20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xc00000000000000) 16:26:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x10e, 0x301) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) [ 697.484934][T21547] binder: 21538:21547 transaction failed 29201/-71, size 0-0 line 3044 [ 697.510855][T21554] Unknown ioctl 35142 [ 697.512226][T21547] binder: 21538:21547 ioctl c0306201 20000040 returned -14 16:26:07 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 697.561514][T21558] binder_alloc: binder_alloc_mmap_handler: 21538 20001000-20004000 already mapped failed -16 16:26:07 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xd00000000000000) [ 697.660850][T21558] binder_alloc: 21538: binder_alloc_buf, no vma [ 697.680373][T21569] binder: BINDER_SET_CONTEXT_MGR already set [ 697.686641][T21569] binder: 21538:21569 ioctl 40046207 0 returned -16 [ 697.693694][T21547] binder_alloc: 21538: binder_alloc_buf, no vma [ 697.702233][ T5] binder: release 21538:21547 transaction 4427 out, still active 16:26:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300000000000000, 0x0, 0x0}) [ 697.724570][T21547] binder: 21538:21547 ioctl c0306201 20000040 returned -14 [ 697.735503][ T5] binder: undelivered TRANSACTION_COMPLETE [ 697.747149][ T5] binder: send failed reply for transaction 4427, target dead [ 697.812057][T21581] binder: 21580:21581 got new transaction with bad transaction stack, transaction 4432 has target 21580:0 [ 697.832172][T21581] binder: 21580:21581 ioctl c0306201 20000040 returned -14 [ 697.872226][T21583] binder_alloc: binder_alloc_mmap_handler: 21580 20001000-20004000 already mapped failed -16 [ 697.897705][T21581] binder: BINDER_SET_CONTEXT_MGR already set [ 697.906543][T21581] binder: 21580:21581 ioctl 40046207 0 returned -16 [ 697.916569][T21583] binder_alloc: 21580: binder_alloc_buf, no vma [ 697.942140][ T5] binder: release 21580:21581 transaction 4432 out, still active [ 697.971084][ T5] binder: undelivered TRANSACTION_COMPLETE [ 697.977036][ T5] binder: send failed reply for transaction 4432, target dead 16:26:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:08 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x400000000000000, 0x0, 0x0}) 16:26:08 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xe00000000000000) [ 698.313203][T21593] binder: 21590:21593 got new transaction with bad transaction stack, transaction 4436 has target 21590:0 [ 698.348020][T21592] __nla_parse: 52 callbacks suppressed [ 698.348031][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 698.377636][T21593] binder: 21590:21593 ioctl c0306201 20000040 returned -14 [ 698.396066][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 698.411509][T21602] binder_alloc: binder_alloc_mmap_handler: 21590 20001000-20004000 already mapped failed -16 [ 698.438641][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 698.454575][T21593] binder: BINDER_SET_CONTEXT_MGR already set [ 698.461849][T21593] binder: 21590:21593 ioctl 40046207 0 returned -16 [ 698.465070][T21602] binder_alloc: 21590: binder_alloc_buf, no vma [ 698.473408][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 698.490376][ T5] binder: release 21590:21593 transaction 4436 out, still active [ 698.514965][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:08 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x9, 0xf8b8, 0x7ff, 0x7, 0x0, 0x6, 0x1, 0x1, 0x7de9, 0xe0f, 0x47a, 0x80000000, 0x401, 0x100000001, 0x7fff, 0x5, 0xa5, 0x951, 0x415b, 0x10000, 0x1, 0x7f, 0x5e4, 0x21972ae8, 0x6, 0x1000, 0x200, 0x401, 0x7db, 0x80000001, 0x6, 0x4, 0x7, 0x400, 0x8, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x9, 0x100000000}, 0x2, 0x5, 0x5, 0x0, 0x5, 0x3, 0x10001}, 0xffffffffffffffff, 0x3, r0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 16:26:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500000000000000, 0x0, 0x0}) 16:26:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xf00000000000000) [ 698.547554][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 698.551908][ T5] binder: send failed reply for transaction 4436, target dead 16:26:08 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:08 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 698.642219][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 698.659368][T21616] binder: 21615:21616 got new transaction with bad transaction stack, transaction 4440 has target 21615:0 [ 698.721601][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 698.749471][T21616] binder: 21615:21616 ioctl c0306201 20000040 returned -14 [ 698.767075][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:26:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) [ 698.793597][T21627] binder_alloc: binder_alloc_mmap_handler: 21615 20001000-20004000 already mapped failed -16 [ 698.807120][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 698.840616][T21616] binder: BINDER_SET_CONTEXT_MGR already set [ 698.849515][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 698.862185][T21616] binder: 21615:21616 ioctl 40046207 0 returned -16 [ 698.878752][T21627] binder_alloc: 21615: binder_alloc_buf, no vma [ 698.886628][T13392] binder: release 21615:21616 transaction 4440 out, still active [ 698.895409][T21616] binder_alloc: 21615: binder_alloc_buf, no vma [ 698.896268][T13392] binder: undelivered TRANSACTION_COMPLETE [ 698.903694][T21616] binder: 21615:21616 ioctl c0306201 20000040 returned -14 [ 698.915488][T13392] binder: send failed reply for transaction 4440, target dead 16:26:09 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@rand_addr="eaf0e15dcd4472a7c2ac7bd93a3f35a2", 0x61, r1}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) 16:26:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1000000000000000) 16:26:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600000000000000, 0x0, 0x0}) 16:26:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000100)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:09 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:09 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 699.222463][T21650] binder: 21648:21650 got new transaction with bad transaction stack, transaction 4445 has target 21648:0 [ 699.235607][T21650] binder: 21648:21650 ioctl c0306201 20000040 returned -14 [ 699.261099][T21656] binder_alloc: binder_alloc_mmap_handler: 21648 20001000-20004000 already mapped failed -16 [ 699.273457][T21650] binder: BINDER_SET_CONTEXT_MGR already set [ 699.282430][T21650] binder: 21648:21650 ioctl 40046207 0 returned -16 [ 699.291222][T21656] binder_alloc: 21648: binder_alloc_buf, no vma [ 699.302878][T13392] binder_release_work: 15 callbacks suppressed [ 699.302884][T13392] binder: undelivered TRANSACTION_ERROR: 29189 16:26:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1100000000000000) 16:26:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7f0d0939, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 699.324119][T13392] binder: send failed reply for transaction 4445 to 21648:21650 16:26:09 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700000000000000, 0x0, 0x0}) 16:26:09 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 699.372186][T13392] binder: undelivered TRANSACTION_COMPLETE [ 699.399133][T13392] binder: undelivered TRANSACTION_ERROR: 29201 16:26:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1200000000000000) [ 699.434170][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 