binder: 28875:28877 transaction failed 29189/-22, size 24-8 line 3012 [ 602.098072] binder: 28875:28877 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:58 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x618, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_setup(0x40000100000005, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="f8", 0x1}]) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000580)="d157db90ed6091ab40c99372fdb7934a157445b22b823cf85977ed299ea498e1142c7c04270d66007dce290800816d8e25cc859b30c8553b3e2c14b1dd1ba38df20c8fdc7326df9d22b2637affb0229d2166eca7ceb0fc2d69705498ee0a0048f6818868baa62a85b56c59611796f39aad95fb682f74acd9d44d895c02829816857d99c18ad42b58a4a2be9674cb8ee6dfca1b936320eb879008495403edd56280545559c1722cb1a68a3db7fc80382f0c3984") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xfde1, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0763044001000000106308d3b7986930baa72400"], 0xffffffc8, 0x0, &(0x7f0000000640)="cfeab5771be2e0e2d07373a65c35d4e07c73427037d617c5547ceda779c0acff759269d1854f5c9748fe88005ac6258b4421420135922dc4211f71cd73109598fe4e0385ea5db1057409e26d57bf227da560ec86723278bdd2fce97ae1ad046400536b470003632d88ea82c1b6d0d1ab1c2020d77e8f2572db9918c2799103a0487f7cd888523cfc1be2bf09a319322e57bc076b2d97fc29aa5893d205539da0753e57f048bfd56d5c711741fed06b6ca205eda23d5255672097e9a154fbaf265f05b362364699a97ade4a70"}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 602.129539] binder: 28841:28878 transaction failed 29189/-22, size 24-8 line 3012 [ 602.137532] binder: 28841:28878 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.209388] binder: 28880:28882 transaction failed 29189/-22, size 24-8 line 3012 [ 602.222001] binder: 28880:28882 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 602.229963] binder: 28880:28882 unknown command -754425072 [ 602.236025] binder: 28880:28882 ioctl c0306201 200002c0 returned -22 03:33:58 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r1}) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 602.312171] binder: 28847:28849 transaction failed 29189/-22, size 24-8 line 3012 [ 602.312918] binder: 28847:28883 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.345090] binder: 28884:28886 transaction failed 29189/-22, size 24-8 line 3012 [ 602.353497] binder: 28884:28886 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:58 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0), 0xffffffffffffffa7, 0x1009000000000000, &(0x7f0000000480)="2fa593206b59c080d4da47254345d0c30b363a7e23efc1a32f2c706a72d65a35c9d0af185caa261c30c0826ca9767a6064befa31699b62919d0a42f37a20822080a94c0fccd8b2a07e623f3e09389edd71b7818332c1f159d9a3068b0f75b20986ae6ca339d1680f5b6c32b8ac50fd916d2c225514d150162ade"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='(eth0cgroup\x00', 0xc, 0x1) [ 602.362459] binder: 28884:28886 transaction failed 29189/-22, size 24-8 line 3012 [ 602.362465] binder: 28884:28887 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.437441] binder: 28889:28892 transaction failed 29189/-22, size 24-8 line 3012 [ 602.445693] binder: 28889:28892 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c63000003c1f1274ba631cbe8c00ba80b9ce31243ca02644429b1d35333a4b229386892853df742366ed20e54f14798f0c14ef23c1780d11804d34d3c9f13398e380294126e63d1370c63bec8a9b502e2cf9029e2431a5239e7b6a8cc9a8a7290e5b6398bc2ac0d330ba2b4af5ef060ec6a64f9d9dc968e6d61202a270f90a76b4bdac3484b2188310d19f601229d7abad4829c720f9f5c99665ec5f2ba5275ea6e44e8113884a5d374929473a15c567661441e2fbe2559d65ebb3733bd7248376c229602904d2672a591ab22234aad2f607c957131f98658e2d37985c8185fe8c7d98ec035"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000040)=[@flat={0x0, 0x100, r3, 0x2}, @flat={0x0, 0x100, r3, 0x1}], &(0x7f0000000180)=[0x78, 0x58, 0x38, 0x18, 0x38]}}], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 602.584502] binder: 28852:28861 transaction failed 29189/-22, size 24-8 line 3012 [ 602.592682] binder: 28852:28861 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:59 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x10}, {r1, 0x4000}, {r0, 0x2}], 0x3, &(0x7f00000002c0)={r4, r5+30000000}, &(0x7f0000000380)={0x8}, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0c6300005c51531f80c55995ec89903371d808054daf2d388fbe8b27462f5d20ff1a747ecd52f83067727c6767ee09768b4374baf45ff82638cb0c74d669f3f050a4ee51e34885446f44b4a956c8833d2317ce13cef9304d8a4dafac43357d0323c96bdff07586d4202e0aa597c3e93caa565df883331c4222d02bcd0f39891eb108dc9f26ebb2e566c132db9d4e60734d3a21233bf0fe0e7f6387e1e8ce8577dd7c82194acdae288e3588896d0a7a587be4c678f8449e64f845fc0c3337b954dc7baace876e0c66bbb7ed96e5dfd13d126b3f0ed8ff50752be18b46619cacc5fff42c108918d03e592cd4ea944c2fd46440c11ff27080b419cd066cceadfda70b7f6b7a6eb2723176ba8802820bbd01c4a4c7ca30ef9fc6a969fd12f5b4ac1a3dbb581cdb74e9d1ab13c88011ded85396c5a66994bc99575baefc0002861739c2434a4684ecaa2768e1323e76ebdff6a1b1fcc101f82a030f7e367b25aedfe6f510e6981326aaa211e401301eced037c768412a07568eaf6e471c19f7581807a2c757ef75b12c3fd6f7db10"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x7, 0x2000}, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x5e7, 0x7, 0xfff, 0x40, 0x0, 0x10001, 0x200, 0x1, 0x7f, 0xffff, 0x8, 0xc16, 0xfffffffffffffc01, 0x400, 0x5, 0x80000000, 0x81, 0x1, 0x100, 0x6, 0x8, 0x5, 0xef, 0x9f85, 0x800, 0x200, 0x8000, 0x2, 0x0, 0x2, 0x40, 0x8, 0x7f, 0x5, 0x35e40000000, 0x7fff, 0x0, 0x4, 0x0, @perf_config_ext={0xfff, 0x9}, 0x10, 0x9, 0x4, 0x8, 0x6, 0x400, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 602.667476] binder: 28895:28897 transaction failed 29189/-22, size 24-8 line 3012 [ 602.675960] binder: 28895:28897 got reply transaction with no transaction stack [ 602.684253] binder: 28895:28897 transaction failed 29201/-71, size 48-40 line 2920 [ 602.699458] binder: 28862:28871 transaction failed 29189/-22, size 24-8 line 3012 [ 602.699468] binder: 28862:28898 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:59 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000480)="9e7dfa9ee3eec99f173ba8e69ba7aa5b59c745de48f45004147644fe65eafbbcef79e431e5d59d852848333ccc777be55a9fa85659d3ba4f0f4e9ffe67270c3599adefeefe6be579f3f22af1da0e9ba7c3570b16cd8790a8123f1f74efc4eabe2777716d4f4bbe9ab6ac86af6e21d24f2ac03a986887e6a4687b704e8c5b0d0a3fe90fa7a6566fe4c1416b2ca2ad291040a2ba74c321a65714537019c0c49237766923acaa86ab15a10c1510602c3884f488eaacc9275769f1406ce82dc4786281c82e3504ed02f2d313d30bcfc3430d707cbc2d16907e58e53daa57e3eaf890", 0xe0}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 602.745945] binder: 28868:28903 transaction failed 29189/-22, size 24-8 line 3012 [ 602.746444] binder: 28901:28902 transaction failed 29189/-22, size 24-8 line 3012 [ 602.747050] binder: 28901:28902 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.753797] binder: 28901:28904 transaction failed 29189/-22, size 24-8 line 3012 03:33:59 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fd620000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 602.841387] binder: 28906:28911 transaction failed 29189/-22, size 24-8 line 3012 [ 602.843451] binder: 28875:28912 transaction failed 29189/-22, size 24-8 line 3012 [ 602.843615] binder: 28875:28912 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.853497] binder: 28908:28913 transaction failed 29189/-22, size 24-8 line 3012 [ 602.853659] binder: 28908:28913 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="996d19b3e5897106f0958b0a88043f938c5bccfb2bbdfbc35efa66c95abc1c535d3b502d0e42c1d451c2f59f3c6086cb8d88abba45172a9bd2ea63d15face2df947a33b8ef0bf0cbc6f80802838de4080ac955c2d758ff509cdaa153734992b7d704801000a96b17462c0b8fb8eb81926904d6638e980665c45e5fee873d2926d8e6cc7d1ba67ff95e250d8799d721cb7a3ad26eb8d40cbe2bdb5548f2215a4bd09b0091c00011a2f769b11dd2cc0d5dedf87a05d8edd5eb14b3c0dd529879b23a6f506dbf7ac9608d8138", 0xcb}, {&(0x7f0000000580)="0938cbf793865b2c50b058f9a94618c735d9e7ff7140f64892c32bebe5a653bcff42cf0837f468d38ca181058c042ec654290304536127e4585f020e31398d7d79a3e2d716b6b99b3dedfd00a66470b470188895f9411a5cd8a10541b9ea04e89f20408b839a876c4d278ca5e0e9691f8ff02293dc28892b5f855cfecfb0f2d8facc58f8a6cf50015c73adcad7d22aa1844fba2e5fcf9f01112d5b7496827f01a6c2f8b8d04792d8766ea3cfbb7e20159fa5eb42f2dd73b1e966670740d207e5e2e7cd64c1890cc9238e37badf", 0xcd}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 602.870355] binder: 28915:28916 unknown command 25341 [ 602.870366] binder: 28915:28916 ioctl c0306201 20000140 returned -22 [ 602.870430] binder: 28915:28916 transaction failed 29189/-22, size 24-8 line 3012 [ 602.870504] binder: 28915:28916 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.876026] binder: 28915:28916 unknown command 25341 [ 602.876037] binder: 28915:28916 ioctl c0306201 20000140 returned -22 [ 602.876082] binder: 28915:28917 transaction failed 29189/-22, size 24-8 line 3012 [ 602.891075] binder: 28906:28918 BC_ACQUIRE_DONE u0000000000000000 no match [ 602.967636] binder: 28880:28882 transaction failed 29189/-22, size 24-8 line 3012 [ 602.970607] binder: 28880:28882 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 602.970617] binder: 28880:28882 unknown command -754425072 [ 602.970629] binder: 28880:28882 ioctl c0306201 200002c0 returned -22 [ 602.996012] binder: 28920:28923 transaction failed 29189/-22, size 24-8 line 3012 03:33:59 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0xe, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20012, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b63e500"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000180)=""/16) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x254, 0x0, &(0x7f0000000500), 0xfffffffffffffc9f, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 602.996151] binder: 28920:28923 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.129020] binder: 28925:28926 unknown command 15033099 [ 603.129032] binder: 28925:28926 ioctl c0306201 20000140 returned -22 03:33:59 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x400000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 603.129476] binder: 28925:28926 transaction failed 29189/-22, size 24-8 line 3012 [ 603.130655] binder: 28925:28926 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.145016] binder: 28925:28926 unknown command 15033099 03:33:59 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)=';'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) sched_yield() ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000180)={0x6, 0x7f}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 603.145026] binder: 28925:28926 ioctl c0306201 20000140 returned -22 [ 603.146003] binder: 28925:28927 transaction failed 29189/-22, size 24-8 line 3012 [ 603.146201] binder: 28925:28926 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.202423] binder: 28889:28892 transaction failed 29189/-22, size 24-8 line 3012 [ 603.203243] binder: 28889:28931 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.203250] binder: 28889:28931 unknown command 0 [ 603.203259] binder: 28889:28931 ioctl c0306201 200003c0 returned -22 [ 603.248921] binder: 28929:28934 transaction failed 29189/-22, size 24-8 line 3012 [ 603.250253] binder: 28929:28934 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.328740] binder: 28933:28936 transaction failed 29189/-22, size 24-8 line 3012 [ 603.339105] binder: 28933:28936 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x84800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) inotify_init1(0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 603.421220] binder: 28895:28897 transaction failed 29189/-22, size 24-8 line 3012 [ 603.429044] binder: 28895:28937 got reply transaction with no transaction stack [ 603.429064] binder: 28895:28937 transaction failed 29201/-71, size 48-40 line 2920 [ 603.429964] binder: undelivered TRANSACTION_ERROR: 29201 [ 603.450495] binder: undelivered TRANSACTION_ERROR: 29201 [ 603.527454] binder: 28939:28941 transaction failed 29189/-22, size 24-8 line 3012 [ 603.536142] binder: 28939:28941 BC_ACQUIRE_DONE u0000000000000000 no match 03:33:59 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x14a, 0x0, &(0x7f00000006c0)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:33:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21, 0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000099afa4740eec"], 0x0, 0x0, &(0x7f0000000180)}) [ 603.587424] binder: 28906:28942 transaction failed 29189/-22, size 24-8 line 3012 [ 603.588077] binder: 28906:28943 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.607692] binder: 28908:28913 transaction failed 29189/-22, size 24-8 line 3012 [ 603.648610] audit: type=1400 audit(2000000039.940:70): avc: denied { associate } for pid=28949 comm="syz-executor1" name="uinput" dev="devtmpfs" ino=5411 scontext=system_u:object_r:dpkg_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 603.684500] binder: 28946:28951 transaction failed 29189/-22, size 24-8 line 3012 03:34:00 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0963b15ac212f9a3c60d3a0254543b000000000000008d79e523300000000000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 603.692925] binder: 28946:28951 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.695539] binder: 28949:28952 transaction failed 29189/-22, size 24-8 line 3012 [ 603.695643] binder: 28949:28952 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.730931] binder: 28920:28923 transaction failed 29189/-22, size 24-8 line 3012 03:34:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c631000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000080000a745c75fe453fc581031066acbef39a5e12f73a1ffd2ed6b7f0f9b87e1840b"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2}, &(0x7f0000000380)=0xc) futex(&(0x7f00000005c0)=0x2, 0x0, 0x2, &(0x7f0000000600)={0x0, 0x1c9c380}, &(0x7f0000000640), 0x1) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000400)={@mcast1, r2}, 0x14) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x5330) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f00000007c0)='encrypted\x00', &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)='/dev/binder#\x00', 0x0) keyctl$instantiate(0xc, r3, &(0x7f0000000740)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'vboxnet1%vmnet1systemcgroup,', 0x20, 0x2}, 0x46, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) sendto(r0, &(0x7f0000000480)="d7693510aa862a8b8d9ac56f28c13df13f9c5504fd49e6de8953acc831986ff8dfa7e12d2d96fc38f59e4dbc50cad8a07feac47662011db195fc94ea863fbd63f960215d27cb2a8cb684bfb5b96159be4e5dcdf121eae99036e4fd695d969110", 0x60, 0x4000, &(0x7f0000000500)=@ipx={0x4, 0x2, 0x0, "ba2ca94d2cec", 0x9}, 0x80) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @empty, @rand_addr}, &(0x7f0000000580)=0xc) [ 603.759621] binder: 28955:28956 ioctl c0306201 20000140 returned -11 [ 603.766943] binder: 28955:28956 transaction failed 29189/-22, size 24-8 line 3012 [ 603.775469] binder: 28955:28956 unknown command 1521574665 [ 603.781624] binder: 28955:28956 ioctl c0306201 200003c0 returned -22 [ 603.789059] binder: 28955:28958 ioctl c0306201 20000140 returned -11 [ 603.789541] binder: 28955:28959 transaction failed 29189/-22, size 24-8 line 3012 03:34:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000a7"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="d570000000000000db8c879ac98ec7b11a2950e3d9c0f420c5aaf1317b69ad53a0391914b1260800456aad8c83bd4909e302c4ca337805a2f90e0eb6f9da13e9d031dd4c0a63864152db926b7b62f13fd36d35483153bd3a9834d8fd92b53b5f5e5a745259902d40c2459627397b9c94f9f747943f00856201ce9e9be00e0a96bcda427cb17827099bf0278e52dc423e63cf142fa61a28e05e0900000090450621ba261282db3d272a1e76f776121e3c6da7"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$RTC_WIE_OFF(r0, 0x7010) [ 603.929653] binder: 28970:28973 transaction failed 29189/-22, size 24-8 line 3012 [ 603.937962] binder: 28970:28973 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$FICLONE(r0, 0x40049409, r0) syslog(0xf, &(0x7f00000006c0)=""/216, 0xd8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 603.988849] binder: 28929:28934 transaction failed 29189/-22, size 24-8 line 3012 [ 603.989017] binder: 28929:28974 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:00 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 604.053256] binder: 28933:28936 transaction failed 29189/-22, size 24-8 line 3012 [ 604.058496] binder: 28933:28980 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.069714] binder: 28977:28981 transaction failed 29189/-22, size 24-8 line 3012 [ 604.078242] binder: 28977:28981 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.142480] binder: 28983:28985 transaction failed 29189/-22, size 24-8 line 3012 [ 604.150893] binder: 28983:28985 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="9db51040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 604.282072] binder: 28939:28941 transaction failed 29189/-22, size 24-8 line 3012 [ 604.282880] binder: 28939:28986 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.358426] binder: 28988:28991 transaction failed 29189/-22, size 24-8 line 3012 [ 604.366722] binder: 28988:28991 unknown command 1074836893 [ 604.372691] binder: 28988:28991 ioctl c0306201 200003c0 returned -22 03:34:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000480)=""/186) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000180)) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:34:00 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 604.434978] binder: 28946:28951 transaction failed 29189/-22, size 24-8 line 3012 [ 604.435044] binder: 28946:28992 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.450388] binder: 28949:28952 transaction failed 29189/-22, size 24-8 line 3012 [ 604.458310] binder: 28949:28993 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.501783] binder: 28998:28999 ioctl c0306201 20000140 returned -11 [ 604.508727] binder: 28998:28999 transaction failed 29189/-22, size 24-8 line 3012 [ 604.517443] binder: 28998:28999 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.525629] binder: 28998:29000 transaction failed 29189/-22, size 24-8 line 3012 [ 604.528115] binder: 28998:29001 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.544540] binder: 28995:29002 transaction failed 29189/-22, size 24-8 line 3012 03:34:00 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1f, 0x18}, 0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 604.558999] binder: 28995:29002 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.607354] binder: 29003:29006 transaction failed 29189/-22, size 24-8 line 3012 [ 604.615700] binder: 29003:29006 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000180)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xfffffffffffffe4e, 0x1009000000000000, &(0x7f0000000480)="2bb940797a88bde9513a8e5a62b61227635337d9dc6742237615f81e0f90d0bbcf15768438a912f35908362ddc66e582210a0559aedb65491d3c7c04fa2bbf4bf56ffe6f10ee41456b85e3691e051fad8421a6f835c7f3968e20af5b821d683477b3a4bcf4eb85bbb40c94fa7154a287dbf79718f023dab8f92c2fb02dbbaf8c3ba782949e688daf96569be6346b1a66b3f0a929"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 604.684830] binder: 28970:29007 transaction failed 29189/-22, size 24-8 line 3012 [ 604.693330] binder: 28970:28973 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.715847] binder: 29008:29009 transaction failed 29189/-22, size 24-8 line 3012 [ 604.724540] binder: 29008:29009 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000180)) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000000480)=""/149, &(0x7f0000000040)=0x95) [ 604.732948] binder: 29008:29011 transaction failed 29189/-22, size 24-8 line 3012 [ 604.740885] binder: 29008:29009 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000280)=""/11, &(0x7f00000002c0)=0xb) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000180)=0xc) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 604.810520] binder: 29012:29015 transaction failed 29189/-22, size 24-8 line 3012 [ 604.818773] binder: 29012:29015 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.822912] binder: 28977:28981 transaction failed 29189/-22, size 24-8 line 3012 [ 604.823059] binder: 28977:28981 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:01 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xfffffffffffffff6, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) [ 604.890899] binder: 29017:29020 transaction failed 29189/-22, size 24-8 line 3012 [ 604.899433] binder: 29017:29020 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.900217] binder: 28983:28985 transaction failed 29189/-22, size 24-8 line 3012 [ 604.900257] binder: 28983:29021 BC_ACQUIRE_DONE u0000000000000000 no match [ 604.900263] binder: 28983:29021 unknown command 0 [ 604.900272] binder: 28983:29021 ioctl c0306201 200003c0 returned -22 [ 604.970538] binder: 29022:29025 transaction failed 29189/-22, size 24-8 line 3012 [ 604.978740] binder: 29022:29025 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) connect$packet(r1, &(0x7f00000001c0)={0x11, 0x1b, r2, 0x1, 0x9773, 0x6, @remote}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 605.113402] binder: 28988:29026 transaction failed 29189/-22, size 24-8 line 3012 [ 605.121511] binder: 28988:28991 unknown command 1074836893 [ 605.127238] binder: 28988:28991 ioctl c0306201 200003c0 returned -22 [ 605.205387] binder: 29028:29030 transaction failed 29189/-22, size 24-8 line 3012 [ 605.213822] binder: 29028:29030 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r3}) [ 605.289158] binder_alloc: binder_alloc_mmap_handler: 28995 20001000-20004000 already mapped failed -16 [ 605.300295] binder: 28995:29032 transaction failed 29189/-22, size 24-8 line 3012 03:34:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2001e, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x3c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 605.362279] binder: 29003:29036 transaction failed 29189/-22, size 24-8 line 3012 [ 605.385477] binder: 29033:29039 transaction failed 29189/-22, size 24-8 line 3012 [ 605.394599] binder: 29033:29039 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.449515] binder: 29037:29041 transaction failed 29189/-22, size 24-8 line 3012 [ 605.457650] binder: 29037:29041 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x30, 0x3, 0x0, 