699.470112][T21674] binder: 21673:21674 got new transaction with bad transaction stack, transaction 4449 has target 21673:0 [ 699.525643][T21674] binder: 21673:21674 ioctl c0306201 20000040 returned -14 [ 699.546728][T21683] binder_alloc: binder_alloc_mmap_handler: 21673 20001000-20004000 already mapped failed -16 [ 699.571821][T21683] binder: BINDER_SET_CONTEXT_MGR already set [ 699.577860][T21683] binder: 21673:21683 ioctl 40046207 0 returned -16 [ 699.591178][T21685] binder_alloc: 21673: binder_alloc_buf, no vma [ 699.597657][T21674] binder_alloc: 21673: binder_alloc_buf, no vma [ 699.607017][ T5] binder: release 21673:21674 transaction 4449 out, still active [ 699.617984][T21674] binder: 21673:21674 ioctl c0306201 20000040 returned -14 [ 699.625416][ T5] binder: undelivered TRANSACTION_COMPLETE [ 699.633632][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 699.648610][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 699.654822][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 699.682194][ T5] binder: send failed reply for transaction 4449, target dead 16:26:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1300000000000000) 16:26:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000380)='keyring\xdd]GPL$\x00', 0xffffffffffffffff}, 0x30) getpgid(r1) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x2c9}, 0x1ffffffe) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000c1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000240)=0x8059) 16:26:10 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="21000000ac8875ae48480329e0dc5320c7c7feef67352d53540e670359d679dfdfd914e965e28c04f91dba31039da4d22d50b9f05dcdace200539c00a9c15ecf3e090cc663a7f7b48b5fc010d580818d6e02d42797", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa00000000000000, 0x0, 0x0}) 16:26:10 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 700.087279][T21703] binder: 21702:21703 got new transaction with bad transaction stack, transaction 4454 has target 21702:0 16:26:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1400000000000000) 16:26:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) 16:26:10 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 700.132022][T21703] binder_transaction: 14 callbacks suppressed [ 700.132040][T21703] binder: 21702:21703 transaction failed 29201/-71, size 0-0 line 3044 [ 700.167225][T21703] binder: 21702:21703 ioctl c0306201 20000040 returned -14 16:26:10 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x80000000, 0x206, 0x800, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x3, 0x7, 0x100000000, 0x60}, &(0x7f0000000280)=0x98) getpgid(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24e3c4f7d500e8ff240007035dffcbdaa56083002020030000000000000085680c1b00ffe2ba16a0aa1c0009b36145ee56ce515d3a2975307ef0856cebea8653b1cc7e6397", 0x45}], 0x1}, 0x0) [ 700.262521][T21723] binder_alloc: binder_alloc_mmap_handler: 21702 20001000-20004000 already mapped failed -16 [ 700.312381][T21703] binder: BINDER_SET_CONTEXT_MGR already set [ 700.324026][T21723] binder: 21702:21723 transaction failed 29189/-3, size 0-0 line 3147 16:26:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1500000000000000) [ 700.362085][T13392] binder: release 21702:21703 transaction 4454 out, still active [ 700.362135][T21732] binder: 21702:21732 transaction failed 29189/-3, size 0-0 line 3147 [ 700.370237][T21703] binder: 21702:21703 ioctl 40046207 0 returned -16 [ 700.398837][T13392] binder: undelivered TRANSACTION_COMPLETE 16:26:10 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000100)=@can={0x1d, r1}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="b38c80a7dbebcfcf7cf2524365f3a9bdc3db71e159879f8034cb", 0x1a}, {&(0x7f0000000300)="b3767d0daa", 0x5}], 0x2, &(0x7f0000000380)=[{0x80, 0x108, 0x6, "17ef029e6f406975908acc04391155b7db2e2f3fe71fd209db53c45f376bec78205c7ea41b676bb7a1423e9c67370f571eab05839932da4e90bb86f81b81515ec9776e331be9adba4f2cc80bae51647fd57b9d04228119eb7d7067a83bc40e3030bf64f2c4dc5be7bdbcd0"}], 0x80}, 0x800) getpgid(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 700.408567][T21732] binder: 21702:21732 ioctl c0306201 20000040 returned -14 [ 700.413028][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 700.434412][T13392] binder: send failed reply for transaction 4454, target dead 16:26:10 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1600000000000000) [ 700.492773][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 700.501857][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 700.848863][ C0] net_ratelimit: 26 callbacks suppressed [ 700.848872][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.860367][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/87) 16:26:11 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) connect$packet(r0, &(0x7f0000000340)={0x11, 0xff, r1, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x30000000}) getpgid(0xffffffffffffffff) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) 16:26:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1700000000000000) 16:26:11 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:11 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1200000000000000, 0x0, 0x0}) [ 700.939693][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.948005][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 700.984891][T21770] binder: 21763:21770 got new transaction with bad transaction stack, transaction 4459 has target 21763:0 [ 701.008242][T21770] binder: 21763:21770 transaction failed 29201/-71, size 0-0 line 3044 [ 701.008538][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 701.017140][T21770] binder: 21763:21770 ioctl c0306201 20000040 returned -14 16:26:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1800000000000000) 16:26:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x20000, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) getpgid(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 701.022431][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 701.055279][T21780] binder_alloc: binder_alloc_mmap_handler: 21763 20001000-20004000 already mapped failed -16 [ 701.088524][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.094389][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.100306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.100682][T21770] binder: BINDER_SET_CONTEXT_MGR already set [ 701.106099][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:11 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1900000000000000) 16:26:11 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 701.212702][T21770] binder: 21763:21770 ioctl 40046207 0 returned -16 16:26:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba1c0a3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3c52ff6f6267f47baf4b0001d2ca2a13338883cf2d621dfba1887074a4238a0c6e5492e2687a3770cb2da5f4a5437e73adce2ac1bb8fbe4fb061e8906065c654fbeb330d91988d607b84efa33cd7383db4cfe9048bd24ff9d3e7e3f7095ddcf7eb56bfc8e1202da55b493c134f1e449ed900a0b4645c71ce76380f8d2ebbc873057401dd0ca98b1", 0x4c}], 0x1000000000000137}, 0x0) [ 701.267240][T21797] binder: 21763:21797 transaction failed 29189/-3, size 0-0 line 3147 [ 701.293067][T13392] binder: release 21763:21770 transaction 4459 out, still active [ 701.323158][T13392] binder: undelivered TRANSACTION_COMPLETE [ 701.347548][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 701.375150][T13392] binder: send failed reply for transaction 4459, target dead 16:26:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000009, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001300)=ANY=[@ANYBLOB="011000002ec541ff14ef47e238ac63c5781cd7d2dff9ace49bc3d69e18b8096bfeb7b95f3dd1b33ccb946db7f69d2707d33484c960abe00ba5451bbc23b92f10b78eae53fa0e53930763ccbf6d8954e0302ee2e693b8bcfbc8572d99a9accec67b40692940034b7e6b147a7c5c99b5e5ee82e07797afb6276a11d47c0cbf9c8c4b6ea1e7e6bfa3b310253a5f050d97", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffa) keyctl$update(0x2, r2, &(0x7f0000001200)="4f68ea0ba1e5c196fbe58234833d3cf0ed8dc395bc67fdec8308be5ca6a7c8ae5168316e06ca5f962b0b53e6aa27511c91a8d5449b2f56e37417a3c749001cc68f91d287decfdeb554bbe59bfa02c103c98f11ba30ee4067a0703b8e1524e947913790138eeed0439cc4654e8668da3070e54c26872d4cd6548e176ccacb9692a843aa1608511582f7ba2ec3a28a657f4aa55e977fab0fc82ff8b8cac42ae4f7bdfc1c70454a3e9615ad025d1b7069fae51b4de617a6285042a5de451fc9e13741a3cdf912a54f1fcfa9bd85641f028ed48f6aafc7658ccb9d76a48acd01687990c7f5838d2f4b90ee04b4938b3379253bb3e4c4fccc", 0xf6) syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x2) 16:26:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x1a00000000000000) 16:26:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000000000000000, 0x0, 0x0}) 16:26:12 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 4: getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xe2a, 0xd0000) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) getpgid(r0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 701.864416][T21822] binder: 21813:21822 got new transaction with bad transaction stack, transaction 4463 has target 21813:0 [ 701.893353][T21822] binder: 21813:21822 transaction failed 29201/-71, size 0-0 line 3044 [ 701.950319][T21822] binder: 21813:21822 ioctl c0306201 20000040 returned -14 16:26:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x2000000000000000) [ 701.996792][T21836] binder_alloc: binder_alloc_mmap_handler: 21813 20001000-20004000 already mapped failed -16 16:26:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x7, 0x6, 0x1, '\x00', 0x5}, 0x0, 0x100, 0xdad5, 0x0, 0x8, 0x3, 'syz1\x00', &(0x7f0000000100)=['\x00', 'em0keyring$\x00', '\x00', '\x00', 'vboxnet1/.\x00', 'proclo$vboxnet0\x00', '%\x00', 'keyringw\x00'], 0x35, [], [0x0, 0x401, 0xe0e, 0x6]}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000340)={0x9, {{0xa, 0x4e21, 0x5, @mcast1, 0x46773cb5}}, 0x0, 0x4, [{{0xa, 0x4e21, 0xde, @mcast1, 0x8001}}, {{0xa, 0x4e20, 0x0, @loopback, 0x8001}}, {{0xa, 0x4e20, 0x49a, @remote, 0x1}}, {{0xa, 0x4e20, 0x3030e987, @empty, 0x3}}]}, 0x290) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000600)=""/170) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000140)={@dev}, &(0x7f0000000300)=0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000840)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000880)={0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x1010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b00)={0x7c, 0x0, &(0x7f0000000a00)=[@increfs_done={0x40106308, r2, 0x4}, @increfs_done={0x40106308, r3, 0x4}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x68, 0x20, &(0x7f0000000940)=[@flat={0x776a2a85, 0x1, r4, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0), 0x1, 0x4, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f0000000900), 0x1, 0x2, 0x25}], &(0x7f00000009c0)=[0x38, 0x30, 0x38, 0x30]}, 0x6}}, @enter_looper, @exit_looper], 0x68, 0x0, &(0x7f0000000a80)="29a45f8c005176c640529bc4497607d17a437121c983bf2514e13e37780dcff5a609ae2de98dd903e30d52328e9724a2e4684498ec9c2a581352b77f0d07f9d2df18bfe028bdb9a617944514651799d345f2553a0296e405c7f63fdceb4666247439a2342ce0b70e"}) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000700)={{0x0, 0x7, 0xb98c, 0x7fff, 'syz1\x00', 0x401}, 0x0, 0x1, 0x7fffffff, r0, 0x6, 0x80000000, 'syz1\x00', &(0x7f00000006c0)=['GPL\x00', 'keyring\x00', 'em0keyring$\x00', '\x00', 'syz1\x00', 'syz1\x00'], 0x23, [], [0x8, 0x9, 0x7fff, 0x80]}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 702.040743][T21822] binder: BINDER_SET_CONTEXT_MGR already set [ 702.072803][T21822] binder: 21813:21822 ioctl 40046207 0 returned -16 16:26:12 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000100)={0x4c, 0x78dc, 0x5, 0x9426, 0x15, 0x6d3}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r3, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) openat$pfkey(0xffffffffffffff9c, 0xfffffffffffffffe, 0x80002, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)={0x80000000, 0x8, 0x4, 0x104, {0x77359400}, {0x0, 0x1, 0x1, 0x7, 0xffffffff7fffffff, 0x4, "4c31798a"}, 0xffff, 0x3, @userptr=0xffff, 0x4}) [ 702.132254][T21852] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 702.132262][T21852] binder_alloc: 21813: binder_alloc_buf, no vma 16:26:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x2800000000000000) [ 702.218793][T21852] binder: 21813:21852 transaction failed 29189/-3, size 0-0 line 3147 [ 702.242399][T21836] binder_alloc: 21813: binder_alloc_buf, no vma 16:26:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, r1, 0x4, r2) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r3 = dup(r0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x8000, 0x9, 0x10001, 0x0, 0x1f, 0xd000, 0xf004, [], 0x20}) kexec_load(0xe76, 0xa, &(0x7f00000007c0)=[{&(0x7f00000000c0)="ec275212c3b7b7109adc25d54796750e52c17ce889b74e3cb03021bba39322243c27b9a198a595b8289a7378326e2c1c3157acfd608ef9317c82fd13aba8d0b3828dced6ba449c81c1c88fb7eaad1ef5c1482230", 0x54, 0xfffffffffffffffa}, {&(0x7f0000000380)="f7a65dc85a056f12a89d1aa85018b50d553924d3deffd6d661bd690a258f81eacab7da9e1555d25fe4efe1ca92e1f78afebec86d55adbd5cd16f6bda120c12bdb46b608fca9c40bee95c1ca2f9f51913b8f47b995aa21d405467ddc17a65332f4acdd2151dbe12665f4a2905b9fd610caaa1", 0x72, 0x1ff, 0x4}, {&(0x7f0000000400)="3a49f1f98ad4660a12c5c9e34b05eb78973fac31a8c4c14614b5c49727b6084b7ddccce6f995d20101c6deda35a400f8d9f613c6efcd4b9a56034fefa1275036b154bc2a3c897e781289c8465e6320716521846d986ef5bb735770feb0a2bb534633dbc00074374f871be119b5fd6527a6630d951773b37663bc8dc5aaef51d5f5f07a72f58a055b9c6c17c52dd36357620effd4d1cb6177b0553e8b6ad73b04265dacaeafc5556e03385a7a2cb5b599accddfa55e59056a675318add16e551724c8f5c5feff35787b6a399810399e0d64337aabb32a8ee5b7c6bbd65f141abe", 0xe0, 0x1000, 0x40f}, {&(0x7f0000000500)="c0084eb1df684f4da98a012f924951eafd3603b4e1d85126771436e87a0bd5ab9df3ef098ed0e9cc22ab980fd6a140ee0f7b447328e8a1ad8d7ad938d1caea342b35ea35f4d8700e867a1d7745454d", 0x4f, 0xe8, 0x9}, {&(0x7f0000000140)="503e7e9bf209b8b6710612784ac13f4384e8c7785d32c4e5c70fece0babc6461587684f0a9b6f7f7da7d", 0x2a, 0x80000000, 0x5}, {&(0x7f0000000580)="1f59cf2bc3113fe2620d41646028b66c63fbacd8410bcc8ed269c1f6879389c7a06c77611aa04bc9b7bed80457357e0aa90e3dbf86ea85366d26d585691b3a9bb660a2f6862c30e3d0977f8d4bd86cea255d0b16c0ed08e05480be2711050a914305b89aa18e54e0632678ca2713d5f8b0e75daf677ce979543376f1921978e2edc6343bae31996bcbc27341dbe8bcfe700a8e95aef7e78010fa871d926009547fd42a11a7b67ec83b08cbbb54a603f7decdca06e2", 0xb5, 0x1, 0x1}, {&(0x7f0000000640)="0053b2ebd66dd1", 0x7, 0x1, 0xf5}, {&(0x7f0000000680)="830c7d74501fd41eb9e5e403438ad811243e14a5", 0x14, 0x7, 0x189}, {&(0x7f00000006c0)="7e548c1860c101cd769df18cac7e80249e3b489dd9424eb02694a4eda56982c6602f83895d7716b5e4e1a9ec7a25eacbd313ed3689325ca817f7600f6232d4711149795a792c4a8b103e0b1e468d47a2cb9feb6b8bfc2ccd28cfb22913185a43b9f58dbfe954823c53dfe0b06266b32c05ce0e27e315891f04de630e67304bf7cce04a3b627cf085c084a7763dcbb2a0d763a60ae90f", 