0x3, 0x80000001, 0x1000, 0x10001, 0x955}, 0x0) sched_getaffinity(r2, 0x8, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) accept4$inet(r0, &(0x7f0000000040), &(0x7f0000000180)=0x10, 0x80800) [ 605.564898] binder: 29012:29042 transaction failed 29189/-22, size 24-8 line 3012 [ 605.573338] binder: 29012:29015 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.604017] binder: 29044:29045 unknown command 24 [ 605.609000] binder: 29044:29045 ioctl c0306201 20000140 returned -22 [ 605.616718] binder: 29044:29045 transaction failed 29189/-22, size 24-8 line 3012 [ 605.624859] binder: 29044:29045 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.633576] binder: 29044:29045 unknown command 24 [ 605.638518] binder: 29044:29045 ioctl c0306201 20000140 returned -22 [ 605.645006] binder: 29017:29020 transaction failed 29189/-22, size 24-8 line 3012 03:34:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff10, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xffffffffffffff8d, 0x1009000000000000, &(0x7f00000006c0)="ffffbeb324a82734f7870f68154d10663f858661ff2c713319c9e3a0cc0103d1e3c9ee0bb05de80bb809dbf859ec0700218b1d207f1663722d0bea7966ff4f8b202c0a5ea03dce62cadde738d9b91a3bed2a71730c078053c3c664d1db369ccc45cabf2627435f7c8a6c47fcc4f9569fc3b51a7b27d78ac903129e1e762666f3a3809516ec350c7eb12d0008f889edd16bd7589d5600000000000000"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbb}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x80) 03:34:02 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000ed4ad645b4c07a29a7ddc3d35aea0dcb99bee4b489a02478723e64b1b2cc22d647c31b616ff0b8cfad75363bad4919a1b38bafe6594cb499d1e1ca53ded6099dacc4b452ffa8fed75fd0e4"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 605.645762] binder: 29017:29020 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.646978] binder: 29044:29048 transaction failed 29189/-22, size 24-8 line 3012 [ 605.647037] binder: 29044:29049 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.647044] binder: 29044:29049 unknown command 0 [ 605.647053] binder: 29044:29049 ioctl c0306201 200003c0 returned -22 03:34:02 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r2) write$P9_RFSYNC(r1, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7) [ 605.724885] binder: 29022:29056 transaction failed 29189/-22, size 24-8 line 3012 [ 605.730147] binder: 29022:29057 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.753003] binder: 29050:29058 transaction failed 29189/-22, size 24-8 line 3012 [ 605.762855] binder: 29050:29058 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.769441] binder: 29054:29062 transaction failed 29189/-22, size 24-8 line 3012 [ 605.769657] binder: 29054:29062 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.817544] binder: 29060:29064 transaction failed 29189/-22, size 24-8 line 3012 [ 605.825620] binder: 29060:29064 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x1) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 606.006382] binder: 29028:29066 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.006389] binder: 29028:29030 transaction failed 29189/-22, size 24-8 line 3012 [ 606.086499] binder: 29068:29070 transaction failed 29189/-22, size 24-8 line 3012 [ 606.094998] binder: 29068:29070 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:02 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xc7, 0x95, &(0x7f0000000480)="a986e54aad096059bc0b12a5eaaf40ab5735bbade3aa9494cbf209aabb29a8166271643ae1531a7efce5d3f153903cc6051c7d333c522cd49f4d1e991afbcf28bc19456379b81dc82ffc2bbe50deb9e2e95668e9aa981091e7d4293ef86acda853c23adc382c4850c17bee40f9288585157981dc094666f6c56fb262fd59094d4dc895e9d9ab128fac56b222fecef14b7c715c8d18a117d2ca10ca3bb70a36b751179b669225b167cd71a422ca27404c0376efd59af402feaf8f89d3e15b8e531a01d14b186a36", &(0x7f0000000580)=""/149, 0x4}, 0x28) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 606.129644] binder: 29033:29039 transaction failed 29189/-22, size 24-8 line 3012 [ 606.129702] binder: 29033:29071 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:02 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 606.187704] binder: 29037:29075 transaction failed 29189/-22, size 24-8 line 3012 [ 606.195580] binder: 29037:29041 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.211451] binder: 29072:29076 transaction failed 29189/-22, size 24-8 line 3012 [ 606.219674] binder: 29072:29076 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:02 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 606.235564] binder: 29078:29079 transaction failed 29189/-22, size 24-8 line 3012 [ 606.243827] binder: 29078:29079 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.252763] binder: 29078:29081 transaction failed 29189/-22, size 24-8 line 3012 [ 606.260811] binder: 29078:29079 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.331331] binder: 29083:29085 transaction failed 29189/-22, size 24-8 line 3012 [ 606.339665] binder: 29083:29085 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:02 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000039d300000000"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 606.474003] binder: 29050:29086 transaction failed 29189/-22, size 24-8 line 3012 [ 606.481936] binder: 29050:29058 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r2, 0x263}, {r0, 0x220}, {r0, 0x100}], 0x3, 0xcb0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 606.517697] binder: 29054:29091 transaction failed 29189/-22, size 24-8 line 3012 [ 606.555331] binder: 29088:29095 transaction failed 29189/-22, size 24-8 line 3012 03:34:02 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x40040, 0x0) connect$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f0000001c80)=@hci, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001d00)=""/31, 0x1f}], 0x1, &(0x7f0000002e40)=""/16, 0x10}}], 0x1, 0x0, &(0x7f0000006100)={0x77359400}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x3e, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfb, &(0x7f00000000c0)=""/251}, 0x48) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x6, 0xffffffff00000000, 0x6}) pwritev(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x1000, 0x20000800, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty, 0xfffffffffffffffe}, 0x1c) listen(0xffffffffffffffff, 0x10003) capget(&(0x7f0000000340)={0x399f1736}, &(0x7f0000000380)={0x4, 0x3, 0x9, 0x0, 0x0, 0x48}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000), 0x1c) connect(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x0, @dev}, 0x80) fcntl$getownex(r3, 0x10, &(0x7f0000001900)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0xffffffffffffffff, r2, 0x0, 0xd, &(0x7f0000001980)='team_slave_0\x00'}, 0x30) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0x50, &(0x7f0000001800)}, 0x10) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000480)='team0\x00') [ 606.563514] binder: 29088:29095 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.564562] binder: 29060:29064 transaction failed 29189/-22, size 24-8 line 3012 [ 606.564601] binder: 29060:29096 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.564607] binder: 29060:29096 unknown command 0 [ 606.564615] binder: 29060:29096 ioctl c0306201 200003c0 returned -22 [ 606.604605] binder: 29093:29100 transaction failed 29189/-22, size 24-8 line 3012 [ 606.612959] binder: 29093:29100 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:02 executing program 3: lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='security.selinux\x00', &(0x7f0000000740)='system_u:object_r:printer_device_t:s0\x00', 0x26, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000680)=[@decrefs={0x40046307, 0x4}], 0x1, 0x1009000000000000, &(0x7f0000000780)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1ee) rt_sigtimedwait(&(0x7f0000000040)={0x7}, &(0x7f0000000180), &(0x7f00000001c0), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="b418e1e90f251ee444783337bb35bc44026c767bf52e833e68c0134cab009ef6fca90fe58992ce5f1f75702be7a1197e220994f7556dfae53be58359bb3991874e536e1919a113502be8375ff2d9c90d4bc39b49be62e4f43bd2bd43ac67745e30c4bd75580000000000"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x6, 0xfffffffffffffff7, 0x1a, &(0x7f0000000000)="831cb3a9a8a8ac69f1d07d06b1ef5c95e364201d6eeed7b94a52"}) getrandom(&(0x7f00000006c0)=""/123, 0x7b, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xbc, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000380), &(0x7f0000000400)=[0x0, 0x18, 0x28, 0x60, 0x40, 0x78]}, 0x43}}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x4}, @acquire_done={0x40106309, r3, 0x4}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x28, 0x30, &(0x7f00000004c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000480), 0x1, 0x4, 0x1}], &(0x7f0000000500)=[0x38, 0x28, 0x78, 0x78, 0x48, 0x38]}, 0xfff}}], 0xf, 0x0, &(0x7f0000000600)="55a5ad34547ae59e0b2bcca8bcc827"}) [ 606.699795] binder: 29105:29107 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 606.745387] binder: 29105:29108 transaction failed 29189/-22, size 24-8 line 3012 [ 606.753885] binder: 29105:29108 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.761743] binder: 29105:29108 got transaction to invalid handle [ 606.768144] binder: 29105:29108 transaction failed 29201/-22, size 0-48 line 3012 03:34:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 606.840304] binder: 29068:29109 transaction failed 29189/-22, size 24-8 line 3012 [ 606.848497] binder: 29068:29070 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.873615] binder: 29111:29112 unknown command 0 [ 606.878575] binder: 29111:29112 ioctl c0306201 20000140 returned -22 03:34:03 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) lseek(r0, 0x0, 0x7) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 606.885960] binder: 29111:29112 transaction failed 29189/-22, size 24-8 line 3012 [ 606.894848] binder: 29111:29112 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.903239] binder: 29111:29113 unknown command 0 [ 606.905603] binder: 29111:29114 transaction failed 29189/-22, size 24-8 line 3012 [ 606.905711] binder: 29111:29112 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.923897] binder: 29111:29113 ioctl c0306201 20000140 returned -22 03:34:03 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x90a, 0x999, 0x0, 0x4, 0x80}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 606.998455] binder: 29116:29119 transaction failed 29189/-22, size 24-8 line 3012 [ 607.006956] binder: 29116:29119 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.009989] binder: 29072:29076 transaction failed 29189/-22, size 24-8 line 3012 [ 607.010129] binder: 29072:29120 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.010136] binder: 29072:29120 unknown command 0 [ 607.010146] binder: 29072:29120 ioctl c0306201 200003c0 returned -22 03:34:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000040)="b2") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\fb\x00\x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 607.086675] binder: 29083:29085 transaction failed 29189/-22, size 24-8 line 3012 [ 607.094541] binder: 29083:29124 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.104548] binder: 29121:29125 transaction failed 29189/-22, size 24-8 line 3012 [ 607.114593] binder: 29121:29125 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.129297] binder: 29127:29128 unknown command 25100 03:34:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x7, 0x70, 0x0, 0x4, 0x8, 0x10000, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0x6, 0x9, 0x1, 0x1, 0x4, 0x442e4d82, 0x7f, 0x1, 0x3ff, 0x3, 0x1, 0xf4ec, 0x3, 0x1f, 0x837, 0x8, 0x9, 0x54, 0x3, 0x8001, 0x6997, 0x0, 0x8001, 0x7f, 0x7, 0x3, 0x0, 0xffffffff, 0x3, @perf_bp={&(0x7f0000000100), 0x8}, 0x10000, 0x80000001, 0x80000001, 0x5, 0xfffffffffffff64e, 0x10001, 0x4}, r0, 0x5, r0, 0xe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c63000029f11f2c2b49f82c91958dfa3a8dc23755c6966e81e5aa5724ccac86e4946c8a9b3ab33b6374b3dca8838be496e49c9a5c134e5a084099c47735e6913aa407e86836d338a094fcd8ba59dc86ba4d24cbec385cc7751e51"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x3e, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0063404000000000000049b787dae0d00000000000000000000000000000000000e3f0a4025682e066b33b18cbc05c00000000000b00000018000000000000000800e8ffffff0000", @ANYRES16=r2, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffe3a, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000740)={0x100, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000340), &(0x7f0000000380)=[0x30, 0x40, 0x28, 0x38, 0x38, 0x38, 0x78, 0x30, 0x18]}}, @register_looper, @enter_looper, @acquire={0x40046305, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000440)=[@fd={0x66642a85, 0x0, r3, 0x0, 0x2}, @flat={0x77622a85, 0xa, r2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000400), 0x1, 0x3, 0x3}], &(0x7f00000004c0)=[0x0, 0x68]}, 0x54}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x20, 0x30, &(0x7f0000000500)=[@fda={0x66646185, 0x7, 0x2, 0x40}], &(0x7f0000000540)=[0x38, 0x38, 0x28, 0x30, 0x48, 0x38]}, 0x4}}, @increfs_done={0x40106308, r2, 0x2}], 0x7a, 0x0, &(0x7f00000006c0)="98159d2bf253fb8de8fb5b3acea5f642587228f441c59a123af8349391af3846a2ad5bddc79e90ebc40a861e2c219a91a340a0899bea81e38d8b9c544cc3a2d5e3f2f06ecd77c1aa000ecbd922543cf4ae2218037ad69328d3e48a2d1093978b65cce55471b1afe01fdc90e5357472968384765084849afc0c8d"}) [ 607.134985] binder: 29127:29128 ioctl c0306201 20000140 returned -22 [ 607.142247] binder: 29127:29128 transaction failed 29189/-22, size 24-8 line 3012 [ 607.150697] binder: 29127:29128 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.159158] binder: 29127:29129 unknown command 25100 [ 607.164470] binder: 29127:29129 ioctl c0306201 20000140 returned -22 [ 607.171353] binder: 29127:29128 transaction failed 29189/-22, size 24-8 line 3012 [ 607.179060] binder: 29127:29129 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.257603] binder: 29131:29133 transaction failed 29189/-22, size 1746186534970873346-6078667 line 3012 [ 607.267935] binder: 29131:29133 got transaction to invalid handle [ 607.274516] binder: 29131:29133 transaction failed 29201/-22, size 0-72 line 3012 03:34:03 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 607.309465] binder: 29088:29095 transaction failed 29189/-22, size 24-8 line 3012 [ 607.317350] binder: 29088:29134 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.325089] binder: 29088:29134 unknown command 0 [ 607.329998] binder: 29088:29134 ioctl c0306201 200003c0 returned -22 [ 607.344526] binder: 29093:29136 transaction failed 29189/-22, size 24-8 line 3012 03:34:03 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:03 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000180)=[@fda={0x66646185, 0x6, 0x1, 0x7}, @flat={0x77622a85, 0x101, r1, 0x2}], &(0x7f00000001c0)=[0x68, 0x20, 0x48, 0x20]}, 0xfff}}], 0x1, 0x1009000000000000, &(0x7f0000000040)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180000000000000008000000000006f9", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 607.356240] binder: 29137:29138 transaction failed 29189/-22, size 24-8 line 3012 [ 607.356361] binder: 29137:29138 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.357436] binder: 29137:29140 transaction failed 29189/-22, size 24-8 line 3012 [ 607.357526] binder: 29137:29140 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.416389] binder: 29143:29145 got reply transaction with no transaction stack [ 607.424074] binder: 29143:29145 transaction failed 29201/-71, size 56-32 line 2920 [ 607.432016] binder: 29143:29145 ioctl c0306201 20000140 returned -14 [ 607.445406] binder: 29141:29146 transaction failed 29189/-22, size 24-8 line 3012 [ 607.485355] binder: 29143:29147 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.493906] binder: 29105:29148 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 607.501888] binder: 29105:29108 transaction failed 29189/-22, size 24-8 line 3012 [ 607.509935] binder: 29105:29149 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.517180] binder: 29105:29149 unknown command 926120004 [ 607.522973] binder: 29105:29149 ioctl c0306201 200003c0 returned -22 [ 607.530332] binder: undelivered TRANSACTION_ERROR: 29201 03:34:03 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0046000000000000000037ca4851fdfdecb3c4b33004d93af8e73194f092aadbf0a8f7ee145c9899078f4e1ea7bb6edb990f78ba824c4ca087dd2cb06b80e6722e4c8b546485add9d24fb44bff7f6aaeec2a140e522a451a5b491b3aa7c406a68a42d298b9c6c48e00000000000000008d0031c526772c87c43b"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 607.597417] binder: 29150:29153 transaction failed 29189/-22, size 24-8 line 3012 [ 607.606074] binder: 29150:29153 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r2 = getuid() getgroups(0x3, &(0x7f0000000040)=[0x0, 0xee00, 0xee00]) fchown(r1, r2, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 607.747144] binder: 29116:29154 transaction failed 29189/-22, size 24-8 line 3012 [ 607.755931] binder: 29116:29154 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x40, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000480)="462a9eed565ecb8c9fac3974e8f85a6dd1a19c73f85c3284557aef0f6791cf9713f7f827b8258824644ea01153a1a5a8201201c954af1f1944a6898016a112f5b46ed7c048dd81a93b3c09de2523cd128604fb70c991565428d3fcb9de7703633fe27d2659097af88d78c1a9e5b3a3e6a199087bafaa04eec54b179fd6228540ce25fa6f7fc215f0d070d9b308aa5e7b", 0x90) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000280)=0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) fcntl$setsig(r3, 0xa, 0xe) write$P9_RSTATFS(r0, &(0x7f0000000180)={0x43, 0x9, 0x2, {0xdf9b, 0x100, 0x6, 0x6, 0x3, 0x2b14, 0x5, 0x51bf, 0x10001}}, 0x43) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04141040", @ANYRES64=0x0, @ANYBLOB="0000000000000000ddf932f90537e8fa676720913ec2a6bd1dac9dc3af09d83d7df7a3328e349320fa4608004d657dea872d0aa5251dba1806e18b2a6e3b504140f0185584733cf25543f23dc71f43bc8224ecdcb0"], 0x0, 0x0, &(0x7f0000000180)}) [ 607.825825] binder: 29156:29159 transaction failed 29189/-22, size 24-8 line 3012 [ 607.834115] binder: 29156:29159 BC_ACQUIRE_DONE u0000000000000000 no match [ 607.842791] binder_alloc: binder_alloc_mmap_handler: 29121 20001000-20004000 already mapped failed -16 [ 607.855618] binder: 29121:29160 transaction failed 29189/-22, size 24-8 line 3012 [ 607.939615] binder: 29162:29164 transaction failed 29189/-22, size 24-8 line 3012 [ 607.948160] binder: 29162:29164 unknown command 1074795524 [ 607.954209] binder: 29162:29164 ioctl c0306201 200003c0 returned -22 03:34:04 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x28581, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x3}, @register_looper], 0xaa, 0x0, &(0x7f0000000480)="ec0baa424222c23854037cb7f3ee30d607d5d2a6b296e1fad95394abcb06a5bd3231086f7703e67527c5978a4e39a6fe521f9de95330d78ccfd6c6daeba68bf5b11d666641712e4a65b2f708f14dcaf4c68fde78412195ff5876035c37b9b33e86d4e30159a639750d6083930359491b9fbf367a2a7449c1e5aa491021229dd4f36c257a13005fc065f8d01bd769ff9f32160d294e691ae63648162d89e04e620e0e37e10c1393c62e49"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x20000000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 608.006414] binder: 29131:29165 transaction failed 29189/-22, size 1746186534970873346-6078667 line 3012 [ 608.016643] binder: 29131:29166 got transaction to invalid handle [ 608.023218] binder: 29131:29166 transaction failed 29201/-22, size 0-72 line 3012 [ 608.095487] binder: 29168:29170 transaction failed 29189/-22, size 24-8 line 3012 [ 608.103784] binder: 29168:29170 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:04 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x34, 0x35, 0x17, 0x11, 0xa, 0x6, 0x0, 0xab}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 608.181051] binder: 29141:29146 transaction failed 29189/-22, size 24-8 line 3012 [ 608.216669] binder: 29143:29147 got reply transaction with no transaction stack 03:34:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0763044004000000f99e9488a2b330de771941c77d98d8f09efeebf9df52"], 0x0, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0x3) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'nat\x00'}, &(0x7f00000000c0)=0x54) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 608.216688] binder: 29143:29175 transaction failed 29189/-22, size 24--502714308405231608 line 3012 [ 608.233972] binder: 29143:29147 transaction failed 29201/-71, size 56-32 line 2920 [ 608.242005] binder: 29143:29147 ioctl c0306201 20000140 returned -14 [ 608.262794] binder: 29173:29176 transaction failed 29189/-22, size 24-8 line 3012 03:34:04 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 608.267156] binder: 29178:29179 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 608.267320] binder: 29178:29179 transaction failed 29189/-22, size 24-8 line 3012 [ 608.267399] binder: 29178:29179 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.268467] binder: 29178:29180 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 608.268713] binder: 29178:29179 transaction failed 29189/-22, size 24-8 line 3012 [ 608.268752] binder: 29178:29180 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.268758] binder: 29178:29180 unknown command 0 [ 608.268766] binder: 29178:29180 ioctl c0306201 200003c0 returned -22 [ 608.312319] binder: 29173:29183 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.351995] binder: 29150:29153 transaction failed 29189/-22, size 24-8 line 3012 [ 608.358438] binder: 29182:29186 transaction failed 29189/-22, size 24-8 line 3012 [ 608.359073] binder: 29182:29186 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:04 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 608.359816] binder: 29150:29185 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.446382] binder: 29188:29190 transaction failed 29189/-22, size 24-8 line 3012 [ 608.454884] binder: 29188:29190 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:04 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x216, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00e9b800"], 0x1, 0x1009000000000000, &(0x7f00000001c0)='+'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bb8d000000b8e219"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$KDENABIO(r0, 