0x96, 0x1, 0x80000001}, {&(0x7f0000000780)="39178a65a3de81fd6f400711193180904a999481c6dbb407aa630fc86e7154284f238a5727840c54b75fe531f24b023e0a5a86be21cdabe669a20094", 0x3c, 0xfff, 0x2}], 0x1) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000a00)) [ 702.282477][ T5] binder: send failed reply for transaction 4463 to 21813:21822 [ 702.296206][ T5] binder: undelivered TRANSACTION_COMPLETE [ 702.303243][T21836] binder: 21813:21836 transaction failed 29189/-3, size 0-0 line 3147 [ 702.322036][T21836] binder: 21813:21836 ioctl c0306201 20000040 returned -14 16:26:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f00000000000000, 0x0, 0x0}) 16:26:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x3b01000000000000) 16:26:12 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x40, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000340)=0x2, 0x4) r2 = accept(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000380)={0x2, {{0x2, 0x4e23, @rand_addr=0x4}}, 0x1, 0xa, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @rand_addr=0x10000}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @rand_addr=0x64}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x590) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8e000100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0xd00, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) [ 702.448256][T21882] binder: 21881:21882 got new transaction with bad transaction stack, transaction 4468 has target 21881:0 [ 702.522509][T21882] binder: 21881:21882 transaction failed 29201/-71, size 0-0 line 3044 [ 702.553336][T21882] binder: 21881:21882 ioctl c0306201 20000040 returned -14 16:26:12 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x3f00000000000000) [ 702.576759][T21891] binder_alloc: binder_alloc_mmap_handler: 21881 20001000-20004000 already mapped failed -16 [ 702.596914][T21891] binder_alloc: 21881: binder_alloc_buf, no vma [ 702.617422][T21882] binder: BINDER_SET_CONTEXT_MGR already set 16:26:12 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 702.631665][T21882] binder: 21881:21882 ioctl 40046207 0 returned -16 [ 702.660905][ T5] binder: release 21881:21882 transaction 4468 out, still active [ 702.669315][T21891] binder: 21881:21891 transaction failed 29189/-3, size 0-0 line 3147 [ 702.680971][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:12 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x80, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x200, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) r2 = dup2(r1, r0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x7ff, 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000100)) [ 702.707533][ T5] binder: send failed reply for transaction 4468, target dead 16:26:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4800000000000000, 0x0, 0x0}) 16:26:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x4000000000000000) 16:26:13 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:13 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) sendfile(r1, r3, 0x0, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400040, 0x10) write$P9_RUNLINKAT(r4, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 703.089809][T21927] binder: 21921:21927 got new transaction with bad transaction stack, transaction 4472 has target 21921:0 16:26:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x4800000000000000) 16:26:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x7, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x2a}, 0x1}, 0x1c) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e22, @multicast1}, 0x20, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x1ff, 0x1f, 0x7}) get_thread_area(&(0x7f0000000140)={0x8000, 0x0, 0x2000, 0x5, 0x2, 0x8, 0x20, 0x2, 0x40, 0x7}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 703.144002][T21927] binder: 21921:21927 ioctl c0306201 20000040 returned -14 [ 703.200993][T21941] binder_alloc: binder_alloc_mmap_handler: 21921 20001000-20004000 already mapped failed -16 [ 703.220202][T21927] binder: BINDER_SET_CONTEXT_MGR already set [ 703.226540][T21927] binder: 21921:21927 ioctl 40046207 0 returned -16 16:26:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x4c00000000000000) 16:26:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x37d, 0x80000) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000280)=0xfffffffffffffffb) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0x6, 0x2, 0x101}) socket$key(0xf, 0x3, 0x2) write$P9_ROPEN(r0, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x2, 0x0, 0x2}, 0x3f}}, 0x18) r1 = fcntl$getown(r0, 0x9) getpgid(r1) r2 = socket$inet(0x10, 0x6, 0x6) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x10800, 0x4) ftruncate(r0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18, 0x71, 0x1, {{0xc, 0x4, 0x1}, 0x6}}, 0x18) 16:26:13 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 703.247257][T21941] binder_alloc: 21921: binder_alloc_buf, no vma [ 703.267090][ T5] binder: release 21921:21927 transaction 4472 out, still active [ 703.284470][T21946] binder_alloc: 21921: binder_alloc_buf, no vma [ 703.296055][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:13 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 703.321969][ T5] binder: send failed reply for transaction 4472, target dead [ 703.346959][T21946] binder: 21921:21946 ioctl c0306201 20000040 returned -14 [ 703.360109][T21954] __nla_parse: 69 callbacks suppressed [ 703.360155][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.411300][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.441022][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 703.463745][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:26:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01fc00ff2cb67428d32506d7b2e9d98545cb2cd5fa2803ee16c8c8", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x8000, 0x10000000, 0x80000000, 0x3, 0xff, 0x8, 0x2, 0xd}}) 16:26:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c00000000000000, 0x0, 0x0}) 16:26:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x6000000000000000) 16:26:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}]}, 0x0) 16:26:14 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:14 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x6558000000000000) 16:26:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) getpgid(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) getpgid(r0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 703.965313][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.982046][T21980] binder: 21970:21980 got new transaction with bad transaction stack, transaction 4477 has target 21970:0 [ 704.005129][T21978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 704.037980][T21980] binder: 21970:21980 ioctl c0306201 20000040 returned -14 [ 704.058737][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 704.088746][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 704.099374][T21992] binder_alloc: binder_alloc_mmap_handler: 21970 20001000-20004000 already mapped failed -16 [ 704.103332][T21988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 704.110821][T21992] binder_alloc: 21970: binder_alloc_buf, no vma [ 704.127059][T21980] binder: BINDER_SET_CONTEXT_MGR already set 16:26:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x6800000000000000) [ 704.134143][T21980] binder: 21970:21980 ioctl 40046207 0 returned -16 [ 704.136216][ T5] binder: send failed reply for transaction 4477 to 21970:21980 [ 704.146609][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 704.157196][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000000000000000, 0x0, 0x0}) 16:26:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/102, 0x66}], 0x2, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/17, 0x11}], 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:14 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 704.283723][T22004] binder: 22003:22004 got new transaction with bad transaction stack, transaction 4481 has target 22003:0 [ 704.345131][T22004] binder: 22003:22004 ioctl c0306201 20000040 returned -14 [ 704.364223][T22011] binder_alloc: binder_alloc_mmap_handler: 22003 20001000-20004000 already mapped failed -16 [ 704.375535][T22004] binder: BINDER_SET_CONTEXT_MGR already set [ 704.386511][T22004] binder: 22003:22004 ioctl 40046207 0 returned -16 [ 704.414633][T22011] binder_alloc: 22003: binder_alloc_buf, no vma [ 704.421798][ T5] binder: send failed reply for transaction 4481 to 22003:22004 [ 704.438069][ T5] binder_release_work: 13 callbacks suppressed [ 704.438076][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 704.444708][ T5] binder: undelivered TRANSACTION_COMPLETE [ 704.458631][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 704.470748][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='eql\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000", @ANYRES32=0x0], &(0x7f0000000080)=0xfffffffffffffd97) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:14 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x6c00000000000000) 16:26:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x2, 0x40) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=0x0) write$P9_RGETLOCK(r0, &(0x7f00000004c0)={0x21, 0x37, 0x1, {0x0, 0x0, 0x6, r1, 0x3, 'fd\x00'}}, 0x21) r2 = getpgid(0xffffffffffffffff) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = syz_open_procfs(r2, &(0x7f00000000c0)='fd\x00') setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000500)={0x5, 0x1f, 0x1, 0x6, 0x9267, 0x3, 0x40, 0x3, 0x40, 0x7, 0x9}, 0xb) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x6000, 0xcc, &(0x7f00000001c0)=""/204}, {0x7000, 0x5d, &(0x7f0000000100)=""/93}, {0x3003, 0x23, &(0x7f00000002c0)=""/35}, {0x106000, 0x6e, &(0x7f0000000300)=""/110}]}) 16:26:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6800000000000000, 0x0, 0x0}) 16:26:14 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 704.828853][T22029] binder: 22020:22029 got new transaction with bad transaction stack, transaction 4485 has target 22020:0 16:26:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x7400000000000000) [ 704.894797][T22029] binder: 22020:22029 ioctl c0306201 20000040 returned -14 [ 704.907322][T22036] binder_alloc: binder_alloc_mmap_handler: 22020 20001000-20004000 already mapped failed -16 16:26:15 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000001c0)=""/100) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1, 0x0, 0x3, 0xfffffffffffffff8}, {0x4, 0x6aa1, 0x7, 0x1}, {0x6, 0x200, 0x2}]}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc8080, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, 0xfc2c}, 0x2) [ 704.938962][T22029] binder: BINDER_SET_CONTEXT_MGR already set [ 704.965219][T22029] binder: 22020:22029 ioctl 40046207 0 returned -16 16:26:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x7a00000000000000) 16:26:15 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x8, 0x84, 0x1000, 0x7, 0x6, 0x82, 0x4, 0xffff], 0x8, 0xecb9, 0xfff, 0x4, 0xe41b, 0x5, {0x100, 0x6, 0xfff, 0x400, 0x9, 0x6, 0xfffffffffffffffe, 0x7, 0x5c, 0xf0, 0x3, 0x82, 0xffffffff, 0x3, "54e9ac7682f3ff79d8dae319767aa2877241b44b7d240521a42e6364a87dff6c"}}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x3) read(r3, &(0x7f0000000180)=""/14, 0xe) [ 705.035387][T22036] binder_alloc: 22020: binder_alloc_buf, no vma [ 705.054150][ T5] binder: send failed reply for transaction 4485 to 22020:22029 [ 705.098832][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 705.128075][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c00000000000000, 0x0, 0x0}) 16:26:15 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x4000002, 0x10001) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xd}], 0x1}, 0x0) lseek(r0, 0x0, 0x2) [ 705.160915][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 705.199744][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 705.227513][T22069] binder: 22067:22069 got new transaction with bad transaction stack, transaction 4489 has target 22067:0 16:26:15 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x8100000000000000) [ 705.273771][T22069] binder_transaction: 9 callbacks suppressed [ 705.273788][T22069] binder: 22067:22069 transaction failed 29201/-71, size 0-0 line 3044 [ 705.284400][T22069] binder: 22067:22069 ioctl c0306201 20000040 returned -14 [ 705.346750][T22084] binder_alloc: binder_alloc_mmap_handler: 22067 20001000-20004000 already mapped failed -16 16:26:15 executing program 4: getpgid(0xffffffffffffffff) time(&(0x7f0000000100)) socket$inet(0x10, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x6001, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x8001007, 0x2a, 0x3}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x643}], 0x1}, 0x0) 16:26:15 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 705.388149][T22069] binder: BINDER_SET_CONTEXT_MGR already set [ 705.395746][T22069] binder: 22067:22069 ioctl 40046207 0 returned -16 [ 705.407857][T22084] binder_alloc: 22067: binder_alloc_buf, no vma [ 705.415408][T22084] binder: 22067:22084 transaction failed 29189/-3, size 0-0 line 3147 16:26:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x88a8ffff00000000) 16:26:15 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 705.467735][T22069] binder_alloc: 22067: binder_alloc_buf, no vma [ 705.467841][T13392] binder: release 22067:22069 transaction 4489 out, still active [ 705.518570][T13392] binder: undelivered TRANSACTION_COMPLETE [ 705.528125][T22069] binder: 22067:22069 transaction failed 29189/-3, size 0-0 line 3147 [ 705.553923][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 705.575845][T13392] binder: send failed reply for transaction 4489, target dead [ 705.585290][T22069] binder: 22067:22069 ioctl c0306201 20000040 returned -14 [ 705.613959][T13392] binder: undelivered TRANSACTION_ERROR: 29189 16:26:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x9effffff00000000) [ 705.621981][T13392] binder: undelivered TRANSACTION_ERROR: 29189 16:26:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) write$P9_RSTAT(r2, &(0x7f0000000080)={0x53, 0x7d, 0x2, {0x0, 0x4c, 0x5, 0x7f, {0x12, 0x3, 0x2}, 0x1100000, 0x55, 0x9a1, 0x400, 0x2, ':#', 0x17, '\'@nodev.eth0bdevselinux'}}, 0x53) 16:26:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) ptrace$setregs(0xf, r0, 0x208d, &(0x7f00000000c0)="03d98e563cdad6e027c6e582bbaff9408d1a884c2f0639bd3a3889d3d5b0fe8d0a2af55c") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7400000000000000, 0x0, 0x0}) 16:26:16 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:16 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xc00e000000000000) [ 705.976884][T22122] binder: 