0x4b36) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xffb6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r1], @ANYBLOB="f1281a29126f6ca55c5d492dc0c984325f13128a87f73386a8a93313d201b418546fdc163a13f9d03e474cfbe228bd4fe4d6be4f053ab28b5f1e4ace5e49fc5d35ad2b837e21388d32b19427e91211e052998405c0b083fd6a18b44f417f337010d286eee32f7384bc10b6502e56ada6c5fcfe490799a61a391a47a9d8b82e917055ed45084f5c56c1147137a39fc743543b5a2fe9d8b903de772712dfac2193dbfd87b914274d5d5974c238ad0d6358ab3cabf57b8594fb978fc5f1557c13c176751b0c1e7b46cafd54d631763371629927bf9654", @ANYBLOB="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", @ANYRESOCT=r0], @ANYBLOB="000000000000fff0"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) [ 608.581652] binder: 29156:29191 transaction failed 29189/-22, size 24-8 line 3012 [ 608.581669] binder: 29156:29192 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.621295] binder: 29194:29195 unknown command 12118272 [ 608.627079] binder: 29194:29195 ioctl c0306201 20000140 returned -22 [ 608.634588] binder: 29194:29195 transaction failed 29189/-22, size 24-8 line 3012 [ 608.642900] binder: 29194:29195 BC_ACQUIRE_DONE u0000000020000480 no match [ 608.650822] binder: 29194:29195 unknown command 0 [ 608.656947] binder: 29194:29195 ioctl c0306201 200003c0 returned -22 [ 608.665661] binder: 29194:29195 unknown command 12118272 [ 608.668261] binder: 29194:29196 transaction failed 29189/-22, size 24-8 line 3012 03:34:05 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62ab11630000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000002"], 0x0, 0x0, &(0x7f0000000180)}) [ 608.668605] binder: 29194:29197 BC_ACQUIRE_DONE u0000000020000480 no match [ 608.668612] binder: 29194:29197 unknown command 0 [ 608.668621] binder: 29194:29197 ioctl c0306201 200003c0 returned -22 [ 608.690192] binder: 29162:29199 transaction failed 29189/-22, size 24-8 line 3012 [ 608.694495] binder: 29162:29198 unknown command 1074795524 [ 608.694541] binder: 29162:29198 ioctl c0306201 200003c0 returned -22 03:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="3b000072000000005ea30dd6c2ed901135eb22daac715b470b19f3afa040686ba032acb1cc098117ca29bc56d5245c978d4b8edb2df0a0cddd0e90ade4f7d34e75f6e57c35763d92c320f8ec53243d18461259"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r2 = dup(r1) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x2, 0x3, 0x1}, 0x81}}, 0x18) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 608.726526] binder: 29194:29195 ioctl c0306201 20000140 returned -22 03:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="007cdda06937098d"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 608.759423] binder: 29204:29205 transaction failed 29189/-22, size 24-8 line 3012 [ 608.769959] binder: 29204:29205 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.778345] binder: 29204:29206 transaction failed 29189/-22, size 24-8 line 3012 [ 608.788800] binder: 29204:29205 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000040)}) r2 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={[], 0x7, 0x5, 0xffff800000000000, 0x5, 0x20, r2}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) [ 608.808608] binder: 29201:29208 transaction failed 29189/-22, size 24-8 line 3012 [ 608.817721] binder: 29201:29208 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.850874] binder: 29168:29212 transaction failed 29189/-22, size 24-8 line 3012 [ 608.887461] binder: 29210:29216 transaction failed 29189/-22, size 24-8 line 3012 [ 608.896127] binder: 29210:29216 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.923451] binder: 29213:29217 transaction failed 29189/-22, size 24-8 line 3012 [ 608.931778] binder: 29213:29217 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:05 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1cca79808118397b, &(0x7f0000000500)="e21f49782504e38cce9cde4c9ec4ea7c04bba6d530a875a9981c3c2dc05327be7a2e6977b7895a31244e19f34f4492af0125f59a082a9412419a5a76624e3fbf87f6d6b8fa61f6b43dcbee135ad980914e64b9e5555ffbb169316bba2cb689a96f1d520ecf969107398585d198af6a15bc3f04412d0677ff5b6ab57a9c29515789af103e4c2109512e602b1095def49d2ea8", 0x92) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000020000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 609.007793] binder: 29173:29176 transaction failed 29189/-22, size 24-8 line 3012 [ 609.009163] binder: 29173:29183 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x101, 0x7ff, 0x3, 0x5, 0x0, 0x1dda6432}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 609.089337] binder: 29219:29222 transaction failed 29189/-22, size 24-8 line 3012 [ 609.098613] binder: 29219:29222 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.112604] binder: 29182:29223 transaction failed 29189/-22, size 24-8 line 3012 [ 609.120650] binder: 29182:29223 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:05 executing program 3: openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 609.198349] binder: 29225:29227 transaction failed 29189/-22, size 24-8 line 3012 [ 609.206781] binder: 29225:29227 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.207145] binder: 29188:29190 transaction failed 29189/-22, size 24-8 line 3012 [ 609.207437] binder: 29188:29228 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.283305] binder: 29230:29232 transaction failed 29189/-22, size 24-8 line 3012 [ 609.291733] binder: 29230:29232 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:05 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz0', "a1772049140080ca2d4ae2b5325ee324b855deee852cf56ab43e900346edf183bdc42f1f9a1427be5f9459850ce79a227c4515c52adeef752ec91ee9e42659b98db3621d9fbd717733f93a1f95e697b769b0faab7770daf17edc97f81c23a94d87bea96ff18b0243be98135683a6359396d7c4539045"}, 0x7a) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300000589b6ac12462c14e5413b"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) fcntl$getown(r2, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000005514e571a7927388b67d4ea90000d72c4c33b9139b9819000c204e07000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 609.529148] binder: 29201:29233 transaction failed 29189/-22, size 24-8 line 3012 [ 609.537705] binder: 29201:29208 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) socketpair(0x10, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000500)=""/216) [ 609.630850] binder: 29235:29237 transaction failed 29189/-22, size 24-8 line 3012 [ 609.639090] binder: 29235:29237 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.647102] binder: 29210:29238 transaction failed 29189/-22, size 24-8 line 3012 [ 609.655172] binder: 29210:29216 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:06 executing program 1: r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, @aes128, 0x0, "97b7cb2b54549c85"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 609.679381] binder: 29213:29217 transaction failed 29189/-22, size 24-8 line 3012 [ 609.687203] binder: 29213:29240 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.736460] binder: 29241:29247 transaction failed 29189/-22, size 24-8 line 3012 [ 609.744879] binder: 29241:29247 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.758407] binder: 29244:29248 transaction failed 29189/-22, size 24-8 line 3012 [ 609.766728] binder: 29244:29248 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x120) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/29) mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000005000/0x1000)=nil) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)="df6c51c7bf5f8a4d8643869e4ccb891cdfcdf842", 0x14) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x1000, &(0x7f0000000000)=ANY=[@ANYBLOB="2c636f6e74657874050000000000000000e1e7ff090baf08a214008000001dda8cf5e89574"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000015000)='logon\x00', &(0x7f0000014000), &(0x7f0000014000)="578ea44f6ba3a636ffe97fbf75d7f372f0e7dc32856ed7aba5b6170997cd8b3e7f4fb91f56a1d51d0440a1121990753224a83c0fabcdf91de1ac17b66df943ab65c55d35edaefad063", 0x49, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000380)="73656375234e902012b8d34d00", r4) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000180)={'bond_slave_1\x00', @link_local}) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000440)={0x5, &(0x7f0000000340)=[{0x9, 0x97cf, 0x7, 0x630e}, {0x81, 0xa787, 0x3, 0xffffffffffffffeb}, {0x0, 0xffffffffffff0000, 0xace5, 0x9}, {0x0, 0x0, 0x0, 0x503f1eeb}, {0x9, 0xce3, 0x8, 0x3ff}]}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6_vth0\x00', {0x2, 0x0, @multicast2}}) sched_setscheduler(r3, 0x5, &(0x7f0000000000)) setsockopt$inet6_buf(r2, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) keyctl$set_timeout(0xf, r4, 0x9) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$revoke(0x3, r4) shutdown(r6, 0x1) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl(r0, 0x20000000008912, &(0x7f0000000400)="0a5c2d0240316285717070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)={[{@shortname_winnt='shortname=winnt'}, {@uni_xlate='uni_xlate=1'}]}) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000001c0)=0x7e2) rt_sigpending(&(0x7f0000000200), 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000100)="97cc6d56cd851110d18ae788fd0b64ba276aa4ab8a7ab89bf497d185bf757d1260d1bed9fb533cb21322a8fce4fb6652ec5cc23e9cc975adb543218f76cafd915b37b616f54ab5e78b0a87639da29a5a9b1c96fa2826ee35f3683f8bdd7af000411a4c"}, 0x10) [ 609.839883] binder: 29219:29249 transaction failed 29189/-22, size 24-8 line 3012 [ 609.848606] binder: 29219:29250 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:06 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffd06, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x25, 0x0, &(0x7f0000000380)="1b7283b7285901e600b6a0463f1df967b07f60070e0dc6dad0443a13903205ddb0108a3eea"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='bond0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) 03:34:06 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09601040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 609.952632] binder: 29225:29227 transaction failed 29189/-22, size 24-8 line 3012 [ 609.955527] binder: 29257:29260 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.960541] binder: 29225:29259 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:06 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 610.037354] binder: 29261:29264 transaction failed 29189/-22, size 24-8 line 3012 [ 610.037754] binder: 29230:29232 transaction failed 29189/-22, size 24-8 line 3012 [ 610.037796] binder: 29230:29265 BC_ACQUIRE_DONE u0000000000000000 no match [ 610.037802] binder: 29230:29265 unknown command 0 [ 610.037811] binder: 29230:29265 ioctl c0306201 200003c0 returned -22 [ 610.081227] binder: 29261:29264 unknown command 1074814985 [ 610.087142] binder: 29261:29264 ioctl c0306201 200003c0 returned -22 [ 610.119409] binder: 29266:29269 transaction failed 29189/-22, size 24-8 line 3012 [ 610.127728] binder: 29266:29269 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x4, 0x7422, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 610.419434] binder: 29235:29271 transaction failed 29189/-22, size 24-8 line 3012 [ 610.419784] binder: 29235:29272 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4a6367acdd4b1fbd8ba17e7d2373be180940", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffffffffffe, @remote, 0xff}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x11) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000180)={0x8, 0x6}) 03:34:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r0, &(0x7f0000000240)={0x18, 0x73, 0x1, {{0x8e, 0x0, 0x4}, 0xfff}}, 0x18) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c610000ab7f66efbd59d1975ef8d089356e5b29bd01c7f6c1e69a95570c36a4dd8c9b02a99e24e706962e04aa1f8fd6ea6728a3148b3ad88644fca1a6ef04dec6e443948a91a68e7feca0130d24e125bf4d8f27effa0e766f3b2e655b3a298eff5d4164cd29482283fdac966e8fb8dae4bd16019ffafcec9331bfe7c9da83151579fd2f220f3413f9bc7f20beac4ebf5fc3505ff535f1d0626e76d0a671975be9ec5b782b40614e84677f3fa3969c91e78bd1c8eb34defd859bea38500eb138dab38b96a175912c27"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xac, 0x0, &(0x7f00000006c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0x1, 0x3, 0x3e}], &(0x7f00000000c0)=[0x30, 0x18, 0x38]}, 0x7}}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000180)=[@fda={0x66646185, 0x6, 0x3, 0x21}], &(0x7f00000001c0)=[0x20, 0x0]}, 0x6}}, @free_buffer={0x40086303, r2}, @enter_looper, @register_looper], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3d63d7405b891e7285558fcb696b9dc856d1207cdf", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 610.491302] binder: 29241:29276 transaction failed 29189/-22, size 24-8 line 3012 [ 610.499590] binder: 29241:29247 BC_ACQUIRE_DONE u0000000000000000 no match [ 610.507140] binder: 29274:29278 transaction failed 29189/-22, size 24-8 line 3012 [ 610.516017] binder: 29274:29278 BC_ACQUIRE_DONE u0000000000000000 no match [ 610.517741] binder: 29244:29248 transaction failed 29189/-22, size 24-8 line 3012 [ 610.517779] binder: 29244:29279 BC_ACQUIRE_DONE u0000000000000000 no match [ 610.517786] binder: 29244:29279 unknown command 0 [ 610.517794] binder: 29244:29279 ioctl c0306201 200003c0 returned -22 [ 610.563027] binder: 29282:29285 unknown command 24860 [ 610.563043] binder: 29282:29285 ioctl c0306201 20000140 returned -22 03:34:06 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000008db6f05c"], 0x0, 0x0, &(0x7f0000000180)}) [ 610.567865] binder: 29282:29285 got reply transaction with no transaction stack [ 610.567874] binder: 29282:29285 transaction failed 29201/-71, size 32-24 line 2920 [ 610.583333] binder: 29282:29285 unknown command 24860 [ 610.583345] binder: 29282:29285 ioctl c0306201 20000140 returned -22 [ 610.583516] binder: 29282:29286 got reply transaction with no transaction stack [ 610.583526] binder: 29282:29286 transaction failed 29201/-71, size 32-24 line 2920 [ 610.589982] binder: 29282:29285 unknown command 1087857469 [ 610.589994] binder: 29282:29285 ioctl c0306201 200003c0 returned -22 [ 610.590802] binder: undelivered TRANSACTION_ERROR: 29201 [ 610.590830] binder: undelivered TRANSACTION_ERROR: 29201 [ 610.621672] binder: 29281:29290 transaction failed 29189/-22, size 24-8 line 3012 [ 610.621900] binder: 29281:29290 unknown command -1402510518 [ 610.621908] binder: 29281:29290 ioctl c0306201 200003c0 returned -22 03:34:07 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000500)={0x80, {{0xa, 0x4e24, 0x400, @empty, 0x9}}}, 0x88) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RREAD(r4, &(0x7f00000000c0)={0xb, 0x75, 0x2}, 0xb) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) [ 610.675741] binder: 29287:29291 transaction failed 29189/-22, size 24-8 line 3012 [ 610.675847] binder: 29287:29291 BC_ACQUIRE_DONE u0000000000000000 no match [ 610.711249] binder: 29257:29292 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:07 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x4, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x9000002) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631060", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 610.784888] binder: 29294:29296 transaction failed 29189/-22, size 24-8 line 3012 [ 610.794012] binder: 29261:29264 transaction failed 29189/-22, size 24-8 line 3012 [ 610.794016] binder: 29261:29297 unknown command 1074814985 [ 610.794026] binder: 29261:29297 ioctl c0306201 200003c0 returned -22 [ 610.808415] binder: 29294:29296 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:07 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000001540)='./file0\x00', &(0x7f0000000340)='tmpfs\x00', 0x0, &(0x7f0000000500)) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 610.877047] binder: 29266:29269 transaction failed 29189/-22, size 24-8 line 3012 [ 610.878641] binder: 29266:29302 BC_ACQUIRE_DONE u0000000000000000 no match [ 610.926128] binder: 29299:29305 unknown command 1611686665 [ 610.933011] binder: 29299:29305 ioctl c0306201 200003c0 returned -22 [ 610.986430] binder: 29304:29307 transaction failed 29189/-22, size 24-8 line 3012 [ 610.995196] binder: 29304:29307 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:07 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000480)={{0xa, 0x4e20, 0x8, @remote, 0xca}, {0xa, 0x4e23, 0x8001, @mcast2, 0x4}, 0x7, [0x8000, 0x3, 0x7, 0x64e1, 0x35, 0xf04a, 0x8, 0x5]}, 0x5c) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000313a870005a23ec99efdc08db1eff40000000000000018000000000000100800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="17f1d9470028a40dc269828b1d811acc2439c6934d14e3f81ed9bd4724ed154467f1041eff5dde3bebaadff1e248352864a70a899f4f5a8ed66568ff50acae097f248c77c037528d4a21acf753b6fa99c5a9ab9df62f3626db7dab0e47a2e2770c1d07c0ec9dc4d3f6294644c37b14eb5899e43b9c954a7ee4544bdb67e932c6fa666db741ecbfe03f5b"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) finit_module(r2, &(0x7f0000000040)='/dev/rtc0\x00', 0x3) [ 611.261165] binder: 29274:29309 transaction failed 29189/-22, size 24-8 line 3012 [ 611.269063] binder: 29274:29308 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x40000, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000400)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) [ 611.350811] binder: 29311:29313 transaction failed 29189/-22, size -797223386634936631-1729382256910270464 line 3012 [ 611.362254] binder: 29311:29313 BC_ACQUIRE_DONE u0000000000000000 no match [ 611.367774] binder: 29281:29314 transaction failed 29189/-22, size 24-8 line 3012 [ 611.367846] binder: 29281:29290 unknown command -1402510518 [ 611.367855] binder: 29281:29290 ioctl c0306201 200003c0 returned -22 03:34:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x20012, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="37a41a6faa7145f60cddbdae564cfd66404ff8ed94080803f4f6cd6f672d7201e686004229a1b1d9b7c759752079dbe7", 0x30, 0xfffffffffffffffc) keyctl$setperm(0x5, r2, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000480)=""/223) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 611.414438] binder: 29287:29291 transaction failed 29189/-22, size 24-8 line 3012 [ 611.414445] binder: 29287:29318 BC_ACQUIRE_DONE u0000000000000000 no match [ 611.444204] binder: 29316:29320 transaction failed 29189/-22, size 24-8 line 3012 [ 611.452666] binder: 29316:29320 BC_ACQUIRE_DONE u0000000000000000 no match [ 611.492344] binder: 29319:29323 transaction failed 29189/-22, size 24-8 line 3012 [ 611.501087] binder: 29319:29323 ioctl 400c6615 200000c0 returned -22 [ 611.508073] binder: 29319:29323 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:07 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c631964"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="0000008200000080"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 611.540189] binder: 29294:29300 transaction failed 29189/-22, size 24-8 line 3012 [ 611.541249] binder: 29294:29324 BC_ACQUIRE_DONE u0000000000000000 no match [ 611.587611] binder: 29327:29328 unknown command 1679385356 [ 611.593991] binder: 29327:29328 ioctl c0306201 20000140 returned -22 [ 611.601139] binder: 29327:29328 transaction failed 29189/-22, size 24-8 line 3012 [ 611.609168] binder: 29327:29328 unknown command 0 [ 611.615122] binder: 29327:29328 ioctl c0306201 200003c0 returned -22 [ 611.622878] binder: 29327:29329 unknown command 1679385356 [ 611.628732] binder: 29327:29329 ioctl c0306201 20000140 returned -22 03:34:07 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="85216673009fd800b30025160c8c1773c662", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:08 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffff81, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f0000000180)="01e6470a1260e9c0f219ca53d857b77e23411e6c083f1e96b9b21c20c848e824aeec03f16e0eaa5060ab79faf4f9d88831804c454e27dacf3412800613a4ab9aa517703be19ddcf6945f08000000000000fc20c0ef1280c4ffd31fda051dd10994c175d1ea2ba23f25ecaa62ad7c2130"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 611.635797] binder: 29327:29328 transaction failed 29189/-22, size 24-8 line 3012 [ 611.635845] binder: 29327:29329 unknown command 0 [ 611.648950] binder: 29327:29329 ioctl c0306201 200003c0 returned -22 [ 611.672594] binder: 29299:29333 unknown command 1611686665 [ 611.680850] binder: 29299:29333 ioctl c0306201 200003c0 returned -22 03:34:08 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x2000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) write$smack_current(r0, &(0x7f0000000040)=',\x00', 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) write$smack_current(r0, &(0x7f0000000180)='vmnet0$cgroup[\x00', 0xf) [ 611.718272] binder: 29332:29338 transaction failed 29189/-22, size 24-8 line 3012 [ 611.727253] binder: 29332:29338 BC_ACQUIRE_DONE u0000000000000000 no match [ 611.736409] binder: 29304:29339 transaction failed 29189/-22, size 24-8 line 3012 [ 611.750659] binder: 29335:29340 BC_ACQUIRE_DONE u0000000000000000 no match [ 611.884561] binder: 29341:29344 transaction failed 29189/-22, size 24-8 line 3012 [ 611.893408] binder: 29341:29344 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:08 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000040)="3d68324485fba11248f59ea479f7f389bd40450b55d0385e42c955871424d4b179377ff2a73355", 0x27}, {&(0x7f0000000180)="3b9e008bbb9a213a9f5b216e649873e344bcad5759a9ecf0d8a4d9dc3859f78c5ce9c3c6712800cff69d970fc2d4156ed80d81e1188ca33b4a22bd3f4337a7a5aaf6f1fdd4415b30d65c9eda23f1c860de85d4c6c102dcdc57a86bbc305fa5a3b4df34ecf61a611de2b2cd07179dd0b58afa4bc1d833d262a043", 0x7a}, {&(0x7f0000000280)="5a8136b9d806734bd0d43d74d8cf002d60b41b1c0e35dae5034ca9359ba34a0e9839e06d9543b49d0897790a3f617eb6c414046d88c34fa552e31342176e70b5250867ee7a9a6d33d1", 0x49}, {&(0x7f0000000480)="f5c85b7c9164ea71dbedc027039f2efe061045ac7249c9f842dece935b88ae53be76412cc8a5dc219a2333292d10be46e7491e6f361ecf7b447b64753ee7fc6c4a5e8a3e91c9ce99b2708b6262d307b8ab2eafc0340e52603a372d024f5363f8859d7ee90b7815d99b646f695f6eb3fdc1e0b073843e97f9f58e9cae3dc569cf9837a138611064edcfe407413c325f4fd5ba7d160e9ba852c0cd0aef26aae765f6f8c54a06c40ea2", 