22120:22122 got new transaction with bad transaction stack, transaction 4494 has target 22120:0 [ 706.031706][T22122] binder: 22120:22122 transaction failed 29201/-71, size 0-0 line 3044 [ 706.044429][T22122] binder: 22120:22122 ioctl c0306201 20000040 returned -14 [ 706.057418][T22133] binder_alloc: binder_alloc_mmap_handler: 22120 20001000-20004000 already mapped failed -16 [ 706.067905][T22122] binder: BINDER_SET_CONTEXT_MGR already set 16:26:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xf0ffffff00000000) [ 706.079392][T22122] binder: 22120:22122 ioctl 40046207 0 returned -16 [ 706.087183][T22133] binder: 22120:22133 transaction failed 29189/-3, size 0-0 line 3147 [ 706.108158][T13392] binder: release 22120:22122 transaction 4494 out, still active 16:26:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8000, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x48) 16:26:16 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 706.133507][T13392] binder: undelivered TRANSACTION_COMPLETE [ 706.153542][T13392] binder: undelivered TRANSACTION_ERROR: 29201 16:26:16 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a00000000000000, 0x0, 0x0}) 16:26:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xffffff7f00000000) [ 706.195356][T13392] binder: send failed reply for transaction 4494, target dead [ 706.273712][T22155] binder: 22154:22155 got new transaction with bad transaction stack, transaction 4498 has target 22154:0 [ 706.321389][T22155] binder: 22154:22155 transaction failed 29201/-71, size 0-0 line 3044 [ 706.341176][T22155] binder: 22154:22155 ioctl c0306201 20000040 returned -14 [ 706.354387][T22164] binder_alloc: binder_alloc_mmap_handler: 22154 20001000-20004000 already mapped failed -16 [ 706.367798][T22155] binder: BINDER_SET_CONTEXT_MGR already set [ 706.376565][T22155] binder: 22154:22155 ioctl 40046207 0 returned -16 [ 706.385978][T22164] binder: 22154:22164 transaction failed 29189/-3, size 0-0 line 3147 [ 706.408664][ T5] binder: send failed reply for transaction 4498 to 22154:22155 [ 706.429169][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4000000000, @dev={0xfe, 0x80, [], 0x15}, 0x5}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x16}, 0x9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xfffffffffffffcd2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x8000f, 0x2000000000000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x458}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r2, 0x20000000000000}, 0x8) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x1}}, 0x10) 16:26:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0xfffffffffffff000) 16:26:17 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:17 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff00000000, 0x0, 0x0}) 16:26:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 706.949176][T22179] binder: 22178:22179 got new transaction with bad transaction stack, transaction 4502 has target 22178:0 [ 706.974777][T22179] binder: 22178:22179 transaction failed 29201/-71, size 0-0 line 3044 16:26:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x7f}, 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x26000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) 16:26:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000240)={0x7, 0x0, 0x29, "3a0d469f868aca27374716fe96bf36ad1ceefc321df47de678f350633e722d81373bae84b464810c27b5c82bddddb48e37a53566cecaf541f629d56c", 0x3c, "cde4d92f634a8bb010801be5b7d306e1a09c595669f67be0e272b5d4fb379b28fb209fa2295beaa860e3cf3dc97730b22f4b263c4314e3495c474ec2", 0x80}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="37000000be3aad6083357b690e966cd414220c096fc219cd1f6432000000000000ffff3f7e3c13e45b1e9abf5f00001446c4bcb6709b275ddb9e218eba4d857e81f1"], &(0x7f0000000100)=0x3f) getpgid(0xffffffffffffffff) r2 = socket$inet(0x10, 0x121d7b320dc04d93, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 707.013372][T22179] binder: 22178:22179 ioctl c0306201 20000040 returned -14 [ 707.049280][T22192] binder_alloc: binder_alloc_mmap_handler: 22178 20001000-20004000 already mapped failed -16 16:26:17 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x100, 0x8001}, {0xfffffffffffffffb, 0x200}], r0}, 0x18, 0x1) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x1d6, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:17 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 707.088516][ C0] net_ratelimit: 26 callbacks suppressed [ 707.088523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.100016][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 707.107338][T22179] binder: BINDER_SET_CONTEXT_MGR already set [ 707.114641][T22179] binder: 22178:22179 ioctl 40046207 0 returned -16 16:26:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74653dcb00000000000000000000000000000000000002000000000000000000000000000000000034450000000001000000000000000000000000000000000000f2ab0000fe7593f23384175673c4779724bb37ffffffff00000000e41819a6796026f6ccf8eb2a8215e92777e0"], 0x48) r2 = syz_open_procfs(r0, &(0x7f0000000100)='net/connector\x00') write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14, 0x11, 0x1, {0x44, 0x0, 0x4}}, 0x14) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x141000) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x7) [ 707.168542][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.174386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 707.198051][T22207] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 707.198059][T22207] binder_alloc: 22178: binder_alloc_buf, no vma [ 707.248545][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 707.254588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 707.296731][T13392] binder: release 22178:22179 transaction 4502 out, still active [ 707.314728][T22207] binder: 22178:22207 transaction failed 29189/-3, size 0-0 line 3147 [ 707.328582][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.328649][T13392] binder: undelivered TRANSACTION_COMPLETE [ 707.334394][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETLED(r0, 0x4b32, 0x8) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:17 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0xf, &(0x7f00000000c0)='securitycpuset\x00', 0xffffffffffffffff}, 0x30) r2 = getpgid(r1) r3 = socket$inet(0x10, 0x2, 0x0) ptrace$getregs(0xe, r2, 0x6, &(0x7f00000001c0)=""/247) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x80000001, 0x400) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000300)={0x9a0000, 0x5, 0x4d1c, [], &(0x7f00000002c0)={0xb90bff, 0x4, [], @value=0x40}}) [ 707.345995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.351791][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 707.391002][T13392] binder: send failed reply for transaction 4502, target dead 16:26:17 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) 16:26:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x6, 0x7ff, 0x100000001, 0x7fffffff, 0x0, 0x3, 0x8000, 0x1, 0x1, 0xf5f, 0x3, 0x2, 0x1, 0x8001, 0x2, 0x4, 0xfffffffffffffffc, 0x9, 0x400, 0x1, 0xeef, 0x0, 0xf8c7, 0x1, 0x0, 0x4, 0x4, 0x5, 0x2, 0x1000, 0x7, 0x5e, 0x0, 0x6c, 0x8, 0x100000000, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000, 0x1000}, 0x250, 0x4, 0x80000001, 0x6, 0x10000, 0x400, 0x400}, r0, 0x1, 0xffffffffffffffff, 0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x103000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000001c0)=""/216) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 