0xa8}, {&(0x7f0000000540)="f5763eee94a3ea1f9561bf7cacdeb0455b9ddd7d009672709024d72d45007ae9eb57eedbfe617694d32389fb5fdf894ac53d9c30e4d231eec9f3ed84bcd57f757b986e05304b2b215ef5204431457cd0c84e6673e98ec00a8174abe632423084aab9dcf3e8fcaab735a62f978853a4cc6383b07d28d9241e7c4a2145f9565c3f3178cef04b7fe4f515ea7fef75acc3bc79a21b8c22718afaa248542cd7e80399311cf673a7da3772cd95794bc4ebe456b0d2220bfa57055363e8cf3f86f216245540b885a87e803f90310117ba539357f927a0b3be5292180fb54e931f0e19634d27", 0xe2}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="0cc1d364b3fe4b7dda4614e51bcb5c74fa069c83cac72d32e766fb8337b5c3a1c8a850016b171e065bedff99c4682a1f87e55ea9e1420a075979b5f86769b8ae99cec3264ded3dbdd2242e988d456a4f2b558da5e2378a5c0bb6031e0a49eb59591fc668747159ace20b11fb1da9834c0b8473df9607dccdac866758da99d607d834c249dd951e3a323dcb31dfaa9503e1acb4ba0f09ae5b41f1afd90460781d9d56e4f41dda091aa3d6d35d", 0xac}, {&(0x7f0000000380)="9eb2f378507b95efb79b40473733d72a2f3dbc56", 0x14}, {&(0x7f0000001780)="5f3b5e2e829a5cf9f8167536ced6b3e38ebea24f6bf3b586ffbeddb55116095654aabeabce6bc9a8b2626ff29f6a4c6b181d517f4f396a261ee429fa0db2e61af91f1e058da1939af0955905ceb4af46cfb66cb13286eb3680e4ecde6eb04c8cc5fa174326deac0ca5592dc71fd8f30269447790b9962e51dc364bfc219b35f5a42dd1859249fb33c46f0f67010a8766d71ec674020c7c404327d3fb3b8f6d24c1a04e09c6ac1097", 0xa8}, {&(0x7f0000000400)="9c7a26eec652", 0xffffffffffffffb5}], 0xa) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="002a626bf4ff0000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) setxattr$security_evm(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='security.evm\x00', &(0x7f0000001a80)=@ng={0x4, 0x10, "a8"}, 0x3, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001980)={0x34, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x3}, @exit_looper, @dead_binder_done={0x40086310, 0x4}, @increfs={0x40046304, 0x3}, @acquire_done={0x40106309, r3, 0x4}], 0x45, 0x0, &(0x7f0000001900)="c5eaf9f642d8c36f5f76040eb3caef1b5630d8007e713fdf57b0154a7bc5c96586e86531a9026d20e559efd90bf0f6c78a824fd7a1fd3744837de53c12a5202bba3b9bda0c"}) [ 612.096859] binder_alloc: binder_alloc_mmap_handler: 29311 20001000-20004000 already mapped failed -16 [ 612.117548] binder: 29311:29313 transaction failed 29189/-22, size -797223386634936631-1729382256910270464 line 3012 [ 612.118641] binder: 29311:29345 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="097310a7a19434e018fb8440", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) [ 612.198211] binder: 29316:29349 transaction failed 29189/-22, size 24-8 line 3012 [ 612.206548] binder: 29316:29320 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.212590] binder: 29347:29350 transaction failed 29189/-22, size 24-8 line 3012 [ 612.213124] binder: 29347:29350 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.213352] binder: 29347:29350 ioctl c0306201 20001980 returned -14 03:34:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x100, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000480)="93e6b82d5f8930a8ca51485e9ceeeb9bce7812c815010b580fab043af54b39dafdb9d4235033930f9a3b981a974f76c7723cccb5dea3368d9da91f2f877e3154ea774cf6a672eecc9b53bc13809bccb48e41ba8b128c2c063c47b13b636ed70a8b05abcab9639ab0277662d0e52cc2625a6e597bd658337df66ae65677f8a5fe8ddd0d86380e2ede85ec6f84964945be58299c3b5d0afc63de3914936a55081ba6198e9c6ca06d0cb08292d035159f37deb9cd83fcb351", 0xb7, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000380)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000540)='ppp1eth1proctrusted+@}*ppp0ppp1\x00', 0xfffffffffffffff8) request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='vmnet1wlan1\x00', r2) keyctl$get_keyring_id(0x0, r1, 0xffffffff) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62317c000009", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 612.248646] binder: 29319:29323 transaction failed 29189/-22, size 24-8 line 3012 [ 612.256694] binder: 29319:29353 ioctl 400c6615 200000c0 returned -22 [ 612.259004] binder: 29319:29356 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.311374] binder: 29355:29361 transaction failed 29189/-22, size 24-8 line 3012 [ 612.319650] binder: 29355:29361 unknown command -1492094199 [ 612.325794] binder: 29355:29361 ioctl c0306201 200003c0 returned -22 [ 612.337571] binder: 29359:29362 transaction failed 29189/-22, size 24-8 line 3012 [ 612.346327] binder: 29359:29362 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:08 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="400000000000000000000000000000000000000000000000000000000000000000180000000000000008bfaf2a1237000000000000000000000ff9ae3c8e725f840746696a53ea12768e84884c31d8ce159d8ed533f691ac6383bcd51f838fd08e3474c9473b0100d9585dc1296406f4c478f57f374f903a95627291e053696d39346989d30c845f3f05150f369dde016862ebfdc69f0a32e401aa8e60f2fb4129dd6402d76c1ac4e370cee4681834802f24ca3a17577181111715500acab246865ed78b5e7f25d9873402c0603cc42f033879481fea3fe1e52da39a6ee6f0d20a2037795aadf7963a45ff5b27cda66a000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) getdents64(r0, &(0x7f0000000500)=""/223, 0xdf) [ 612.473233] binder: 29332:29363 transaction failed 29189/-22, size 24-8 line 3012 [ 612.481700] binder: 29332:29338 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.509278] binder: 29365:29367 unknown command 1 [ 612.514572] binder: 29365:29367 ioctl c0306201 20000140 returned -22 03:34:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@dstopts={0x3b, 0x1, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x18) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x8001, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:34:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc40d000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0xe0, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x286400000}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe57c}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x9, &(0x7f0000000180)=[{0x401, 0x7fffffff, 0x10001, 0x3ff}, {0xff, 0x7f, 0x4, 0x34}, {0x8001, 0x7, 0x221a, 0x8c6}, {0x1ff, 0x0, 0x80000000, 0x1}, {0x0, 0x9, 0x8000, 0x5}, {0x7, 0xfffffffffffffffb, 0x2, 0x5ca886f0}, {0xc4, 0x20, 0x10001, 0x1}, {0x200, 0xfff, 0x800, 0x8000}, {0xfffffffffffffff9, 0x100, 0x3, 0x1}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03694477c5c4a1dd9c5cb909a38be4ff55e9abb548608bd6cd4ac59a9fbe9ad4b0088506981a9a0cd22a52e0ce1dedecd58beab7a17c466e9bae345f7e46fa37f207bf4e98ce9872a184c387da2239cccfbbeebd7a7ec3dd4f267e927a2ed512224698cf62963a695b4b38c480330561adffa70200baa333ca64677cddaa144b24940135454b5e43425cff70a9dae7bbe13e627856c13ff4e56d678146cf837f051c8d0f4b3f9919b0d86cdea830bb3925ca5718a2a615e73ce71c2dfcf7ab32e9ff6ae80b8d7ad32a3f11d27623054637ef17dc1af8202eefeb33ff5ef79ec6abb79f61f809df3385e59b95f68ebb9903384d079478d48e094c750e2e362fac83779ea20fec017bef308e8637dae327e076199549ff7b15b424067f98"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) fcntl$setstatus(r1, 0x4, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 612.522710] binder: 29365:29367 unknown command 64 [ 612.527971] binder: 29365:29367 ioctl c0306201 20000440 returned -22 [ 612.541382] binder: 29365:29367 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.546094] binder: 29368:29370 ioctl c0306201 20000140 returned -11 [ 612.546160] binder: 29368:29370 transaction failed 29189/-22, size 24-8 line 3012 [ 612.546367] binder: 29368:29370 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:08 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="09000000001a0000", @ANYRES64=0x0, @ANYBLOB="0010000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 612.547136] binder: 29368:29371 transaction failed 29189/-22, size 24-8 line 3012 [ 612.547295] binder: 29368:29371 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.590743] binder: 29372:29374 unknown command 2000972035 [ 612.590797] binder: 29372:29374 ioctl c0306201 20000140 returned -22 [ 612.591070] binder: 29372:29374 transaction failed 29189/-22, size 24-8 line 3012 03:34:08 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) write$selinux_user(r0, &(0x7f0000000040)={'system_u:object_r:usb_device_t:s0', 0x20, 'root\x00'}, 0x27) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 612.591160] binder: 29372:29374 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.599525] binder: 29372:29379 unknown command 2000972035 [ 612.599536] binder: 29372:29379 ioctl c0306201 20000140 returned -22 [ 612.599747] binder: 29372:29377 transaction failed 29189/-22, size 24-8 line 3012 [ 612.600321] binder: 29372:29374 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.644121] binder: 29341:29383 transaction failed 29189/-22, size 24-8 line 3012 [ 612.644202] binder: 29341:29344 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:09 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 612.676579] binder: 29381:29386 transaction failed 29189/-22, size 24-8 line 3012 [ 612.683885] binder: 29365:29388 unknown command 1 [ 612.683895] binder: 29365:29388 ioctl c0306201 20000140 returned -22 [ 612.684132] binder: 29365:29367 unknown command 64 [ 612.684163] binder: 29365:29367 ioctl c0306201 20000440 returned -22 [ 612.684336] binder: 29365:29388 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.719601] binder: 29381:29386 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.731346] binder: 29385:29392 transaction failed 29189/-22, size 24-8 line 3012 [ 612.739622] binder: 29385:29392 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.759326] binder: 29390:29393 transaction failed 29189/-22, size 24-8 line 3012 [ 612.767779] binder: 29390:29393 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:09 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x2f, 0x1009000000000000, &(0x7f00000006c0)="2bc8c3a79805aad5ab69fd87d379efa2eee8fc9603b9949cfb02864e71fb62a5179de4d2cfce677b7e1a767c2d096a"}) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000002c0)=0xfffffffffffffffa) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = add_key(&(0x7f0000000380)='trusted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="756dc900c6f7e14c3ac1570dd738c138458f75e29f508d66b61f97dc0254d3e019e2c30f9327aa852333fe8487e6c919782eb8ee7e3e0fa7fba423986f75334dcb7b5cd185bfab05d138dd91c850d73ca5fc9b8292f6993d05c3553fb1e08e4d5451ece73add31b467ebcf57a7d782e4b645051bfe4314d276c13d4f15b00037d8816053d66c398fd5d67b3787a5bbc6f0f52afca4ef0eba3f050f0a537eb5f624379727d79b529cd7abd9bd06fc8fec06c652e2daaa8dc5c872a4bb3694f3edf5fd", 0xc2, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000580)='id_legacy\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)='ppp0GPLmd5sumvmnet0\x00', 0xfffffffffffffffd) keyctl$unlink(0x9, r4, r5) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 612.958710] binder_alloc: binder_alloc_mmap_handler: 29347 20001000-20004000 already mapped failed -16 [ 612.969611] binder: 29347:29395 transaction failed 29189/-22, size 24-8 line 3012 [ 612.977595] binder: 29347:29394 BC_ACQUIRE_DONE u0000000000000000 no match [ 612.985308] binder: 29347:29350 ioctl c0306201 20001980 returned -14 03:34:09 executing program 2: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) io_setup(0x9, &(0x7f0000000040)=0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000380)={0x7, 0x4b, 0x2}, 0x7) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000180)="96f794ed7abf33c81182249d6aec3553ceddf3b8a71d3d62a2059297f24ce7140dafcd931125b0ac1092240a7638f57cbbe9c5cdaab32d8ecbba7f40021041d5e8b8e50e16ab94cddc28f123dfe269fe85429928910655ae8a0079f61b73ca52804bf395879646511f8be2d3e0b7bab13aa5023d43688dd0a145dd8293", 0x7d, 0xfffffffffffffff7, 0x0, 0x1, r0}, &(0x7f00000002c0)) [ 613.062480] binder: 29396:29399 transaction failed 29189/-22, size 24-8 line 3012 [ 613.071263] binder: 29396:29399 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.072669] binder: 29355:29400 transaction failed 29189/-22, size 24-8 line 3012 [ 613.072742] binder: 29355:29361 unknown command -1492094199 [ 613.072751] binder: 29355:29361 ioctl c0306201 200003c0 returned -22 03:34:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="3b577dfdb3bb671bcab5992148", 0xd, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r1, 0xff, 0x8, r2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) socketpair$inet(0x2, 0x80e, 0x3, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r3, 0x5, 0x100000000, &(0x7f0000000400)=""/38, &(0x7f0000000480)=0x26) [ 613.094303] binder: 29359:29402 transaction failed 29189/-22, size 24-8 line 3012 [ 613.173328] binder: 29407:29413 transaction failed 29189/-22, size 24-8 line 3012 [ 613.182209] binder: 29407:29413 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.195338] binder: 29410:29414 transaction failed 29189/-22, size 24-8 line 3012 [ 613.204265] binder: 29410:29414 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 613.430641] binder: 29381:29386 transaction failed 29189/-22, size 24-8 line 3012 [ 613.431565] binder: 29381:29415 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:09 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast2, 0xce}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 613.478052] binder: 29385:29419 transaction failed 29189/-22, size 24-8 line 3012 [ 613.508368] binder: 29417:29423 transaction failed 29189/-22, size 24-8 line 3012 [ 613.513577] binder: 29390:29424 transaction failed 29189/-22, size 24-8 line 3012 03:34:09 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10001c, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 613.513805] binder: 29390:29425 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.532308] binder: 29417:29423 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.549526] binder: 29420:29426 transaction failed 29189/-22, size 24-8 line 3012 [ 613.558250] binder: 29420:29426 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.621360] binder: 29427:29430 transaction failed 29189/-22, size 24-8 line 3012 [ 613.629722] binder: 29427:29430 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:10 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000001c0)={0x7fffffff, 0x1, 0xae}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x400002000005) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x1, 0x5, 0x2, 0xfffffffffffffffd, 0x5, 0x93, 0x20, 0xc5a, 0x1, 0xfffffffffffffa4d, 0x0, 0x7ff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="046300003492002f084cba0ebff070a43fde74625b85d09b61ee99e02bf0d205fcefb6776e0cfb8e3bdf57c4333b01208c4c1a91fbebd7443042b7"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00020000436362e6aac3e4093ec73778eec6b959d22010727c36d39d8f9db1f1df3891"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="dac80b9675a21c4cd4336719a38fa00000000000000000314af62f920bcc101b7534eb"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000540)=""/152) signalfd(r2, &(0x7f00000003c0)={0xdb1e}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0xffffffffffffffb9, 0x0, &(0x7f0000000380)=[@acquire_done], 0x2b2, 0x0, &(0x7f0000000180)}) ioctl$TIOCSTI(r0, 0x5412, 0x9) [ 613.858098] binder: 29396:29434 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.858212] binder: 29396:29399 transaction failed 29189/-22, size 24-8 line 3012 03:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 613.927761] binder: 29407:29413 transaction failed 29189/-22, size 24-8 line 3012 [ 613.932892] binder: 29440:29441 unknown command 25348 [ 613.932931] binder: 29440:29441 ioctl c0306201 20000140 returned -22 [ 613.933372] binder: 29440:29441 transaction failed 29189/-22, size 24-8 line 3012 [ 613.933628] binder: 29440:29441 ioctl 4b60 20000540 returned -22 [ 613.934031] binder: 29407:29442 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.951388] binder: 29410:29414 transaction failed 29189/-22, size 24-8 line 3012 [ 613.951429] binder: 29410:29444 BC_ACQUIRE_DONE u0000000000000000 no match [ 613.951436] binder: 29410:29444 unknown command 0 [ 613.951444] binder: 29410:29444 ioctl c0306201 200003c0 returned -22 03:34:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) r2 = mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c630066c52f7b9cdd439e314fdc995e7939171b1f7ac576d05af1eed8565154083d5bb0fc2f1e7593373d8fd6a2c13fbcb09755055657f8e9cdf3ae8dfc9688550907f8fbbede025dfa4a331e8eef995623c0273333f6aa2bf31d480f1e6c5f1f"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 614.034406] binder: 29446:29449 transaction failed 29189/-22, size 24-8 line 3012 [ 614.042759] binder: 29446:29449 BC_ACQUIRE_DONE u0000000000000000 no match [ 614.100440] binder: 29451:29452 unknown command 1711301388 [ 614.106398] binder: 29451:29452 ioctl c0306201 20000140 returned -22 [ 614.113904] binder: 29451:29452 transaction failed 29189/-22, size 24-8 line 3012 [ 614.122238] binder: 29451:29452 BC_ACQUIRE_DONE u0000000000000000 no match [ 614.131228] binder: 29451:29453 unknown command 1711301388 [ 614.137142] binder: 29451:29453 ioctl c0306201 20000140 returned -22 03:34:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00674040000000000000000000000000000000000000000000000000000000000000000018c6800000000000080000000000000001f91ef5a850d7d9b85921730d82b5d5b6d5279239e057ed97afffa121020000009be59e3ae4d38dd0edc4650ed2f7b3b604f6e0d0691ad3a6b43073d5096d169dfbc0bc91b5d15acd0959c3bb37e8c91c23d1393a824de81bab21cd1c357a9adb04fc6d9cbb55ecaa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 614.144161] binder: 29451:29452 transaction failed 29189/-22, size 24-8 line 3012 [ 614.150173] binder: 29451:29453 BC_ACQUIRE_DONE u0000000000000000 no match [ 614.224383] binder: 29455:29457 unknown command 1077962496 [ 614.230478] binder: 29455:29457 ioctl c0306201 20000440 returned -22 [ 614.263775] binder: 29417:29459 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="aac5cc15f6867fb138d134128abdcfb649a5c3b367bf27a1c6c63c39990f63758adac0ab7439fbd4592a25a0764843240fedd81a50f434271e8919fefa29a15d521d58fb91e074af2729c512fdd591cd0e3dd0ea7a786b84ca350a93f1"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 614.263839] binder: 29417:29458 transaction failed 29189/-22, size 24-8 line 3012 03:34:10 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 614.300012] binder: 29461:29462 unknown command 365741482 [ 614.306301] binder: 29461:29462 ioctl c0306201 20000140 returned -22 [ 614.310632] binder: 29420:29426 transaction failed 29189/-22, size 24-8 line 3012 [ 614.328065] binder: 29461:29462 transaction failed 29189/-22, size 24-8 line 3012 [ 614.338059] binder: 29461:29462 unknown command 1074815758 [ 614.343890] binder: 29461:29462 ioctl c0306201 200003c0 returned -22 03:34:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) [ 614.351956] binder: 29461:29468 unknown command 365741482 [ 614.357749] binder: 29461:29468 ioctl c0306201 20000140 returned -22 [ 614.365199] binder: 29461:29462 transaction failed 29189/-22, size 24-8 line 3012 [ 614.365204] binder: 29461:29467 unknown command 1074815758 [ 614.365213] binder: 29461:29467 ioctl c0306201 200003c0 returned -22 [ 614.380266] binder: 29427:29430 transaction failed 29189/-22, size 24-8 line 3012 03:34:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x8000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x8001, 0x4, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/140, 0x8c}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000040)}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000002c0)={0x0, @speck128}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 614.380363] binder: 29427:29430 BC_ACQUIRE_DONE u0000000000000000 no match [ 614.400519] binder: 29464:29470 transaction failed 29189/-22, size 24-8 line 3012 [ 614.403296] binder: 29464:29470 unknown command 0 [ 614.403306] binder: 29464:29470 ioctl c0306201 200003c0 returned -22 [ 614.449312] binder: 29472:29477 transaction failed 29189/-22, size 24-8 line 3012 [ 614.457850] binder: 29472:29477 BC_ACQUIRE_DONE u0000000000000000 no match [ 614.491853] binder: 29474:29478 transaction failed 29189/-22, size 24-8 line 3012 [ 614.500156] binder: 29474:29478 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:11 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c670004"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40086310, 0x3}], 0xc6, 0x0, &(0x7f00000004c0)="f1a942c64b683afabda193c4fb3b8bd9dab767ee01c6793dbdb96f59a3a8bc5daa4310d291fcdb0d8689b7deaa973bb8c3553ba53823caf93816bd2326769b71ed9c6b746e08805b1aaa34a13b14b28ccfd71abce4bf89ab82b0aa172115c0cee4e1e4f1662ab8fe0e4ab84909d864f197c16d1a5e26dbff72940cea7729ba894be19e4d931eccd37933346119e9fb04d21c5bb388359a9897518fee7e8bd79c06469f266d7c168e08d241d0b5a3400447e0c4ee68c7ac392e5c12369842a1dc3f0a52e24f5d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="b94f6efca3c183d3fbebaaa6fcfaf1df3251cf3381acb2943547a5c28e0600bb973b4db4a6d0eed2d2d95701ea6ebb8852bcb704fe486f9a291f47e531064bb7ae30a4d0f4e0d1c2a91327d2b49ff7642f5c8049e1d12b76c4cba2eb5bf35207d91259026c40309b53eb64d1fe5753147ec57f1a11af", 0x76, 0xfffffffffffffffa) getresgid(&(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)=0x0) keyctl$chown(0x4, r3, 0x0, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000ffb7ef9160770e8e00000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 614.728114] binder_alloc: binder_alloc_mmap_handler: 29440 20001000-20004000 already mapped failed -16 [ 614.745340] binder: 29440:29480 unknown command 25348 [ 614.750876] binder: 29440:29480 ioctl c0306201 20000140 returned -22 [ 614.757690] binder: 29440:29479 transaction failed 29189/-22, size 24-8 line 3012 03:34:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2000000000000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) syz_emit_ethernet(0xdb, &(0x7f00000006c0)={@dev={[], 0x13}, @local, [], {@mpls_uc={0x8847, {[{0x2, 0x5, 0x1, 0x82}, {0x40, 0xfffffffffffffffd, 0x20, 0x6}, {0x100000001, 0x3ff, 0x9, 0x400}, {0x6d0, 0x10001, 0x4, 0x81}, {0xc4f, 0x4, 0x9, 0x80000001}, {0x9, 0x2a37, 0x1, 0x5}, {0x7ff, 0x3ff, 0x7f, 0x4}], @llc={@llc={0xe0, 0xf0, "80", "ee9c97bd00fd5691cd10f75cd518ceaca2c2243d63a5abeb980551c0ba9c8ebcb63bba200916361a2c43e78eefcfda52b5417d7801da3e5a1171f6fbefe5ac08a14cc0a718910f91893210eb829544cd480778865ad64e86fd58c1b75598a5396da7c24efcbd9dc7b542e50bcbf0c7194e14223db60aed80abc06c67183c657404eb73e306d445f9bd9dd1bda503667f56e28db84ace60e74e13cdb384723fff5cda0cede0fbfa24645fd69c65e0"}}}}}}, &(0x7f0000000040)={0x0, 0x1, [0x40000004ae, 0xc4d, 0x525, 0x7fc]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 