707.505412][T22237] binder: 22235:22237 got new transaction with bad transaction stack, transaction 4506 has target 22235:0 [ 707.577890][T22237] binder: 22235:22237 transaction failed 29201/-71, size 0-0 line 3044 [ 707.590127][T22243] QAT: Invalid ioctl [ 707.596810][T22244] binder_alloc: binder_alloc_mmap_handler: 22235 20001000-20004000 already mapped failed -16 [ 707.609542][T22246] QAT: Invalid ioctl [ 707.615544][T22237] binder: BINDER_SET_CONTEXT_MGR already set [ 707.631041][T22237] binder: 22235:22237 ioctl 40046207 0 returned -16 [ 707.639539][T22244] binder_alloc: 22235: binder_alloc_buf, no vma [ 707.661161][T13392] binder: send failed reply for transaction 4506 to 22235:22237 [ 707.675502][T13392] binder: undelivered TRANSACTION_COMPLETE 16:26:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="00fffffff0797a24360000b4784bab00001cf8229470e4dc89", @ANYRES32=0x0], &(0x7f00000000c0)=0xffffffffffffff52) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r1, 0x80000000}, &(0x7f0000000080)=0x8) 16:26:18 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x80040) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000300)=[{}], 0x1, 0x9, &(0x7f0000000340)={0x8}, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000480)=0x1f) getpgrp(0xffffffffffffffff) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000004c0)=0x7) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000001c0)={0x9, @raw_data="d6482a22c4d609caf180e16a1f3e5215d14ca0987e955c51a99b725503f8d86cf1e8c44bbf56972ace2a895f3334afde56f63c571d896884076dd430481d42e6f5166b14e92623f764f4215a79e9a6aa1990cd9c82c1f7c1519267c8bcec5b3b16baf7b9a1e6b6b6be43582f23aa8cb1f1b734865e454834377a25af954d647dba36da5294bec79481c8b4df499dd86f7a86f4c1034740db189157143a0e8cfc2fa6f59a02b7f99fdff2a777312bf372f8a4314d32fb103def6cd6dc714cb9b49ce3a686c75793cb"}) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000380)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 16:26:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) dup3(r0, r0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x80) 16:26:18 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3, 0x0}) [ 707.940185][T22261] binder: 22252:22261 got new transaction with bad transaction stack, transaction 4510 has target 22252:0 16:26:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x240000, 0x20) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080}) getpgid(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000001c0)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 708.005401][T22270] binder_alloc: binder_alloc_mmap_handler: 22252 20001000-20004000 already mapped failed -16 [ 708.031229][T22261] binder: BINDER_SET_CONTEXT_MGR already set [ 708.044331][T22261] binder: 22252:22261 ioctl 40046207 0 returned -16 16:26:18 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 708.068612][T22270] binder_alloc: 22252: binder_alloc_buf, no vma [ 708.075469][T13392] binder: release 22252:22261 transaction 4510 out, still active [ 708.092276][T13392] binder: undelivered TRANSACTION_COMPLETE 16:26:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xffffffffffffffce}], 0x1, 0x0, 0xffffffffffffff19}, 0x14) 16:26:18 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4, 0x0}) [ 708.127720][T13392] binder: send failed reply for transaction 4510, target dead 16:26:18 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0xc880, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f00000001c0)={{0x3, @name="bde7b78375473f2631552c64bfe3d625de3b1e6542ef7050fe328ccfc442d714"}, 0x8, 0x0, 0x10001}) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x1e11, 0x0, 0x0, 0xd4f, 0x0, @perf_bp={0x0}, 0xfffffffffffffffe}, 0x0, 0x5, r0, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 708.205391][T22286] binder: 22285:22286 got new transaction with bad transaction stack, transaction 4514 has target 22285:0 [ 708.275142][T22296] binder_alloc: binder_alloc_mmap_handler: 22285 20001000-20004000 already mapped failed -16 [ 708.319684][T22286] binder: BINDER_SET_CONTEXT_MGR already set [ 708.334243][T22286] binder: 22285:22286 ioctl 40046207 0 returned -16 [ 708.342036][T22302] binder_alloc: 22285: binder_alloc_buf, no vma [ 708.348694][ T5] binder: release 22285:22286 transaction 4514 out, still active [ 708.355685][T22286] binder_alloc: 22285: binder_alloc_buf, no vma [ 708.365421][ T5] binder: undelivered TRANSACTION_COMPLETE [ 708.377781][ T5] binder: send failed reply for transaction 4514, target dead 16:26:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="000000e6f0fa040c49861066a778839836b09edeb2b76fed8664766d5e76017c3317a4c0b7cd5e9793ed5d44c9cced259496eefb24294280a3998ac32145fda34301f536070f4a68f79dd6d9efc5d7b18431727c551a670000000000000000000000", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0x7}, &(0x7f0000000140)=0x8) 16:26:18 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) getpgid(r0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:18 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5, 0x0}) [ 708.819442][T22313] binder: 22311:22313 got new transaction with bad transaction stack, transaction 4519 has target 22311:0 [ 708.836131][T22318] binder_alloc: binder_alloc_mmap_handler: 22311 20001000-20004000 already mapped failed -16 [ 708.859687][T22315] __nla_parse: 64 callbacks suppressed [ 708.859697][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 708.875274][T22318] binder_alloc: 22311: binder_alloc_buf, no vma [ 708.876089][T22313] binder: BINDER_SET_CONTEXT_MGR already set [ 708.889689][T22316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 708.890881][T22313] binder: 22311:22313 ioctl 40046207 0 returned -16 [ 708.902904][ T5] binder: release 22311:22313 transaction 4519 out, still active [ 708.914405][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 708.924503][ T5] binder: undelivered TRANSACTION_COMPLETE [ 708.935517][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 708.946532][ T5] binder: send failed reply for transaction 4519, target dead 16:26:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6, 0x0}) 16:26:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x5, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) [ 708.961268][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15da, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0xfffffffffffffffd) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:19 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 708.999690][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 709.027148][T22330] binder: 22325:22330 got new transaction with bad transaction stack, transaction 4523 has target 22325:0 16:26:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 709.071125][T22333] binder_alloc: binder_alloc_mmap_handler: 22325 20001000-20004000 already mapped failed -16 [ 709.083662][T22330] binder: BINDER_SET_CONTEXT_MGR already set [ 709.096892][T22330] binder: 22325:22330 ioctl 40046207 0 returned -16 16:26:19 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 709.123010][T22337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 709.140481][T22333] binder_alloc: 22325: binder_alloc_buf, no vma [ 709.146943][T13392] binder: send failed reply for transaction 4523 to 22325:22330 [ 709.158963][T13392] binder: undelivered TRANSACTION_COMPLETE [ 709.181851][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 