614.782359] binder: 29446:29481 transaction failed 29189/-22, size 24-8 line 3012 [ 614.792032] binder: 29446:29449 BC_ACQUIRE_DONE u0000000000000000 no match [ 614.810186] binder: 29483:29484 unknown command 67135244 [ 614.823291] binder: 29483:29484 ioctl c0306201 20000140 returned -22 [ 614.882251] binder: 29483:29489 BC_ACQUIRE_DONE node 1964 has no pending acquire request 03:34:11 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0ce30000"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:34:11 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 614.977954] binder: 29455:29491 unknown command 1077962496 [ 614.983825] binder: 29455:29491 ioctl c0306201 20000440 returned -22 [ 615.076335] binder: 29496:29499 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:11 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {}, {0x20, 'system#trusted'}], 0xa, "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"}, 0x1029) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) flock(r1, 0x2) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xe0, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc9e4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb5de}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xcd}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 615.139224] binder: 29464:29500 unknown command 0 [ 615.144227] binder: 29464:29500 ioctl c0306201 200003c0 returned -22 [ 615.151561] binder: release 29464:29470 transaction 1969 out, still active [ 615.158917] binder: unexpected work type, 4, not freed [ 615.164677] binder: undelivered TRANSACTION_COMPLETE 03:34:11 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xb64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 615.204833] binder: 29472:29505 BC_ACQUIRE_DONE node 1973 has no pending acquire request [ 615.213617] binder: release 29472:29477 transaction 1972 out, still active [ 615.222048] binder: unexpected work type, 4, not freed [ 615.234223] binder: undelivered TRANSACTION_COMPLETE 03:34:11 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfe, 0x0, &(0x7f0000000480)="12df65afbfc0c72f15f66f5aed427cfd17ed35abc52ed694c9ba707c49664d5106594ad383ec441e8281e4aba180fa33b06d2694a7656242d0b6dfe0f5bada807f4fdad12df0b80af775411fe9141f26da77226fd033e3c8a934b8f734021f825025cca2f12fd483329c6fea1e8280c5f57b0000647348262d50f3bfe5eae53cacc190d73faa8d3c9fd79c4237b4c1c40b59fb8f93ff5dc0ac3e369f6fbc316c7a502fd03133f80a6a5f1d077416a8bcb34ba40ccda027bd361f1fe20555de975c6ac4c525cfacd493833dfc24680a145295672ebad0ff2fd7882768e47c254115dc299c9192c43936a2f6a5b67cbe000000000000000000000000000000"}) [ 615.248694] binder: 29474:29511 BC_ACQUIRE_DONE node 1979 has no pending acquire request [ 615.257229] binder: 29474:29511 unknown command 0 [ 615.262519] binder: 29474:29511 ioctl c0306201 200003c0 returned -22 [ 615.269665] binder: release 29474:29478 transaction 1978 out, still active [ 615.283674] binder: unexpected work type, 4, not freed [ 615.292933] binder: undelivered TRANSACTION_COMPLETE 03:34:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x1, 0x3, 0x1d}, @fda={0x66646185, 0xa, 0x4, 0xd}], &(0x7f0000000180)=[0x20, 0x40]}}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, r2, 0x1}, @transaction={0x40406300, {0x4, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x68, 0x38, &(0x7f0000000280)=[@ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x1, 0x1, 0x1b}, @fda={0x66646185, 0x4, 0x2, 0xe}, @fda={0x66646185, 0x5, 0x3, 0x35}], &(0x7f0000000380)=[0x38, 0x18, 0x38, 0x40, 0x28, 0x18, 0x48]}}], 0xa7, 0x0, &(0x7f00000005c0)="aada245b341d4f65d5010d0cb4ad86db9baf8f3f1651de779659cfec17d837dfef84e25daf2804584cdf17bd2317bafbc14d388419606f7ec7e1654ca6d26791b82e94274e440cdc26fb25eafa93a8e62b49902f1cdef17f3c50fc17cf34f4a0c70998ccfda355b44ca5c646ce2ef27468b7a60814c21b980076cf5091e033fb72042167d0d0e2449f89ceaffbcdfa5f9727cb903b6133ac18f144125aced7d3cce01917c36b75"}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:11 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x40080, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:11 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 615.595109] binder: 29483:29489 unknown command 67135244 [ 615.595491] binder: BINDER_SET_CONTEXT_MGR already set 03:34:11 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006303f4"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 615.595529] binder: 29483:29517 ioctl 40046207 0 returned -16 [ 615.596146] binder_alloc: 29483: binder_alloc_buf, no vma [ 615.596248] binder: 29483:29517 transaction failed 29189/-3, size 24-8 line 3135 [ 615.596433] binder: 29483:29518 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:12 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="e80fcac0d498157f"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x81) fcntl$setflags(r0, 0x2, 0x1) [ 615.596439] binder: 29483:29518 unknown command 0 [ 615.596448] binder: 29483:29518 ioctl c0306201 200003c0 returned -22 [ 615.601051] binder: send failed reply for transaction 1963 to 29483:29484 [ 615.601059] binder: 29502:29503 ioctl c0306201 20000140 returned -14 [ 615.601068] binder: send failed reply for transaction 1966 to 29486:29488 [ 615.601080] binder: send failed reply for transaction 1969, target dead [ 615.601090] binder: send failed reply for transaction 1972, target dead [ 615.601099] binder: 29508:29510 ioctl c0306201 20000140 returned -14 [ 615.601102] binder: send failed reply for transaction 1975 to 29502:29509 [ 615.601114] binder: send failed reply for transaction 1978, target dead [ 615.601127] binder: send failed reply for transaction 1981 to 29508:29512 [ 615.601142] binder: send failed reply for transaction 1984 to 29514:29516 [ 615.601267] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.601274] binder: 29514:29515 ioctl c0306201 20000140 returned -14 [ 615.601330] binder: 29486:29487 ioctl c0306201 20000140 returned -14 [ 615.602949] binder: 29508:29510 transaction failed 29189/-22, size 24-8 line 3012 [ 615.603065] binder: 29508:29510 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.603450] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.607953] binder: 29486:29488 transaction failed 29189/-22, size 24-8 line 3012 [ 615.608217] binder: 29486:29488 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.608509] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.613588] binder: 29502:29520 transaction failed 29189/-22, size 24-8 line 3012 [ 615.614433] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.632505] binder: 29514:29524 transaction failed 29189/-22, size 24-8 line 3012 [ 615.685310] binder: 29529:29531 ioctl c0306201 20000140 returned -11 [ 615.693278] binder: 29529:29531 transaction failed 29189/-22, size 24-8 line 3012 [ 615.693665] binder: 29529:29531 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.701526] binder: 29532:29534 unknown command -201104640 [ 615.701538] binder: 29532:29534 ioctl c0306201 20000140 returned -22 [ 615.701609] binder: 29532:29534 transaction failed 29189/-22, size 24-8 line 3012 [ 615.701685] binder: 29532:29534 ioctl 8008700b 20000040 returned -22 [ 615.701783] binder: 29532:29534 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.702452] binder: 29522:29536 transaction failed 29189/-22, size 24-8 line 3012 [ 615.702595] binder: 29522:29536 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.702650] binder: 29529:29531 transaction failed 29189/-22, size 24-8 line 3012 [ 615.702689] binder: 29529:29535 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.702695] binder: 29529:29535 unknown command 0 [ 615.702704] binder: 29529:29535 ioctl c0306201 200003c0 returned -22 [ 615.702764] binder: 29522:29536 ioctl 8980 20000040 returned -22 [ 615.703495] binder: 29532:29534 unknown command -201104640 [ 615.703519] binder: 29532:29534 ioctl c0306201 20000140 returned -22 [ 615.707887] binder: 29532:29537 transaction failed 29189/-22, size 24-8 line 3012 [ 615.708207] binder: 29532:29534 ioctl 8008700b 20000040 returned -22 [ 615.714172] binder: 29532:29537 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.729230] binder: 29528:29538 transaction failed 29189/-22, size 24-8 line 3012 [ 615.729348] binder: 29528:29538 BC_ACQUIRE_DONE u0000000000000000 no match [ 615.729430] binder: 29528:29538 got transaction to invalid handle [ 615.729439] binder: 29528:29538 transaction failed 29201/-22, size 64-16 line 3012 [ 615.799381] binder: 29540:29543 transaction failed 29189/-22, size 24-8 line 3012 [ 615.800425] binder: 29540:29543 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:12 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x4, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x755, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="c33986ab3b5c5f9f"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x84, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xc}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x50) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) creat(&(0x7f0000000040)='./file0\x00', 0x100) 03:34:12 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09621040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) 03:34:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000400)=r2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xe8, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x70, 0x38, &(0x7f0000000280)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x4, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x2, 0x36}, @fda={0x66646185, 0x2, 0x1, 0x34}], &(0x7f00000001c0)=[0x28, 0x38, 0x38, 0x38, 0x38, 0x60, 0x40]}}, @increfs, @dead_binder_done={0x40086310, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x58, 0x48, &(0x7f0000000480)=[@flat={0x776a2a85, 0x10a, r3, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x1, 0x4, 0x7}, @flat={0x73682a85, 0x100, r3}], &(0x7f0000000500)=[0x40, 0x38, 0x30, 0x38, 0x48, 0x38, 0x0, 0x30, 0x38]}}, @increfs={0x40046304, 0x4}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000400), &(0x7f0000000580)=[0x38, 0x30, 0x0, 0x68, 0x0, 0x18]}}], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) syz_open_dev$binder(&(0x7f0000000900)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000006c0)="01227acb397127f2aba395327bf117aed975eebfa7ab67dd02bf0fc5b8ac4df6905ac603a79bbb7a601b321b6bbf2a4c60a7687543c4dfc06d2fbd7e79073c9b99e0129bb2b2e9d9767638d154fedbd00d2b968d47f880afc5fdda7ff1f7ab4cc00e829ab39edcddcf1f5fe7436ca8c6fe80b1fe0def150d9534e3cf8719111d382c38b8b0e3fc3e338f48c7683bcf34f91bab4aaeb55f3b235ab8ba461e2e541a657be2", 0xa4, 0xfffffffffffffffb) r5 = add_key(&(0x7f0000000640)='.dead\x00', &(0x7f0000000780)={'syz', 0x3}, &(0x7f00000008c0)="f852dbe277118ed0947863c70cf2e2966b52a3946b7b5fd08926e4b36b99d1407a414aa1055453ea35383abadf01", 0x2e, 0xfffffffffffffffa) keyctl$search(0xa, r4, &(0x7f00000009c0)='cifs.idmap\x00', &(0x7f0000000a00)={'syz', 0x1}, r5) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000600)) ptrace$peek(0xffffffffffffffff, r2, &(0x7f0000000940)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 616.052430] binder: 29483:29489 ioctl c0306201 20000140 returned -22 [ 616.073130] binder: 29546:29547 transaction failed 29189/-22, size 24-8 line 3012 [ 616.083106] binder: 29546:29547 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.091330] binder: 29546:29550 transaction failed 29189/-22, size 24-8 line 3012 [ 616.102977] binder: 29546:29550 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.108847] binder: 29551:29553 unknown command -1417266749 [ 616.108886] binder: 29551:29553 ioctl c0306201 20000140 returned -22 [ 616.109520] binder: 29551:29553 transaction failed 29189/-22, size 24-8 line 3012 [ 616.122619] binder: 29551:29553 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.129560] binder: 29551:29553 unknown command -1417266749 [ 616.129599] binder: 29551:29553 ioctl c0306201 20000140 returned -22 [ 616.129924] binder: 29551:29553 transaction failed 29189/-22, size 24-8 line 3012 03:34:12 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x880, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)="6fb8a28020b3c4f27d49b274df6609baa0043b50", 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:34:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x20000000, 0x20010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={{r1, r2/1000+10000}, {r3, r4/1000+10000}}, 0x100) 03:34:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 616.143271] binder: 29551:29555 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.156209] binder: 29548:29557 transaction failed 29189/-22, size 24-8 line 3012 [ 616.156325] binder: 29548:29557 unknown command 1074815497 [ 616.156334] binder: 29548:29557 ioctl c0306201 200003c0 returned -22 [ 616.256480] binder: 29559:29569 transaction failed 29189/-22, size 24-8 line 3012 [ 616.265514] binder: 29559:29569 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.286429] binder: 29567:29570 transaction failed 29189/-22, size 24-8 line 3012 [ 616.294764] binder: 29567:29570 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:12 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$packet(0x11, 0x10000000002, 0x300) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000500)=[@exit_looper, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x20, 0x30, &(0x7f0000000180)=[@fda={0x66646185, 0x3, 0x3, 0x12}], &(0x7f0000000280)=[0x78, 0x38, 0x78, 0x38, 0x68, 0x28]}}, @increfs={0x40046304, 0x4}, @acquire], 0x7d, 0x0, &(0x7f0000000580)="ebbe87efaf0e6ad922893f00af012037f7bb942415450603ea69762bc7a67824cb2dffe9bd74fc5cfdf04b4693ef05eec20499ec9f0ed3f068e91d16921b1090fee48edb2f9ec2170cdbdea163a362238ec425178f44f780b19667e7fbdcd0a01f56123651335b2d294025f8252c366e59ce434a5acca6e26f27275d30"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="8536067300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="010000339c010000008ce75f655843b92242a997827d000000ff070000"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 616.437597] binder: 29522:29571 transaction failed 29189/-22, size 24-8 line 3012 [ 616.446322] binder: 29522:29572 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.453812] binder: 29522:29571 ioctl 8980 20000040 returned -22 [ 616.461045] binder: 29528:29573 transaction failed 29189/-22, size 24-8 line 3012 [ 616.469048] binder: 29528:29538 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.469735] binder: 29528:29573 got transaction to invalid handle 03:34:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1a4, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 616.469746] binder: 29528:29573 transaction failed 29201/-22, size 64-16 line 3012 03:34:12 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x123050, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x2d, 0x0, &(0x7f0000000080)="13e0f81e78a1ca25ee5d76386cfb099e8dc6f6cb7d39244a8f763444b1b421cfeffd15cf000032c5f7bea735d8"}) [ 616.541547] binder: 29540:29543 transaction failed 29189/-22, size 24-8 line 3012 [ 616.541554] binder: 29540:29580 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.547346] binder: 29575:29582 transaction failed 29189/-22, size 24-8 line 3012 [ 616.547472] binder: 29575:29582 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.564756] binder: 29578:29583 transaction failed 29189/-22, size 24-8 line 3012 03:34:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x1f, 0x0, &(0x7f00000001c0)="bdeb6fba47ca76ebf2fa5eff84064aa2ba9c865285443efed22f026614d5db"}) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000180)='/dev/binder#\x00', 0xd, 0x3) [ 616.902906] binder: 29548:29557 transaction failed 29189/-22, size 24-8 line 3012 [ 616.911048] binder: 29548:29557 unknown command 1074815497 [ 616.916903] binder: 29548:29557 ioctl c0306201 200003c0 returned -22 03:34:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000002, 0x1010, r1, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x140011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0x0) r3 = mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x1013, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 616.988792] binder: 29589:29591 transaction failed 29189/-22, size 24-8 line 3012 [ 616.991884] binder: 29559:29569 transaction failed 29189/-22, size 24-8 line 3012 [ 616.991970] binder: 29559:29592 BC_ACQUIRE_DONE u0000000000000000 no match [ 616.992058] binder: 29559:29592 unknown command 0 03:34:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="00c4a1488506ac552e87e8e1ebb18a9a6ecef0ee175d76ef7434d7d28b71ca", 0x1f, 0x44880, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000480)={{0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x3, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x81, 0x6, 0x401}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) 03:34:13 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 616.992096] binder: 29559:29592 ioctl c0306201 200003c0 returned -22 [ 617.023591] binder: 29593:29594 transaction failed 29189/-22, size 24-8 line 3012 [ 617.023886] binder: 29593:29594 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.034541] binder: 29593:29596 transaction failed 29189/-22, size 24-8 line 3012 [ 617.040352] binder: 29567:29598 transaction failed 29189/-22, size 24-8 line 3012 [ 617.041275] binder: 29589:29597 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.125492] binder: 29599:29605 transaction failed 29189/-22, size 24-8 line 3012 [ 617.133788] binder: 29602:29606 transaction failed 29189/-22, size 24-8 line 3012 [ 617.134295] binder: 29599:29605 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.149755] binder: 29602:29606 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5, 0x440080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:13 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) getsockname$unix(r0, &(0x7f0000000280), &(0x7f0000000040)=0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0963d9baa6fe35182db43af441ee1ac368e8c96f6b72e15f5dfb760e20f613769c780d41fb01adc0dc0fb61d1ac3baf8f3682ea1a36cfe97ddc6adf0645a335357a257397caff73948d6346eed5b11b160f1814e95089a13fead9e08351a7f52294029808471d091d8012fb397b32ea4d6bc00566a2e60e8bc656ae48f5a21481f6251c304", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 617.317484] binder: 29578:29607 transaction failed 29189/-22, size 24-8 line 3012 [ 617.325583] binder: 29578:29583 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.333457] binder: undelivered TRANSACTION_ERROR: 29189 [ 617.339088] binder: undelivered TRANSACTION_ERROR: 29189 03:34:13 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x10001, 0xc89}, {0x1}]}, 0x14, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 617.412222] binder: 29617:29618 unknown command 46569 [ 617.415319] binder: 29609:29616 transaction failed 29189/-22, size 24-8 line 3012 [ 617.415433] binder: 29609:29616 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.429128] binder: 29612:29620 transaction failed 29189/-22, size 24-8 line 3012 [ 617.429369] binder: 29612:29620 unknown command -1160158455 [ 617.429377] binder: 29612:29620 ioctl c0306201 200003c0 returned -22 [ 617.453543] binder: 29617:29618 ioctl c0306201 20000140 returned -22 03:34:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4850, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x0}) r4 = dup(r1) write$P9_RREADDIR(r4, &(0x7f0000000480)={0x68, 0x29, 0x1, {0x1, [{{0x25, 0x2, 0x8}, 0x7fffffff, 0xffffffff8ee0454d, 0x7, './file0'}, {{0x27, 0x4, 0x8}, 0x3, 0x3ff, 0x7, './file0'}, {{0x38, 0x3, 0x8}, 0x9, 0xfffffffffffffffb, 0x7, './file0'}]}}, 0x68) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={r3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) socketpair$inet6(0xa, 0x1, 0xf419, &(0x7f0000000080)) [ 617.460696] binder: 29617:29621 transaction failed 29189/-22, size 24-8 line 3012 [ 617.470732] binder: 29617:29618 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.478575] binder: 29617:29621 unknown command 46569 [ 617.484288] binder: 29617:29621 ioctl c0306201 20000140 returned -22 [ 617.491542] binder: 29617:29618 transaction failed 29189/-22, size 24-8 line 3012 [ 617.564354] binder: 29623:29625 transaction failed 29189/-22, size 24-8 line 3012 [ 617.573312] binder: 29623:29625 unknown command 1074815755 [ 617.579407] binder: 29623:29625 ioctl c0306201 200003c0 returned -22 03:34:14 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000006c0)={0x5, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x14}}}, 0x1, 0x8, [{{0xa, 0x4e23, 0xf13, @mcast1, 0x7fffffff}}, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x19}, 0x1}}, {{0xa, 0x4e20, 0x7, @ipv4={[], [], @multicast2}, 0x200}}, {{0xa, 0x4e24, 0x3ff, @ipv4, 0x9}}, {{0xa, 0x4e20, 0x3, @loopback, 0x1}}, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}, 0x5}}, {{0xa, 0x4e23, 0x7, @local, 0x4}}, {{0xa, 0x4e23, 0x6, @mcast2, 0x32e4}}]}, 0x490) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) lseek(r1, 0x0, 0x7) [ 617.742218] binder: 29589:29626 transaction failed 29189/-22, size 24-8 line 3012 [ 617.750943] binder: 29589:29591 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.821521] binder: 29628:29630 transaction failed 29189/-22, size 24-8 line 3012 [ 617.829995] binder: 29628:29630 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:14 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09631040e5b9826ed60c53407c663af6887db1ddb673994656cde83b010281c939c5a85ef3cac2c0d3aafa9dec4b9f82b50f7ed46fb5a08f8c60c2d248c0de98b93b72dacc3647792c2a84e3ce1e4a6c96332335d69de936b399940d53fed5bd019779272ffd", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 617.864900] binder_alloc: binder_alloc_mmap_handler: 29599 20001000-20004000 already mapped failed -16 [ 617.875520] binder: 29599:29605 transaction failed 29189/-22, size 24-8 line 3012 [ 617.875536] binder: 29599:29631 BC_ACQUIRE_DONE u0000000000000000 no match [ 617.885178] binder: 29602:29606 transaction failed 29189/-22, size 24-8 line 3012 [ 617.885220] binder: 29602:29632 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:14 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800000000000000080000000000040088f3344ab707675e4aa6a6be082fdf3b8536baf7ff8f5c7816cbfaf99300ed1477a44ac4", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 617.885227] binder: 29602:29632 unknown command 0 [ 617.885236] binder: 29602:29632 ioctl c0306201 200003c0 returned -22 [ 617.965484] binder: 29633:29639 transaction failed 29189/-22, size 24-8 line 3012 [ 617.973809] binder: 29633:29639 BC_ACQUIRE_DONE u40530cd66e82b9e5 no match [ 617.993600] binder: 29636:29640 transaction failed 29189/-22, size 24-1125899906842632 line 3012 [ 618.003379] binder: 29636:29640 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:14 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@mcast2}, &(0x7f0000000380)=0x14) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="8f2a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x2, &(0x7f0000000180)={0x6}, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x28, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) rt_sigprocmask(0x2, &(0x7f00000000c0)={0x7ff}, &(0x7f0000000280), 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="02007500003ac0142000"], 0x0, 0x0, &(0x7f00000006c0)}) dup2(r1, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x40, 0x0, &(0x7f00000002c0)=[@enter_looper, @increfs_done={0x40106308, r2}, @decrefs={0x40046307, 0x3}, @request_death={0x400c630e, 0x0, 0x3}, @acquire={0x40046305, 0x3}, @release={0x40046306, 0x2}], 0xc1, 0x0, &(0x7f0000000500)="f25bba6f063dd5acba4c84f78b33a5e43bf3563d57018f676ba98eee6fd4c6c5210dc8fdb7d52997b3630d8deadc605c9d455b2f9f7ce94c8649d8ba5177811fd6877bfd2aea48357f9283721e6c8c10dc1a57709f85cab25a50ed7822645542488d53bbf39983cdc3d18511625110d2e47a95be3605c47f0bd3189fe83369fde6cded9f0ab0a5be1341880929b3b9655b07f7af9731002ab4b7eb37d24b71dd56295b6a7cc63d4db792a789f752aa7fae440734a34941bec8d8ef3f716e34c9e7"}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000480)={r2}) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000004c0)) [ 618.177553] binder: 29612:29620 transaction failed 29189/-22, size 24-8 line 3012 [ 618.185716] binder: 29612:29642 unknown command -1160158455 [ 618.192093] binder: 29612:29642 ioctl c0306201 200003c0 returned -22 [ 618.207100] binder: 29609:29644 BC_ACQUIRE_DONE u0000000000000000 no match [ 618.216182] binder: 29609:29643 transaction failed 29189/-22, size 24-8 line 3012 [ 618.249800] binder: 29649:29650 unknown command 2047 [ 618.255733] binder: 29649:29650 ioctl c0306201 20000140 returned -22 [ 618.262913] binder: 29649:29650 transaction failed 29189/-22, size 24-8 line 3012 [ 618.271142] binder: 29645:29651 transaction failed 29189/-22, size 24-8 line 3012 [ 618.283731] binder: 29649:29650 BC_ACQUIRE_DONE u0000000000000000 no match [ 618.284606] binder: 29645:29651 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:14 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_create1(0x80000) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e21, 0x8, @local, 0x10001}, {0xa, 0x4e23, 0x6}, 0xfffffffffffffffe, [0x3c, 0x4, 0x8, 0x4, 0x9, 0x2, 0x8, 0x817]}, 0x5c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x17) [ 618.297810] binder: 29649:29650 unknown command 32 [ 618.302845] binder: 29649:29650 ioctl c0306201 200003c0 returned -22 [ 618.310684] binder: 29649:29650 BC_INCREFS_DONE u0000000000000000 no match [ 618.317719] binder: 29649:29650 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 618.320907] binder: 29623:29653 transaction failed 29189/-22, size 24-8 line 3012 [ 618.321012] binder: 29623:29625 unknown command 1074815755 [ 618.321021] binder: 29623:29625 ioctl c0306201 200003c0 returned -22 [ 618.358004] binder: 29649:29650 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 618.365571] binder: 29649:29650 Acquire 1 refcount change on invalid ref 3 ret -22 [ 618.373462] binder: 29649:29650 Release 1 refcount change on invalid ref 2 ret -22 [ 618.411318] binder: 29654:29658 transaction failed 29189/-22, size 24-8 line 3012 [ 618.419593] binder: 29654:29658 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="c65e536a50dd52d8e83a397414e073af6ee9a8c03de0e0ade72efb2816ab7ba59a3d0b85322de45569b04f63ba40ddad6fd3d9a151a246dd59ded000d9f56e6cbff3af39d0969fb3740558982e7273a843f080b3a3beb72bfe568c6fcca4adc349cd0ce08ec1c03c2c51c086cb99c19035bcb9b9cfea9e15bf59336aa0fdf8d8a2d2cd4c986f809c900edb85d76b1546abeaffdb69b3ee679a50d3a44b8f7292cddf020e619d6ea55d8cad8b5a1c33cb402f58c0bfa25be61fc9dc70412824de42a274669278d34588bd00ee3295", 0xce}, {&(0x7f0000000180)="60fc2e8416062319cc82350b9758fb9f97f3ad9004867bea6125d5acee19a1aac9a3d811796a8fa62372d250b833c6639bc7c35a2a8d78f3963847254217db37c306de89f7d67e168ab214e5b153f629ac4851d6339e5b9b7c627fe57c85bab863c6ebbea0e9d98f", 0x68}, {&(0x7f00000006c0)="2c50e0aab65b6e6ff140d31f0a1d900edf53b6938ff8de105d83ca97bd3ea99c1e2c5b6e15379ff16b696afb75edf3a1cbe0f7479b361278045869a562d24aed6bc04ba9fa1dc59188c1518387c0ad228e69014e01881d1fad4c1256f2c228781d3997ce7817984632136cdd96a63b27d7ba3b1f002c944cbefc5762a7ea8116e547606261aa724fc3898eb01e2686bff72d916cea05c5ec9f15769f21b86af50c0a4386bed96742c1bfde265290b4c0f7be998212bd0a145fd244daef88494e09b1f639fb7228b93393cd938f0390da6ad58358cf5f4b6a88faa2bd65ca45fd8235a53557", 0xe5}, {&(0x7f0000000040)="9911", 0x2}, {&(0x7f00000007c0)="ae4a53571cc8f3ec670fe9ad7912a91c765aec6fd2166c077cc9c6f5dae33a0d20ca7caebab7fba63d3d88b2f029c6f56d32aa5524217cf1e3632fedb05bb3d1f6b2be7c91dcca58bef7dcd24c16522a7016094c46869284a6bc45a6e9add256b135052e486eba7dd3bf1634cf9eab6158c08617fdd5c042b1c2eeb64c00865b4a5b56ea90e2dabff9ca3c04ea3e6a34221607cc847e84ec0d0c220d7e3983b367714cafa7d8951f1b634139629f4d09529127bcef06333eb8515d5c20b206", 0xbf}, {&(0x7f0000000280)="42612151ef70beb4d0f6af2678762535ff506a51666215cc6cb2cd77a2669c13a46a3d7d36685333e75c8f79ed5d6c74d2028eb3c5fb43c6dee35c3f2b", 0x3d}, {&(0x7f0000000880)="7792976e0e95532962199f3438c642e456ebb018688adf159fed34f4fd0a424c07db8874c135aa55da405f69895e7ff21a35e2811b966d0197b340691c5c2eb558ed6d00593ff7c2ed27c42e723e830a986fcf880677a010ce0f71a7b2ce8cf0fb86d1013ef54b927ae68fc23d6ab69661550ef22416eb43b05707eea9c9f2679fd9cd9065b920c1207281e4bdc405e6798346fff8125eeb36a56fe6b45827c4e1e8c4cb19bbff85117b77249c56fe55dc0dfa51d2b3e5ac", 0xb8}], 0x8, 0xa) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x180010, r0, 0x0) write(r0, &(0x7f00000009c0)="d61d2de7fd95ea21f7c586c87a03db1584332b2595f47472310ee485549056b9d2c16f335d64896e0df3f98dee595cefb83a507ae2d78a9156fecfe7a12c378d93a257531df95bfe45beee2088d762b438c2756e8689be47211ac328297960ce9d3d09bbbe118855c9cad05d3433451c0d0999625374f5a180cde417fb9dbcc4fb4a", 0x82) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 618.576163] binder: 29628:29630 transaction failed 29189/-22, size 24-8 line 3012 [ 618.579966] binder: 29628:29660 BC_ACQUIRE_DONE u0000000000000000 no match [ 618.654522] binder: 29661:29664 transaction failed 29189/-22, size 24-8 line 3012 [ 618.662963] binder: 29661:29664 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000540)='ceph\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='(\x00', 0xfffffffffffffff8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x9c, r2, 0x308, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x18c}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000a3c5643096d3b6fec6ef06e2c8cacf12558e45b2e0a37119052aaa633aef6eeebc28c3f107bbd9ec5004000000000000000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000380)={@mcast1}, &(0x7f0000000400)=0x14) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 618.716763] binder: 29633:29665 transaction failed 29189/-22, size 24-8 line 3012 [ 618.725306] binder: 29633:29639 BC_ACQUIRE_DONE u40530cd66e82b9e5 no match [ 618.752078] binder: 29636:29640 transaction failed 29189/-22, size 24-1125899906842632 line 3012 03:34:15 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x42) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000002c0)=0x81) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x200, {0x2, 0x4e21, @rand_addr=0x2}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @loopback}, 0x217, 0x80, 0x0, 0x6, 0x400, 0x0, 0x3, 0x300000000, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2b) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) r5 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x91933, r3, 0x0) pwritev(r2, &(0x7f0000000a40)=[{&(0x7f0000000500)="bbf2054eb3d573dd4e0621610ada80b002681549cc95f9312e278eabce204a526f8d9054a6f8941196e5c86f133e381eb50f8e177b00f9104499eca351014b4892bcada033209acdfaf785475513f4b326c4c40a195936389b553c57289467835f0590f2edd65b490e2690d3b7ad72d37e00bbc7c6373e8321a4af1ecf51c63283a87fc322b90315bff6f83188412e4aace3572ce746f91adac5aa109374b416d720a4fa3381b625313cae94853be05bff2eafb00f2d78a2ad88a48d2a86fb290aef", 0xc2}, {&(0x7f0000000600)="e24943543757263fc38b3f009263564832bcbc2008cdd2f087029140d49203800ea15fa61aa58ce541a9942a56d8eb14df03bf1d94d9d27fea297c5e52bd5cef9476", 0x42}, {&(0x7f00000000c0)}, {&(0x7f0000000680)="1d3fe9978c51ced15fd05404c69c0953f3a4794fe2120e63966aa88a4c0fd34a2d7a4f8925473fe3d3e976f4208716dbc7e691da24c84113a0e2d9363994be47cf8ca827ffa91f064d72e85ed074eeed0ee4ded85c41951532e12e65c51d1f995ba2e486033d23218798b36fc84ccbda8ec2e66a7ec540d64a7fa7350513bd65a8930794264c26fbf530f5e51765f51e94592896268fc719f91de27c559e7e57170f175e4507ce004e08f4d41941d16ce9ebf027af976fff1e1a468041e62a2c56cccf0cdbdb", 0xc6}, {&(0x7f0000000400)="c42449b5e3656b2d3b50713afa770709f5c41fa6ff82c801a4255cd592dfcb40ad38e60f2b7477c7a2855a555ed0571d7ccd6665e4b28f5ccd85637a4d", 0x3d}, {&(0x7f0000000780)="2b8379446e4aa11d95de17a31d7c232e35317b18aef42ba8ae42515c6291524a26b8541d9f518ecbe02cdeb108607840c22c4d801bf77e56e5dacc670de5c1c9c6278b03abe2deaf91489b2c4d5df57a2ac0ee7f327fc96dbfe646eda50e2b0e631055f471eb3fe4ae12721658e31cb5992f993738600a12ad78f5f8964040d05ac44021a965beb0f126c441c77f4696c32aed6b5ebb08134780ec5a31a8215031b838b8adc612bf9b6e1cef38f5a55c98161b64edf87fdfbc69f1e2765ea73da23bea305fb57cf3894f778b9efe86bc52831b42e76ba79977e734c967e1be0124d08ac9b6", 0xe5}, {&(0x7f0000000880)="187c4601cfc5618266de7495a4b1af5822a1b409066efdd0c02a560bf30e398b85d87491f790b3832880bbd06bad0e2d5d95707afa66afe0eb553a49ea9f7c2e3aee16e45fe39ff4aacdd2f9aa8493375f0b82b79c1d407bffe0c126539be2a8d2432c8ac3fc7a38d97480966072001e9928d4edfb1fbdc5ce2f868b", 0x7c}, {&(0x7f0000000900)="6de70fc858fb08a595b7ee5c65c7bb18ba343737b9563cb6062b8d4f204d1327f0a4879dbe39a9e122a990fdd4e0f0354b5918256e61cecdb87f22fa615a4cc9ecf120dc2ef046db037f967e55d84721b5a321725913597c3e0f07df6830c88641c527e8b6224da826e4d741feedc55e10fa1d", 0x73}, {&(0x7f0000000980)="9af4b6b2389b8037050000c10e0ec39081dadbe3a02628480eaa069477c14ecfd01469763af8b666119a9b484a504c79058d1716406b3c351f65055a92b3505eb0cd78a772359e36d6da497eced06bf20170a5a50afb39ccb3a1215497c3a9c42a244c2d90dcfe6d214c35bdba61e187f43abd496645a5d9e2f8af2d36bd7a5bfde2a5bb52b8efe0028f95fcb1ccf26a1e4ef2f749473580b52e21b0396b2be94e53cb4e0b0bfcb65586f9e612e93f1ace7c", 0xb2}], 0x9, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000280)={r5}) mmap$perf(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="cbcd2df0e2e389a14d6bb3a758bb6fb9b31d1140", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000001c0)}) [ 618.762183] binder: 29636:29667 BC_ACQUIRE_DONE u0000000000000000 no match [ 618.797762] binder: 29671:29673 unknown command 0 [ 618.805447] binder: 29671:29673 ioctl c0306201 20000140 returned -22 [ 618.813752] binder: 29671:29673 transaction failed 29189/-22, size 24-8 line 3012 [ 618.821320] binder: 29668:29674 transaction failed 29189/-22, size 24-8 line 3012 [ 618.821520] binder: 29668:29674 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:15 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) [ 618.844787] binder: 29671:29676 transaction failed 29189/-22, size 24-8 line 3012 [ 618.844829] binder: 29671:29673 unknown command 0 [ 618.844837] binder: 29671:29673 ioctl c0306201 20000140 returned -22 [ 618.933380] binder: 29678:29680 transaction failed 29189/-22, size 24-8 line 3012 [ 618.941478] binder: 29678:29680 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 619.017038] binder: 29645:29681 transaction failed 29189/-22, size 24-8 line 3012 [ 619.026590] binder: 29645:29683 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.052356] binder: 29649:29686 unknown command 2047 [ 619.059741] binder: 29649:29686 ioctl c0306201 20000140 returned -22 [ 619.066888] binder: 29649:29657 transaction failed 29189/-22, size 24-8 line 3012 [ 619.074730] binder: 29649:29686 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.074738] binder: 29649:29686 unknown command 32 [ 619.074749] binder: 29649:29686 ioctl c0306201 200003c0 returned -22 [ 619.082182] binder: 29649:29686 BC_INCREFS_DONE u0000000000000000 no match [ 619.082197] binder: 29649:29686 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 619.082223] binder: 29649:29686 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:34:15 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x10, 0x0, 0x7}}, 0x14) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={@remote, @local, @empty, 0x1f3ec000, 0x70f, 0x3, 0x500, 0x5, 0x800000, r2}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 619.082242] binder: 29649:29686 Acquire 1 refcount change on invalid ref 3 ret -22 [ 619.082253] binder: 29649:29686 Release 1 refcount change on invalid ref 2 ret -22 [ 619.115921] binder: 29685:29690 transaction failed 29189/-22, size 24-8 line 3012 [ 619.130400] binder: 29685:29690 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.144018] binder: 29654:29658 transaction failed 29189/-22, size 24-8 line 3012 03:34:15 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e20, @remote}}, 0x2, 0x5, 0x8, "4d057f28db8d781d00f22534208301885918bdbeac67026c8ee04e9099a692668d2814de98716182732e033e86e605888a4aeb85a99873cc70986b502cab4717ca5bad22423adfd4b88225ec8fd209a9"}, 0xd8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 619.144061] binder: 29654:29691 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.144067] binder: 29654:29691 unknown command 0 [ 619.144076] binder: 29654:29691 ioctl c0306201 200003c0 returned -22 [ 619.180771] binder: 29692:29693 transaction failed 29189/-22, size 24-8 line 3012 [ 619.180851] binder: 29692:29693 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.180905] binder: 29692:29693 ioctl 6609 0 returned -22 [ 619.181991] binder: 29692:29695 transaction failed 29189/-22, size 24-8 line 3012 03:34:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="0100c706000000903036f14d8fa7e844ebe9d67c9090bf468249ab4fe314525268ff15fe81284182c9693c2800e9451cc4ed6a131d8f1c26459cbf08e4e0df3a25dcb2fe92582aacad38d1a8928c6182e8b1aafcfabf9b774f8447622cf679c73b7de3569a51a96e5f63409b4296a1d85f744770a4e56414fc373219273d04024a513791f5355f246d97e01f2949a01b5247da85c09c0c2edc01", @ANYRES64=0x0, @ANYBLOB="000dee0000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x526761963c328007, 0x0, &(0x7f0000000040)}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000200)={0x2, 0x912, 0x40007, 0x8, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x21) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)=0x3e) write$P9_RWSTAT(r2, &(0x7f0000000280)={0x7, 0x7f, 0x2}, 0x7) [ 619.182063] binder: 29692:29693 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.182088] binder: 29692:29695 ioctl 6609 0 returned -22 [ 619.248068] binder: 29700:29701 ioctl c0306201 20000140 returned -11 [ 619.255465] binder: 29700:29701 transaction failed 29189/-22, size 24-8 line 3012 03:34:15 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000700)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x111) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0x55) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={r3, @rand_addr=0x3ff, @broadcast}, 0xc) r4 = creat(&(0x7f0000000640)='./bus\x00', 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r7 = gettid() getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = getuid() fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./bus\x00', r8, r9) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000240)={0x2}) r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r10, &(0x7f00000005c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x2) rt_sigaction(0x30, &(0x7f0000000340)={&(0x7f00000001c0)="c401792b780041dd33cfc4e16e5285e800000066450f38020966660f6c2cd1c461265aeff04481060000002199c40211af19", {0xfe8}, 0x10000000, &(0x7f00000002c0)="c4e27d0e3500000000c48213f6b0fbffffff430f78ab89000000f042804c412702ff8e07d90000f2f046302f0f1bae87a1591ef3a5c4a17fe6b50000008045d9f7"}, &(0x7f0000000440)={&(0x7f0000000380)="8f6950014e1f36420f54dbc4a20dbfdb8f6978c11b8f885885cdf9c481ac5cc93e0ffd8bff2f027bf30f7ffcc441e55d1ac4217c118075980000", {}, 0x0, &(0x7f0000000400)="f243afc4c3d122641f1213660fe47cfd0041700cc44199d44006c463b5496f00fa66470f78c30056f3440f2cc0c4237122b5040000000d64410f0f7c81e1a7"}, 0x8, &(0x7f0000000480)) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000003c0)=r6) sysinfo(&(0x7f00000007c0)=""/154) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x209a, 0x8, 0x4, 0x0, 0x0, 0x9, 0x40814, 0x6, 0xffff, 0x1, 0xfffffffffffffff9, 0x6, 0x0, 0x1, 0x1f, 0x6, 0x1, 0x86, 0x7fff, 0x7464, 0x9, 0x81, 0x8, 0x3ff, 0x8001, 0x4, 0xcf, 0xf599, 0x4, 0x9, 0x400, 0x3, 0x0, 0x5, 0x8, 0x3, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x10001}, 0x8, 0x0, 0x2, 0x0, 0x7, 0x0, 0x1000}, r7, 0x0, r6, 0x1) ioctl$BLKPG(r10, 0x1269, &(0x7f00000006c0)={0x1, 0x2, 0x0, &(0x7f0000000800)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)={0x171, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000100)}) openat$cgroup_ro(r4, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) [ 619.263604] binder: 29700:29701 ioctl 801c581f 20000200 returned -22 [ 619.270975] binder: 29697:29702 transaction failed 29189/-22, size 24-8 line 3012 [ 619.279037] binder: 29697:29702 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.279645] binder: 29700:29701 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.290901] binder: 29700:29703 transaction failed 29189/-22, size 24-8 line 3012 [ 619.290983] binder: 29700:29703 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.291278] binder: 29700:29701 ioctl 801c581f 20000200 returned -22 03:34:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0x5da, 0xd46, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="46631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 619.413606] binder: 29661:29664 transaction failed 29189/-22, size 24-8 line 3012 [ 619.422975] binder: 29661:29713 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.459864] binder: 29712:29719 transaction failed 29189/-22, size 24-8 line 3012 [ 619.468120] binder: 29712:29719 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.499087] binder: 29716:29720 transaction failed 29189/-22, size 24-8 line 3012 [ 619.507412] binder: 29716:29720 unknown command 1074815814 [ 619.513458] binder: 29716:29720 ioctl c0306201 200003c0 returned -22 03:34:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e22, @loopback}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 619.563690] binder: 29668:29674 transaction failed 29189/-22, size 24-8 line 3012 [ 619.571783] binder: 29668:29723 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.578939] binder: 29668:29723 unknown command 0 [ 619.584077] binder: 29668:29723 ioctl c0306201 200003c0 returned -22 03:34:16 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:shell_exec_t:s0\x00', 0x22, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 619.657342] binder: 29725:29727 transaction failed 29189/-22, size 24-8 line 3012 [ 619.665640] binder: 29725:29727 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.686305] binder: 29678:29680 transaction failed 29189/-22, size 24-8 line 3012 [ 619.686337] binder: 29678:29728 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.775770] audit: type=1400 audit(2000000056.070:71): avc: denied { relabelto } for pid=29730 comm="syz-executor5" name="UDP" dev="sockfs" ino=87833 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=udp_socket permissive=1 [ 619.776929] binder: 29730:29732 transaction failed 29189/-22, size 24-8 line 3012 [ 619.777018] binder: 29730:29732 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:16 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 619.853697] binder: 29685:29690 transaction failed 29189/-22, size 24-8 line 3012 [ 619.861238] binder: 29685:29734 BC_ACQUIRE_DONE u0000000000000000 no match [ 619.933490] binder: 29736:29738 transaction failed 29189/-22, size 24-8 line 3012 [ 619.941875] binder: 29736:29738 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:16 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 620.018863] binder: 29697:29739 transaction failed 29189/-22, size 24-8 line 3012 [ 620.026908] binder: 29697:29702 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.097383] binder: 29741:29743 transaction failed 29189/-22, size 24-8 line 3012 [ 620.105683] binder: 29741:29743 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000e6ffffff00000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 620.211341] binder: 29712:29744 transaction failed 29189/-22, size 24-8 line 3012 [ 620.219270] binder: 29712:29719 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c630200765e9f1a6f09a38de487fe3563a0c460bffa451cdc5910384aeaa5ab0c5b06c739561c1e8c86a65faa5d2129bde7d3c58deb9bcd8c9948703c05dfc3129de2f44e774e6a4f9540f602a742ead3758198f8fb9336082ac26645c019e7fa506d01c15ceba37d359341c12676f33c1e2406753055e9425e72b4109952e8be53284f504f68279d28a00664ea28360b9d2a13cc538a29c454"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x19c, 0x0, &(0x7f0000000180)}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) [ 620.253713] binder: 29716:29749 unknown command 1074815814 [ 620.253720] binder: 29716:29720 transaction failed 29189/-22, size 24-8 line 3012 [ 620.267137] binder: 29716:29749 ioctl c0306201 200003c0 returned -22 [ 620.288302] binder: 29746:29750 transaction failed 29189/-22, size 8796093022208-562949953421312 line 3012 [ 620.300540] binder: 29746:29750 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.307912] binder: 29752:29753 unknown command 156428 [ 620.307919] binder: 29752:29753 ioctl c0306201 20000140 returned -22 [ 620.307965] binder: 29752:29753 transaction failed 29189/-22, size 24-8 line 3012 [ 620.308017] binder: 29752:29753 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:16 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 620.411180] binder: 29725:29755 transaction failed 29189/-22, size 24-8 line 3012 [ 620.419139] binder: 29725:29727 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:16 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0c630000f67e79a33975741bce520efd3167a5798c6d36612954ee5612447d1af1ced1d3547320364b7e24045f07b052888093fa495979d9c40ada0d6abd3e91c7bbba7db9bc6b8df1345c3be366f8cf582d846d425b60420a33fcc11b5854711059b451a20c4ff34f42fc47cccd4a91879cabf47b2c624fd948ab25feeda65227de61d316bf17d4e93410d82413034217b3bdda18418d3ca94a512c05901835af2cf9cd3c0b4c2f4208f20faff773d65f8e99b523f0416df3a3ec5062a11ad8f63866de3d017f"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRES64=r3, @ANYRESDEC=r0, @ANYPTR, @ANYRES32=0x0, @ANYPTR64, @ANYRESHEX=r5], @ANYPTR64, @ANYRESOCT=0x0, @ANYRES64=r4, @ANYRESDEC=r5], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000481e00"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x0) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@broadcast, 0x4e22, 0x0, 0x4e21, 0xffffffff, 0x2, 0x20, 0xa0, 0x6, r6, r7}, {0x400, 0x81, 0x40, 0xff, 0xc4, 0x1ff8000000000, 0x2, 0x1}, {0x1ff, 0x3fe, 0x3f, 0x71}, 0x5, 0x6e6bb3, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x4d3, 0x6c}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x95, 0x80000001, 0x4, 0x6}}, 0xe8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00000000004408a34fc5315fe85d63828f23c4240052dba7581918c70f3bf22666d787277d5b1658f97737adbbfbd81ec8c9bea544436b5fe6761d37ffd37062f533d6708e7590dae1777f4aa16549517a97179b3d424d00000000a1720e7257ae89c3ef9fd4b9abf6ab4cdaebbc5b4c60e07b14606f3479e0e07541da04c7"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000740)=0x200) [ 620.495428] binder: 29757:29759 transaction failed 29189/-22, size 24-8 line 3012 [ 620.503630] binder: 29757:29759 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.520478] binder: 29730:29760 transaction failed 29189/-22, size 24-8 line 3012 [ 620.528703] binder: 29730:29732 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.571949] binder: 29762:29763 ioctl c0306201 20000140 returned -11 [ 620.584017] binder: 29762:29763 unknown command 536872384 [ 620.589769] binder: 29762:29763 ioctl c0306201 20000440 returned -22 [ 620.598677] binder: 29762:29763 BC_ACQUIRE_DONE u0000000000000000 node 2074 cookie mismatch a308440000000000 != 0000000000000000 [ 620.614256] binder: 29762:29763 ioctl 5418 20000740 returned -22 03:34:16 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c630000759fb04fcce0c058e167c8dc1f1fb40c2219f810391f89046531c75b6e383f465c09a9b5b17c1fdda939c7e9df4968aa0a36f12c99ba8f0459ae5dc08cc14167074be58ab2405d39537623f3451cdc948d5bf7b8f55251b585353c70a9a640346ba305fc1b"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="a52a620000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0xffffffffffffffc3}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0x5, &(0x7f0000000040)={0x6, 0x200}, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0019000000000000"], 0x0, 0x0, &(0x7f0000000180)}) [ 620.626345] binder: BINDER_SET_CONTEXT_MGR already set [ 620.631851] binder: 29762:29765 unknown command 536872384 [ 620.631861] binder: 29762:29765 ioctl c0306201 20000440 returned -22 [ 620.632648] binder: 29762:29765 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.651206] binder: 29762:29763 ioctl 40046207 0 returned -16 03:34:17 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xa4, 0x0, &(0x7f0000000480)=[@request_death={0x400c630e, 0x0, 0x4}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x60, 0x10, &(0x7f0000000180)=[@ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x1, 0x4, 0x40}, @flat={0x776a2a85, 0x100, r3, 0x1}, @fda={0x66646185, 0x0, 0x3}], &(0x7f0000000280)=[0x18, 0x0]}}, @exit_looper, @transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x28, &(0x7f00000002c0)=[@flat={0x73622a85, 0x10b, r3, 0x3}], &(0x7f0000000380)=[0x78, 0x38, 0x0, 0x38, 0x18]}, 0xb6}}], 0x20, 0x0, &(0x7f0000000400)="d7a2769862ef1048577c273219474d9f50f7293bb7143c2fbdd133f4c76dbba6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 620.682825] binder: 29767:29768 ioctl c0306201 20000140 returned -11 [ 620.692184] binder: 29767:29768 transaction failed 29189/-22, size 24-8 line 3012 [ 620.700868] binder: 29736:29769 transaction failed 29189/-22, size 24-8 line 3012 [ 620.702583] binder: 29767:29768 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.706829] binder: 29767:29768 transaction failed 29189/-22, size 24-8 line 3012 03:34:17 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x9) fsetxattr$security_evm(r1, &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@md5={0x1, "2fe580450b164a2a1cc65d2fc97f0185"}, 0x11, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="d9922009", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) remap_file_pages(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000003, 0x9, 0x20000) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 620.732647] binder: 29736:29769 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.784372] binder: 29772:29777 transaction failed 29189/-22, size 24-8 line 3012 [ 620.792833] binder: 29772:29777 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.804327] binder: 29775:29778 transaction failed 29189/-22, size 24-8 line 3012 [ 620.812846] binder: 29775:29778 unknown command 153129689 [ 620.818478] binder: 29775:29778 ioctl c0306201 200003c0 returned -22 03:34:17 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 620.852647] binder: 29741:29779 BC_ACQUIRE_DONE u0000000000000000 no match [ 620.852664] binder: 29741:29743 transaction failed 29189/-22, size 24-8 line 3012 [ 620.930337] binder: 29780:29783 transaction failed 29189/-22, size 24-8 line 3012 [ 620.938601] binder: 29780:29783 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="81562e0f399d2600634040000000000000000000000000000000000000180000000000000008000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000200"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 621.042325] binder: 29746:29784 transaction failed 29189/-22, size 8796093022208-562949953421312 line 3012 [ 621.052986] binder: 29746:29784 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c630000759fb04fcce0c058e167c8dc1f1fb40c2219f810391f89046531c75b6e383f465c09a9b5b17c1fdda939c7e9df4968aa0a36f12c99ba8f0459ae5dc08cc14167074be58ab2405d39537623f3451cdc948d5bf7b8f55251b585353c70a9a640346ba305fc1b"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="a52a620000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0xffffffffffffffc3}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0x5, &(0x7f0000000040)={0x6, 0x200}, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0019000000000000"], 0x0, 0x0, &(0x7f0000000180)}) [ 621.101040] binder: 29752:29754 unknown command 156428 [ 621.103239] binder: 29752:29789 transaction failed 29189/-22, size 24-8 line 3012 [ 621.103493] binder: 29752:29789 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.121904] binder: 29752:29754 ioctl c0306201 20000140 returned -22 [ 621.131326] binder: 29787:29791 unknown command 254695041 [ 621.141949] binder: 29787:29791 ioctl c0306201 20000440 returned -22 03:34:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c630000759fb04fcce0c058e167c8dc1f1fb40c2219f810391f89046531c75b6e383f465c09a9b5b17c1fdda939c7e9df4968aa0a36f12c99ba8f0459ae5dc08cc14167074be58ab2405d39537623f3451cdc948d5bf7b8f55251b585353c70a9a640346ba305fc1b"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="a52a620000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0xffffffffffffffc3}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0x5, &(0x7f0000000040)={0x6, 0x200}, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0019000000000000"], 0x0, 0x0, &(0x7f0000000180)}) [ 621.154427] binder: 29787:29791 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.162291] binder: 29793:29794 ioctl c0306201 20000140 returned -11 [ 621.163136] binder: 29793:29794 transaction failed 29189/-22, size 24-8 line 3012 [ 621.164301] binder: 29793:29794 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0c630000f67e79a33975741bce520efd3167a5798c6d36612954ee5612447d1af1ced1d3547320364b7e24045f07b052888093fa495979d9c40ada0d6abd3e91c7bbba7db9bc6b8df1345c3be366f8cf582d846d425b60420a33fcc11b5854711059b451a20c4ff34f42fc47cccd4a91879cabf47b2c624fd948ab25feeda65227de61d316bf17d4e93410d82413034217b3bdda18418d3ca94a512c05901835af2cf9cd3c0b4c2f4208f20faff773d65f8e99b523f0416df3a3ec5062a11ad8f63866de3d017f"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRES64=r3, @ANYRESDEC=r0, @ANYPTR, @ANYRES32=0x0, @ANYPTR64, @ANYRESHEX=r5], @ANYPTR64, @ANYRESOCT=0x0, @ANYRES64=r4, @ANYRESDEC=r5], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000481e00"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x0) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@broadcast, 0x4e22, 0x0, 0x4e21, 0xffffffff, 0x2, 0x20, 0xa0, 0x6, r6, r7}, {0x400, 0x81, 0x40, 0xff, 0xc4, 0x1ff8000000000, 0x2, 0x1}, {0x1ff, 0x3fe, 0x3f, 0x71}, 0x5, 0x6e6bb3, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x4d3, 0x6c}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x95, 0x80000001, 0x4, 0x6}}, 0xe8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00000000004408a34fc5315fe85d63828f23c4240052dba7581918c70f3bf22666d787277d5b1658f97737adbbfbd81ec8c9bea544436b5fe6761d37ffd37062f533d6708e7590dae1777f4aa16549517a97179b3d424d00000000a1720e7257ae89c3ef9fd4b9abf6ab4cdaebbc5b4c60e07b14606f3479e0e07541da04c7"], 0x0, 0x0, &(0x7f0000000180)}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000740)=0x200) [ 621.195356] binder: 29795:29796 ioctl c0306201 20000140 returned -11 [ 621.195828] binder: 29795:29796 transaction failed 29189/-22, size 24-8 line 3012 [ 621.196781] binder: 29795:29796 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.239908] binder: 29799:29800 ioctl c0306201 20000140 returned -11 03:34:17 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000700)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x111) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0x55) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={r3, @rand_addr=0x3ff, @broadcast}, 0xc) r4 = creat(&(0x7f0000000640)='./bus\x00', 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r7 = gettid() getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = getuid() fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./bus\x00', r8, r9) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000240)={0x2}) r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r10, &(0x7f00000005c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x2) rt_sigaction(0x30, &(0x7f0000000340)={&(0x7f00000001c0)="c401792b780041dd33cfc4e16e5285e800000066450f38020966660f6c2cd1c461265aeff04481060000002199c40211af19", {0xfe8}, 0x10000000, &(0x7f00000002c0)="c4e27d0e3500000000c48213f6b0fbffffff430f78ab89000000f042804c412702ff8e07d90000f2f046302f0f1bae87a1591ef3a5c4a17fe6b50000008045d9f7"}, &(0x7f0000000440)={&(0x7f0000000380)="8f6950014e1f36420f54dbc4a20dbfdb8f6978c11b8f885885cdf9c481ac5cc93e0ffd8bff2f027bf30f7ffcc441e55d1ac4217c118075980000", {}, 0x0, &(0x7f0000000400)="f243afc4c3d122641f1213660fe47cfd0041700cc44199d44006c463b5496f00fa66470f78c30056f3440f2cc0c4237122b5040000000d64410f0f7c81e1a7"}, 0x8, &(0x7f0000000480)) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000003c0)=r6) sysinfo(&(0x7f00000007c0)=""/154) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x209a, 0x8, 0x4, 0x0, 0x0, 0x9, 0x40814, 0x6, 0xffff, 0x1, 0xfffffffffffffff9, 0x6, 0x0, 0x1, 0x1f, 0x6, 0x1, 0x86, 0x7fff, 0x7464, 0x9, 0x81, 0x8, 0x3ff, 0x8001, 0x4, 0xcf, 0xf599, 0x4, 0x9, 0x400, 0x3, 0x0, 0x5, 0x8, 0x3, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x10001}, 0x8, 0x0, 0x2, 0x0, 0x7, 0x0, 0x1000}, r7, 0x0, r6, 0x1) ioctl$BLKPG(r10, 0x1269, &(0x7f00000006c0)={0x1, 0x2, 0x0, &(0x7f0000000800)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)={0x171, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000100)}) openat$cgroup_ro(r4, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) [ 621.248113] binder: 29757:29759 transaction failed 29189/-22, size 24-8 line 3012 [ 621.248419] binder: 29757:29801 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.248426] binder: 29757:29801 unknown command 0 [ 621.248434] binder: 29757:29801 ioctl c0306201 200003c0 returned -22 [ 621.293655] binder: 29799:29800 unknown command 536872384 03:34:17 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x42) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000002c0)=0x81) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x200, {0x2, 0x4e21, @rand_addr=0x2}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @loopback}, 0x217, 0x80, 0x0, 0x6, 0x400, 0x0, 0x3, 0x300000000, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2b) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) r5 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x91933, r3, 0x0) pwritev(r2, &(0x7f0000000a40)=[{&(0x7f0000000500)="bbf2054eb3d573dd4e0621610ada80b002681549cc95f9312e278eabce204a526f8d9054a6f8941196e5c86f133e381eb50f8e177b00f9104499eca351014b4892bcada033209acdfaf785475513f4b326c4c40a195936389b553c57289467835f0590f2edd65b490e2690d3b7ad72d37e00bbc7c6373e8321a4af1ecf51c63283a87fc322b90315bff6f83188412e4aace3572ce746f91adac5aa109374b416d720a4fa3381b625313cae94853be05bff2eafb00f2d78a2ad88a48d2a86fb290aef", 0xc2}, {&(0x7f0000000600)="e24943543757263fc38b3f009263564832bcbc2008cdd2f087029140d49203800ea15fa61aa58ce541a9942a56d8eb14df03bf1d94d9d27fea297c5e52bd5cef9476", 0x42}, {&(0x7f00000000c0)}, {&(0x7f0000000680)="1d3fe9978c51ced15fd05404c69c0953f3a4794fe2120e63966aa88a4c0fd34a2d7a4f8925473fe3d3e976f4208716dbc7e691da24c84113a0e2d9363994be47cf8ca827ffa91f064d72e85ed074eeed0ee4ded85c41951532e12e65c51d1f995ba2e486033d23218798b36fc84ccbda8ec2e66a7ec540d64a7fa7350513bd65a8930794264c26fbf530f5e51765f51e94592896268fc719f91de27c559e7e57170f175e4507ce004e08f4d41941d16ce9ebf027af976fff1e1a468041e62a2c56cccf0cdbdb", 0xc6}, {&(0x7f0000000400)="c42449b5e3656b2d3b50713afa770709f5c41fa6ff82c801a4255cd592dfcb40ad38e60f2b7477c7a2855a555ed0571d7ccd6665e4b28f5ccd85637a4d", 0x3d}, {&(0x7f0000000780)="2b8379446e4aa11d95de17a31d7c232e35317b18aef42ba8ae42515c6291524a26b8541d9f518ecbe02cdeb108607840c22c4d801bf77e56e5dacc670de5c1c9c6278b03abe2deaf91489b2c4d5df57a2ac0ee7f327fc96dbfe646eda50e2b0e631055f471eb3fe4ae12721658e31cb5992f993738600a12ad78f5f8964040d05ac44021a965beb0f126c441c77f4696c32aed6b5ebb08134780ec5a31a8215031b838b8adc612bf9b6e1cef38f5a55c98161b64edf87fdfbc69f1e2765ea73da23bea305fb57cf3894f778b9efe86bc52831b42e76ba79977e734c967e1be0124d08ac9b6", 0xe5}, {&(0x7f0000000880)="187c4601cfc5618266de7495a4b1af5822a1b409066efdd0c02a560bf30e398b85d87491f790b3832880bbd06bad0e2d5d95707afa66afe0eb553a49ea9f7c2e3aee16e45fe39ff4aacdd2f9aa8493375f0b82b79c1d407bffe0c126539be2a8d2432c8ac3fc7a38d97480966072001e9928d4edfb1fbdc5ce2f868b", 0x7c}, {&(0x7f0000000900)="6de70fc858fb08a595b7ee5c65c7bb18ba343737b9563cb6062b8d4f204d1327f0a4879dbe39a9e122a990fdd4e0f0354b5918256e61cecdb87f22fa615a4cc9ecf120dc2ef046db037f967e55d84721b5a321725913597c3e0f07df6830c88641c527e8b6224da826e4d741feedc55e10fa1d", 0x73}, {&(0x7f0000000980)="9af4b6b2389b8037050000c10e0ec39081dadbe3a02628480eaa069477c14ecfd01469763af8b666119a9b484a504c79058d1716406b3c351f65055a92b3505eb0cd78a772359e36d6da497eced06bf20170a5a50afb39ccb3a1215497c3a9c42a244c2d90dcfe6d214c35bdba61e187f43abd496645a5d9e2f8af2d36bd7a5bfde2a5bb52b8efe0028f95fcb1ccf26a1e4ef2f749473580b52e21b0396b2be94e53cb4e0b0bfcb65586f9e612e93f1ace7c", 0xb2}], 0x9, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000280)={r5}) mmap$perf(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="cbcd2df0e2e389a14d6bb3a758bb6fb9b31d1140", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000001c0)}) 03:34:17 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000002, 0x1010, r1, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x140011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0x0) r3 = mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x1013, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 621.300200] binder: 29799:29800 ioctl c0306201 20000440 returned -22 [ 621.319246] binder: 29799:29800 BC_ACQUIRE_DONE u0000000000000000 node 2087 cookie mismatch a308440000000000 != 0000000000000000 [ 621.325087] binder: 29806:29807 unknown command 0 [ 621.325127] binder: 29806:29807 ioctl c0306201 20000140 returned -22 03:34:17 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c670004"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40086310, 0x3}], 0xc6, 0x0, &(0x7f00000004c0)="f1a942c64b683afabda193c4fb3b8bd9dab767ee01c6793dbdb96f59a3a8bc5daa4310d291fcdb0d8689b7deaa973bb8c3553ba53823caf93816bd2326769b71ed9c6b746e08805b1aaa34a13b14b28ccfd71abce4bf89ab82b0aa172115c0cee4e1e4f1662ab8fe0e4ab84909d864f197c16d1a5e26dbff72940cea7729ba894be19e4d931eccd37933346119e9fb04d21c5bb388359a9897518fee7e8bd79c06469f266d7c168e08d241d0b5a3400447e0c4ee68c7ac392e5c12369842a1dc3f0a52e24f5d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="b94f6efca3c183d3fbebaaa6fcfaf1df3251cf3381acb2943547a5c28e0600bb973b4db4a6d0eed2d2d95701ea6ebb8852bcb704fe486f9a291f47e531064bb7ae30a4d0f4e0d1c2a91327d2b49ff7642f5c8049e1d12b76c4cba2eb5bf35207d91259026c40309b53eb64d1fe5753147ec57f1a11af", 0x76, 0xfffffffffffffffa) getresgid(&(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)=0x0) keyctl$chown(0x4, r3, 0x0, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000ffb7ef9160770e8e00000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 621.326036] binder_alloc: 29799: binder_alloc_buf, no vma [ 621.326140] binder: 29806:29807 transaction failed 29189/-3, size 24-8 line 3135 [ 621.361247] binder_alloc: 29799: binder_alloc_buf, no vma [ 621.361565] binder: 29808:29809 transaction failed 29189/-3, size 24-8 line 3135 [ 621.362109] binder: 29808:29809 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.372894] binder: 29799:29810 ioctl 5418 20000740 returned -22 03:34:17 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz0', "a1772049140080ca2d4ae2b5325ee324b855deee852cf56ab43e900346edf183bdc42f1f9a1427be5f9459850ce79a227c4515c52adeef752ec91ee9e42659b98db3621d9fbd717733f93a1f95e697b769b0faab7770daf17edc97f81c23a94d87bea96ff18b0243be98135683a6359396d7c4539045"}, 0x7a) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300000589b6ac12462c14e5413b"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) fcntl$getown(r2, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000005514e571a7927388b67d4ea90000d72c4c33b9139b9819000c204e07000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 621.401244] binder: 29811:29813 unknown command 67135244 [ 621.401291] binder: 29811:29813 ioctl c0306201 20000140 returned -22 [ 621.402133] binder: BINDER_SET_CONTEXT_MGR already set [ 621.402173] binder: 29811:29813 ioctl 40046207 0 returned -16 [ 621.404575] binder_alloc: 29799: binder_alloc_buf, no vma [ 621.404700] binder: 29811:29813 transaction failed 29189/-3, size 24-8 line 3135 [ 621.405654] binder: 29811:29813 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:17 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000c1f46857ad8d4c81e3c45039b5abc197f689fe521f86cbb0e7fd6895f22cbfd4a04595f4a204dbd72b1e08a3626134a1a8217a8b2ceccae9e452a4e0105f5e44fea76cc812ae0a8e425659e551e9940898", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 621.494549] binder: 29814:29818 transaction failed 29189/-22, size 24-8 line 3012 [ 621.504309] binder: 29814:29818 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.528094] binder: 29772:29777 transaction failed 29189/-22, size 24-8 line 3012 [ 621.536008] binder: 29772:29819 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:17 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), 0xffffffaf, 0x1009000000000000, &(0x7f0000000580)="2b4fae92809e288ce202953ff4161a4611eec6577753bf3e74aefb9d4742dbd750801714446027b8e357a1334686c0d149def9c46f6c00100000000000008b8c9363cd4d1817b46727265ee7ef70b482a57f2e3695f8064cef7cebccaa0ceafabe3c0fa5a9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 621.564438] binder: 29775:29822 transaction failed 29189/-22, size 24-8 line 3012 [ 621.575447] binder: 29775:29822 unknown command 153129689 [ 621.581169] binder: 29775:29822 ioctl c0306201 200003c0 returned -22 [ 621.605739] binder: 29824:29826 transaction failed 29189/-22, size 24-8 line 3012 [ 621.614423] binder: 29821:29827 transaction failed 29189/-22, size 24-8 line 3012 [ 621.614850] binder: 29824:29826 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.615953] binder: 29824:29828 transaction failed 29189/-22, size 24-8 line 3012 [ 621.616036] binder: 29824:29828 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.645941] binder: 29821:29827 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:18 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000180)}) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) [ 621.684671] binder: 29780:29830 transaction failed 29189/-22, size 24-8 line 3012 [ 621.692512] binder: 29780:29783 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x18000, 0x0) dup2(r0, r1) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x120) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/29) mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000005000/0x1000)=nil) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)="df6c51c7bf5f8a4d8643869e4ccb891cdfcdf842", 0x14) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x1000, &(0x7f0000000000)=ANY=[@ANYBLOB="2c636f6e74657874050000000000000000e1e7ff090baf08a214008000001dda8cf5e89574"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000015000)='logon\x00', &(0x7f0000014000), &(0x7f0000014000)="578ea44f6ba3a636ffe97fbf75d7f372f0e7dc32856ed7aba5b6170997cd8b3e7f4fb91f56a1d51d0440a1121990753224a83c0fabcdf91de1ac17b66df943ab65c55d35edaefad063", 0x49, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000380)="73656375234e902012b8d34d00", r4) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000180)={'bond_slave_1\x00', @link_local}) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000440)={0x5, &(0x7f0000000340)=[{0x9, 0x97cf, 0x7, 0x630e}, {0x81, 0xa787, 0x3, 0xffffffffffffffeb}, {0x0, 0xffffffffffff0000, 0xace5, 0x9}, {0x0, 0x0, 0x0, 0x503f1eeb}, {0x9, 0xce3, 0x8, 0x3ff}]}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6_vth0\x00', {0x2, 0x0, @multicast2}}) sched_setscheduler(r3, 0x5, &(0x7f0000000000)) setsockopt$inet6_buf(r2, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) keyctl$set_timeout(0xf, r4, 0x9) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$revoke(0x3, r4) shutdown(r6, 0x1) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl(r0, 0x20000000008912, &(0x7f0000000400)="0a5c2d0240316285717070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)={[{@shortname_winnt='shortname=winnt'}, {@uni_xlate='uni_xlate=1'}]}) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000001c0)=0x7e2) rt_sigpending(&(0x7f0000000200), 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000100)="97cc6d56cd851110d18ae788fd0b64ba276aa4ab8a7ab89bf497d185bf757d1260d1bed9fb533cb21322a8fce4fb6652ec5cc23e9cc975adb543218f76cafd915b37b616f54ab5e78b0a87639da29a5a9b1c96fa2826ee35f3683f8bdd7af000411a4c"}, 0x10) 03:34:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f5030034b7d86046728f39be524190fa5c7e130e192b4e474a20f5aa710a0d050093d0cc441b5d1d1a99a918b60c3aa2b039c380fdd0d67b5ba19186e6384af693d1bedb7659dfcee99eda37f39a86a37e401c39dad6cbd3c5"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ftruncate(r0, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) mincore(&(0x7f0000000000/0x4000)=nil, 0x4000, &(0x7f00000006c0)=""/4096) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:18 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000040)=0x44) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xffffffd6, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="c4e83962c4ea4f816ff3f5c8a8a12788a2829db1e08b27515656b407090ffa91de0dbf274e7c797bd2d0c60a2e98f35d0176fd384515ff28b500000000e57ed3c5186a6737cdd39f8901706af5691434a410371be44959a04b31c4b1159353ca054a19b2cb003c1ad568989bb9251ea9daef7b58f8f6e6ceb8e420320e46e2bbedf5e0ef9695a063f0913bc9e2438573b643", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) [ 621.879266] binder: 29787:29798 unknown command 254695041 [ 621.884903] binder: 29787:29798 ioctl c0306201 20000440 returned -22 [ 621.891619] binder: 29787:29791 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.929924] binder: 29838:29843 unknown command 872416245 [ 621.942831] binder: 29838:29843 ioctl c0306201 20000140 returned -22 [ 621.955946] binder: 29838:29843 transaction failed 29189/-22, size 24-8 line 3012 [ 621.964649] binder: 29838:29843 BC_ACQUIRE_DONE u0000000000000000 no match [ 621.973967] binder: 29838:29846 unknown command 872416245 03:34:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3a00000006"]}) 03:34:18 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 621.979865] binder: 29839:29841 unknown command 0 [ 621.979875] binder: 29839:29841 ioctl c0306201 20000140 returned -22 [ 621.979961] binder: 29839:29841 transaction failed 29189/-22, size 24-8 line 3012 [ 621.980555] binder: 29839:29841 unknown command 1647962308 [ 621.980563] binder: 29839:29841 ioctl c0306201 200003c0 returned -22 03:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) fsync(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 621.987458] FAT-fs (loop0): bogus number of reserved sectors [ 621.987464] FAT-fs (loop0): Can't find a valid FAT filesystem [ 621.989925] binder: 29839:29841 unknown command 0 [ 621.989935] binder: 29839:29841 ioctl c0306201 20000140 returned -22 03:34:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e0066420fe2e3660fa041d288766d0000d3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 621.991263] binder: 29839:29845 transaction failed 29189/-22, size 24-8 line 3012 [ 621.991479] binder: 29839:29841 unknown command 1647962308 [ 621.991499] binder: 29839:29841 ioctl c0306201 200003c0 returned -22 [ 622.007615] binder: 29842:29847 ioctl c0306201 20000140 returned -11 [ 622.013428] binder: 29842:29847 transaction failed 29189/-22, size 24-8 line 3012 [ 622.013860] binder: 29842:29847 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.024552] binder: 29842:29854 transaction failed 29189/-22, size 24-8 line 3012 [ 622.024634] binder: 29842:29847 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.026720] binder: 29838:29853 transaction failed 29189/-22, size 24-8 line 3012 [ 622.027884] binder: 29838:29843 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.098683] binder: 29851:29864 transaction failed 29189/-22, size 24-8 line 3012 [ 622.098789] binder: 29851:29864 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.149308] binder: 29861:29866 transaction failed 29189/-22, size 24-8 line 3012 [ 622.156693] binder: 29861:29866 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.186767] binder: 29838:29846 ioctl c0306201 20000140 returned -22 03:34:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/11, 0xfea1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[{0x3}], 0x1) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000000)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x0, 0x80000001}) 03:34:18 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) 03:34:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',#I\x00'], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e0066420fe2e3660fa041d288766d0000d3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000140), 0x10) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040), 0x4) [ 622.365331] binder: 29821:29827 transaction failed 29189/-22, size 24-8 line 3012 [ 622.365425] binder: 29821:29879 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.393541] binder: 29880:29882 unknown command 4793132 [ 622.400830] binder: 29880:29882 ioctl c0306201 20000140 returned -22 03:34:18 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x2}], 0xb4, 0x0, &(0x7f0000000480)="b511163eee47fff6f160d78d34c426886a98ea120f4bcf2e280b0aa2ad6491d0bd485813cffe654574b13ddf5816e9d2a20ba4c1c47659d06ce1312ce8b9a23472a940d6e94dd58da3242d486704919ccba0b3be6864900003707429e12ccd4206b84febdc4f08a4bb082190a4a8c95dcfc5d0bc2abedbead9f3b6ced73301c14cc2522a611f109d61a40cb1569cfee72cd77ff3051fcde86cd0f1d6baddc7870c072bd3a654b6a563d9d0ae3e9d86c1cc781986"}) fcntl$setstatus(r1, 0x4, 0x4000) r4 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x804) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000060000f095b0ef45c175cdb60f29c14c574a8305accf369f6560658ca6742c48923799dba215fb3f2b11bd34d14c1da76790bb293ade6d32696c90261a983b520024a462dca8935a60351797408440c619abd5fa4813db9158b9d1ff93e2"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 622.409516] binder: 29880:29882 transaction failed 29189/-22, size 24-8 line 3012 [ 622.416885] binder: 29885:29887 ioctl c0306201 20000140 returned -11 [ 622.417208] binder: 29885:29887 transaction failed 29189/-22, size 24-8 line 3012 [ 622.418085] binder: 29885:29887 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.422851] binder: 29885:29887 transaction failed 29189/-22, size 24-8 line 3012 [ 622.423064] binder: 29885:29888 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.423085] binder: 29885:29888 unknown command 0 [ 622.423122] binder: 29885:29888 ioctl c0306201 200003c0 returned -22 [ 622.463884] binder: 29880:29890 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:18 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffe0e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) [ 622.511283] binder: 29880:29890 transaction failed 29189/-22, size 24-8 line 3012 [ 622.519093] binder: 29880:29882 unknown command 4793132 [ 622.519104] binder: 29880:29882 ioctl c0306201 20000140 returned -22 [ 622.531845] binder: 29880:29890 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.559377] binder: 29891:29896 transaction failed 29189/-22, size 24-8 line 3012 [ 622.574631] binder: 29891:29896 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.607697] binder: 29897:29900 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:19 executing program 0: syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c0c27d794e0066421fe2e33e0f1110c442019dccc4c105d0dabe470f01d4") r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001c80)={&(0x7f0000000000), 0xc, &(0x7f0000001c40)={&(0x7f0000001380)={0x14}, 0x14}}, 0x4000) 03:34:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e0066420fe2e3660fa041d288766d0000d3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:34:19 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c630000270ed120bd16952576318065c66c219a3d29cc4559945f9a207d7edc43e7a0d7d5df685757c6720037023efa02146b70f47b7793813709c0121394a8e1bb7c696182f19fc86ea1e58516feafcddd2ed1e54a6ad642141bf1aa4fe8aac9dab6246478eb5486a0efec7623d12584f1265cee10725ba09a1f65b712d28edd3969742507c549cd81ebbc38cda2477c4d58e7d8cb3210403ed84fc11bce69db68c4766ea90f057e58ba51"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="874ab606ad53b4b1"], 0x0, 0x0, &(0x7f0000000180)}) unlink(&(0x7f0000000380)='./file0\x00') 03:34:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0xfffffffffffffffe, 0x0) write$P9_RAUTH(r1, &(0x7f0000000000)={0x14}, 0x14) [ 622.829305] binder: 29851:29864 transaction failed 29189/-22, size 24-8 line 3012 [ 622.837473] binder: 29851:29912 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.883629] binder: 29861:29918 transaction failed 29189/-22, size 24-8 line 3012 [ 622.892786] binder: 29915:29920 transaction failed 29189/-22, size 24-8 line 3012 [ 622.892894] binder: 29915:29920 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.899062] binder: 29915:29921 transaction failed 29189/-22, size 24-8 line 3012 [ 622.906585] binder: 29915:29920 BC_ACQUIRE_DONE u0000000000000000 no match 03:34:19 executing program 2: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) 03:34:19 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x5) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x1b0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000180)}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'yam0\x00', 0xfd}) [ 622.931506] binder: 29861:29923 BC_ACQUIRE_DONE u0000000000000000 no match [ 622.939623] binder: 29861:29923 unknown command 0 [ 622.944834] binder: 29861:29923 ioctl c0306201 200003c0 returned -22 [ 623.018456] binder: 29926:29933 transaction failed 29189/-22, size 24-8 line 3012 [ 623.027148] binder: 29926:29933 unknown command 1986356271 [ 623.032929] binder: 29926:29933 ioctl c0306201 200003c0 returned -22 03:34:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x2, 0x0, "8b63e98a6e9a990ceacccaa0722f7b17adbfb251c09e5993d319d88199f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e0b20637e2b5a8dd3403bbe1ccf681d083e2307d3f5597b"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "521353f37dcd64c12799efb9dbad200b6cf433289feda8725ba79dbc26d16f9663b3df59d7b9d07abd8ae0918551393a71edeeba68925770399de3c38f23825d021cc14f2ea21c5dd607e8a85d8c9cfd"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 03:34:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000c0000000000000008000100736671004800020000000000f3ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 03:34:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r0) 03:34:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), 0x4) [ 623.220556] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 03:34:19 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x89, 0x2f, &(0x7f0000000480)="4c131b107defe090da28580b56e1f4867acf793810cf3d35b425d42e86ff24ad8ed11d8ae068c44cbd92f2862c28f8331a412b4ce00d273851f1f532279307c5006eb9d589f110fc9513d80a1d4bd0dbec1cb969edcce74ab2ac1a694f95410f6f88881e03912a26c5da82564ad6384330ca45956cbeaf7b2b56513e4aefaf17b2f87ffc637bf77cc2", &(0x7f0000000040)=""/47, 0x10421db0}, 0x28) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6da44af8358157f30bda11e0e852381332370c09887eaaf52c27a2d599d5fcd25c366d0ff11e8e040890e7a2353665650e3e6dc275b4b43005aec0d3c4fb89402826ec96b22801e35c556ddb5d055708b31b95b7e9bd31e40871cddb478501c82c27bbde2790d11ab8e3e315b9ad0239112222df8804e34de03929ad893e5e8f65e2f338c3b10307a3c40b810f1cece437f1a2d19e92225ed763537cc05dd122b6fd3766b2d56d89e75a1dab344cdbb3af8bde78766eddb28f406eef6e7a2e6a968a78db7be00d8e990a6529e86d57163045f518c7e2414e"], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f0000000180)}) [ 623.275561] binder_alloc: binder_alloc_mmap_handler: 29891 20001000-20004000 already mapped failed -16 [ 623.288917] binder: 29891:29896 transaction failed 29189/-22, size 24-8 line 3012 [ 623.297331] binder: 29891:29959 BC_ACQUIRE_DONE u0000000000000000 no match [ 623.343073] binder: 29963:29964 unknown command -129325971 [ 623.348836] binder: 29963:29964 ioctl c0306201 20000140 returned -22 [ 623.357901] binder: 29963:29964 transaction failed 29189/-22, size 24-8 line 3012 [ 623.368739] binder: 29897:29965 BC_ACQUIRE_DONE u0000000000000000 no match [ 623.369415] binder: 29963:29964 BC_ACQUIRE_DONE u0000000000000000 no match [ 623.374583] binder: 29963:29967 unknown command -129325971 03:34:19 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tgkill(r1, r1, 0x2f) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000240)) 03:34:19 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc00600", 0xc201}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000280)=0x10) 03:34:19 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 03:34:19 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={r2, 0x0, 0x18, 0x100, 0x8}) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040207e71", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000180)}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r5, r6) 03:34:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x0, 0xffffffffffffc7b7, 0x383b5e54}, 0x42, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7be, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c) dup3(r1, r0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/137, &(0x7f00000001c0)=0x89) [ 623.374608] binder: 29963:29967 ioctl c0306201 20000140 returned -22 [ 623.375233] binder: 29963:29964 transaction failed 29189/-22, size 24-8 line 3012 [ 623.375434] binder: 29963:29967 BC_ACQUIRE_DONE u0000000000000000 no match [ 623.375455] binder: 29963:29967 unknown command 0 [ 623.375478] binder: 29963:29967 ioctl c0306201 200003c0 returned -22 03:34:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='}'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x1) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) [ 623.501902] binder: 29971:29994 transaction failed 29189/-22, size 24-8 line 3012 [ 623.512176] binder: 29971:29994 BC_ACQUIRE_DONE u0000000000717e20 no match 03:34:20 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x1009000000000000, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=[0x40, 0x28, 0x48, 0x0, 0x0, 0x28, 0x78, 0x48]}}], 0x0, 0x0, &(0x7f0000000380)}) 03:34:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4000010004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "011bb332dbb4ff1cc6e4299f74a63fb947d50fe1f3f725eb7b62b2f434ff374fe8c035dc03fa5e2a0f1d8e640347db0d1f2c1dd3d3a5802b593238364376f6b4", "55f5c3e5b7f4eb3e3046577ef2d66fabef260057a6df8c42b8da043cbaf5500c"}) 03:34:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='\a\x00\x00\x00', 0xfffffefffffffffd, 0x24a, &(0x7f00001a7f05)=""/251}, 0x48) [ 623.773520] binder: 29926:29933 transaction failed 29189/-22, size 24-8 line 3012 [ 623.774019] binder: 29926:30005 unknown command 1986356271 [ 623.774028] binder: 29926:30005 ioctl c0306201 200003c0 returned -22 [ 623.872487] binder: 30009:30018 transaction failed 29189/-22, size 24-8 line 3012 [ 623.881090] binder: 30009:30018 got transaction to invalid handle [ 623.887670] binder: 30009:30018 transaction failed 29201/-22, size 0-64 line 3012 03:34:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)="68756765746c04000000000000006167655f69725f5aa2f4657300", 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) 03:34:20 executing program 2: socketpair$unix(0x1, 0x100000000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b70200001a4b0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001030000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0xf8, &(0x7f00000000c0)="7a64f6bfff9c6ca28be45c3904ff", &(0x7f0000000380)=""/248, 0x101}, 0x28) 03:34:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)="9568", 0x2, 0x20000004, &(0x7f00000002c0)={0xa, 0x5e22, 0xffffffff, @empty={[0xe00000002000000, 0xf5010000, 0x801000cf00000000, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) 03:34:20 executing program 1: syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000007c0)="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", 0xa00, 0x400}], 0x0, &(0x7f0000000380)) [ 624.020910] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 624.051184] ================================================================== [ 624.052999] F2FS-fs (loop1): Unable to read 1th superblock [ 624.053033] F2FS-fs (loop1): Unable to read 2th superblock [ 624.053115] F2FS-fs (loop1): Unable to read 1th superblock [ 624.053128] F2FS-fs (loop1): Unable to read 2th superblock [ 624.081073] BUG: KASAN: use-after-free in _copy_to_user+0x9a/0xc0 [ 624.087291] Read of size 57692 at addr ffff8801a047fff2 by task syz-executor2/30028 [ 624.095068] [ 624.096686] CPU: 1 PID: 30028 Comm: syz-executor2 Not tainted 4.14.81+ #6 [ 624.103588] Call Trace: [ 624.106167] dump_stack+0xb9/0x11b [ 624.109696] print_address_description+0x60/0x22b [ 624.114674] kasan_report.cold.6+0x11b/0x2dd [ 624.119072] ? _copy_to_user+0x9a/0xc0 [ 624.122955] _copy_to_user+0x9a/0xc0 [ 624.126659] bpf_test_finish.isra.0+0xc8/0x190 [ 624.131229] ? bpf_test_run+0x350/0x350 [ 624.135205] ? kvm_clock_read+0x1f/0x30 [ 624.139166] ? ktime_get+0x17f/0x1c0 [ 624.142869] ? bpf_test_run+0x280/0x350 [ 624.146840] bpf_prog_test_run_skb+0x4d0/0x8c0 [ 624.151418] ? bpf_test_init.isra.1+0xc0/0xc0 [ 624.155901] ? __fget_light+0x192/0x1f0 [ 624.159862] ? bpf_prog_add+0x42/0xa0 [ 624.163648] ? fput+0xa/0x130 [ 624.166755] ? bpf_test_init.isra.1+0xc0/0xc0 [ 624.171237] SyS_bpf+0x79d/0x3700 [ 624.174685] ? bpf_prog_get+0x20/0x20 [ 624.178474] ? _copy_to_user+0x7f/0xc0 [ 624.182359] ? put_timespec64+0xb9/0x110 [ 624.186421] ? do_clock_gettime+0x30/0xb0 [ 624.190553] ? SyS_clock_gettime+0x7b/0xd0 [ 624.194776] ? do_clock_gettime+0xb0/0xb0 [ 624.198918] ? do_syscall_64+0x43/0x4b0 [ 624.202893] ? bpf_prog_get+0x20/0x20 [ 624.206680] do_syscall_64+0x19b/0x4b0 [ 624.210558] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.215729] RIP: 0033:0x457569 [ 624.218899] RSP: 002b:00007f2fe880ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.226716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 624.233972] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 624.241223] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 624.248473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2fe880b6d4 [ 624.255725] R13: 00000000004bd892 R14: 00000000004cc568 R15: 00000000ffffffff [ 624.262991] [ 624.264599] The buggy address belongs to the page: [ 624.269512] page:ffffea0006811fc0 count:0 mapcount:0 mapping: (null) index:0x0 [ 624.277638] flags: 0x4000000000000000() [ 624.281604] raw: 4000000000000000 0000000000000000 0000000000000000 00000000ffffffff [ 624.289470] raw: dead000000000100 dead000000000200 0000000000000000 0000000000000000 [ 624.297330] page dumped because: kasan: bad access detected [ 624.303015] [ 624.304622] Memory state around the buggy address: [ 624.309528] ffff8801a047fe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03:34:20 executing program 4: socketpair(0x18, 0x0, 0x0, &(0x7f0000000140)) [ 624.316869] ffff8801a047ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 624.324209] >ffff8801a047ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 624.331551] ^ [ 624.338544] ffff8801a0480000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 624.345883] ffff8801a0480080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 624.353218] ================================================================== [ 624.360552] Disabling lock debugging due to kernel taint [ 624.373047] Kernel panic - not syncing: panic_on_warn set ... [ 624.373047] [ 624.374831] binder_alloc: binder_alloc_mmap_handler: 29971 20001000-20004000 already mapped failed -16 [ 624.375350] binder: 29971:30033 transaction failed 29189/-22, size 24-8 line 3012 [ 624.375612] binder: 29971:29994 BC_ACQUIRE_DONE u0000000000717e20 no match [ 624.404587] CPU: 1 PID: 30028 Comm: syz-executor2 Tainted: G B 4.14.81+ #6 [ 624.412722] Call Trace: [ 624.415303] dump_stack+0xb9/0x11b [ 624.418837] panic+0x1bf/0x3a4 [ 624.422010] ? add_taint.cold.4+0x16/0x16 [ 624.426137] ? ___preempt_schedule+0x16/0x18 [ 624.430655] kasan_end_report+0x43/0x49 [ 624.434615] kasan_report.cold.6+0x77/0x2dd [ 624.438919] ? _copy_to_user+0x9a/0xc0 [ 624.442793] _copy_to_user+0x9a/0xc0 [ 624.446493] bpf_test_finish.isra.0+0xc8/0x190 [ 624.451057] ? bpf_test_run+0x350/0x350 [ 624.455042] ? kvm_clock_read+0x1f/0x30 [ 624.459005] ? ktime_get+0x17f/0x1c0 [ 624.462707] ? bpf_test_run+0x280/0x350 [ 624.466669] bpf_prog_test_run_skb+0x4d0/0x8c0 [ 624.471236] ? bpf_test_init.isra.1+0xc0/0xc0 [ 624.475713] ? __fget_light+0x192/0x1f0 [ 624.479678] ? bpf_prog_add+0x42/0xa0 [ 624.483468] ? fput+0xa/0x130 [ 624.486989] ? bpf_test_init.isra.1+0xc0/0xc0 [ 624.491473] SyS_bpf+0x79d/0x3700 [ 624.494913] ? bpf_prog_get+0x20/0x20 [ 624.498698] ? _copy_to_user+0x7f/0xc0 [ 624.502570] ? put_timespec64+0xb9/0x110 [ 624.506624] ? do_clock_gettime+0x30/0xb0 [ 624.510751] ? SyS_clock_gettime+0x7b/0xd0 [ 624.514968] ? do_clock_gettime+0xb0/0xb0 [ 624.519111] ? do_syscall_64+0x43/0x4b0 [ 624.523068] ? bpf_prog_get+0x20/0x20 [ 624.526851] do_syscall_64+0x19b/0x4b0 [ 624.530737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.535919] RIP: 0033:0x457569 [ 624.539095] RSP: 002b:00007f2fe880ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.546866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 624.554150] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 624.561411] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 624.568659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2fe880b6d4 [ 624.575915] R13: 00000000004bd892 R14: 00000000004cc568 R15: 00000000ffffffff [ 624.583851] Kernel Offset: 0x26a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 624.594758] Rebooting in 86400 seconds..