709.226103][T22347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 709.284856][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:26:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0100006b0a9ce100000000000000000000000000", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7, 0x0}) 16:26:19 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x1, 0x200001) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:19 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:19 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r4, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'yam0\x00', r5}) 16:26:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x400006, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x2, 0x4, 0x7) arch_prctl$ARCH_SET_CPUID(0x1012, 0x100000000) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f00000000c0)=""/187, &(0x7f00000001c0)=0xbb) r2 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x3, 0x3}, 0x10) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 709.700271][T22367] binder: 22357:22367 got new transaction with bad transaction stack, transaction 4527 has target 22357:0 16:26:19 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 709.752467][T22375] binder_alloc: binder_alloc_mmap_handler: 22357 20001000-20004000 already mapped failed -16 [ 709.788825][T22367] binder: BINDER_SET_CONTEXT_MGR already set [ 709.794896][T22367] binder: 22357:22367 ioctl 40046207 0 returned -16 16:26:20 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:20 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x9, 0x7, "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", 0x61, 0x5, 0x8, 0x1f, 0x1, 0x40, 0x5c}, r1}}, 0x120) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 709.930938][T22397] binder_alloc: 22357: binder_alloc_buf, no vma 16:26:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r1 = dup3(r0, r0, 0x80000) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x2, 0x3, "7fbed3baf44653d4e87dec4eb2f7e1cbafc831a279e798775544217662deb455706dd33904aac169bdb6632f368f74c8b917af5c25f1c5f7001605ac0837fa423ca4a5d16badc5ff41953059b109"}, 0x5e) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 709.976433][T22367] binder_alloc: 22357: binder_alloc_buf, no vma [ 709.996880][T13392] binder: release 22357:22367 transaction 4527 out, still active [ 710.048642][T13392] binder: undelivered TRANSACTION_COMPLETE [ 710.087890][T13392] binder_release_work: 19 callbacks suppressed [ 710.087895][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.132002][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.138213][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.165188][T13392] binder: send failed reply for transaction 4527, target dead 16:26:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000100)={&(0x7f0000000080)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/248, 0xf8}, {&(0x7f0000001300)=""/123, 0x7b}], 0x3, &(0x7f0000001380)=""/228, 0xe4}, 0x12002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa, 0x0}) 16:26:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40040, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000300)=0x7) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)) r2 = getpgrp(0x0) getpgid(r2) r3 = socket$inet(0x10, 0x2, 0x0) getsockname(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000140)=0x80) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000001c0)={0x1, 0x52, 0x6, 0x9, 0x20}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:20 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:20 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:20 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x2, 0x480) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x0, 0x0, 0x40, &(0x7f00000001c0)='bcsh0\x00', 0x4221eb3f, 0x7}) r3 = fcntl$getown(r0, 0x9) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r3) getpgrp(0xffffffffffffffff) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x80) write$FUSE_INIT(r5, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x1d, 0x3, 0x40, 0x9, 0xffffffffffff823d, 0x100000000, 0x4}}, 0x50) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000003500)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000003600)=0xe8) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000003000)={'nr0\x00', {0x2, 0x4e20, @empty}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000009b80)={&(0x7f0000008d80)='./file0\x00', r0}, 0x10) close(r1) getpeername$packet(r2, &(0x7f0000008dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008e00)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000009280)={@remote, 0x0}, &(0x7f00000092c0)=0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000008d40)={r1, &(0x7f0000008d00)="4bf0"}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000009a80)={{{@in6=@mcast1, @in=@empty}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000032c0)=0xe8) sendmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="12aadb3c14cf54c0383b9255307c4433464c3ca0b1baaf0511b54a70162e28cb9a29ea658c69bd7ee0b5ade4c7f463329e7e58554f4d584134ee9f77398f4ac6c1aa781f6ea4b0dacf0d95ae7e559b2bc553de12cd26320075bfd4f717cf178124c9c3250fdcc57c30203d1b40f3a19a27cc1efd4e18034cb474501e3028121a61f90255a9a30757e434bdd57b5e740a217135b5c26e38987cdd608ea5a602492f287a06764c6ee3953ea1a87458d24c8b591fab3db14a46ee2977b8f75f2cd23115fe980a706afb584c510033a3b73ac8bb50ca2445d40b", 0xd8}], 0x1, &(0x7f0000000500)=[{0x60, 0x0, 0x8, "a814b0950f56ad96a231d7516295a69bba33cb04df88d073b278177bd7dd9002213a25a6003b86ba8f34de945840e76b19115429b6b6b050137da67a4b5d03bff1cb26e7d3b6b89f936625fbd1cc61"}, {0x58, 0x117, 0xc6, "60c307c0e5711988f75ff818d5c47d6fda74fad84438e77884a9049356a79f70aa102033506f7875e4e3285056d190b34b3ae8ce7d0f93d718b975d544473d1fb882a3f0fa"}], 0xb8}, 0xfffffffffffff001}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="2eaa3279c9fbe91f7b97dd22b4524035c25c9bf719a2174fe7dafb91553521daeb4a4e4afcee4edc386866de53e7f95e0affb51de5a786a0465f9a74c8353b74b4bb2e6aea955b121cc578d25a7f3b228073fd12e8e5069a273e90651b6747ed5c8969fe069b3ed5efba477e8b2a631888216ca1c77aace7396b3a313f6331c26744ebbcf9b462bc66bd11f885811f4f1d4c24475f67c829987f1a1ff77ff54474833770eedbd1c9d015f2fa025b163825ea20563491cde5ae587b9f428691f7b88e5708c70b7bd1ad2a3075a09a47ec1fd61459083b38bce497e88723e4a3f05c", 0xe1}, {&(0x7f0000000240)=')\'', 0x2}, {&(0x7f00000006c0)="73c16d00b97ee664d2330a785055f86f23b90b3ba0515601fb454a0fa263d7a1e0c6e7122dbe6f8ba7c9a11d79d6b82d11455b77507d0689a06e681e4ba38c0fbcd212606db745a3af6f5d26c26a7efd7684a7d2f582212a29fd0436e9f43b14967dca9dda509c6eb710d80df2ec3f46da9af331ce8a5d93b528c081207e827787cd350c1db07716d68fdf4b757ed3149162bcd75d76ee72", 0x98}, {&(0x7f0000000780)="5311c19b10b02331906b3663d866ddf62c64afbb08b8be449c3dbbe80a6d17488c33729da02b03abd7f802afa979d2df859e71e01f7eab952cd9ac79cecc85da89ff95ac6e7fcc2d185a0268d448907843edb27b0c34e5c0a97f2ea02d07412d6a5c65ee7395e7fb04c95fef4e601cc5ce4f0f4dac501254d325b450b2c558d6126e4503b0b60a48519c635916e66d5ed206015cf076a44357eda2b948d0dfb119a222db4b83b8e5cc", 0xa9}, {&(0x7f0000000840)="3ad90fe6dd022eccdd658d62c6aba89f1321be03343f7ce05341bdc1c68a78251125eb4725d99b358ac21a60c34abb7e46a030dad4f61268d624fc4f4572044cb92fad4262986f665d7318226b2df79cc164208cce9952b63c7a6fb6a4d0bb81ee27c5b250dab207faab25ec66cbdfeb1e07d0c78b8876cb80808b19c4d85f3c5b077fff2e92cd9adb30911e121fe65f391378d97ac374619b67fc36c08f", 0x9e}], 0x5, &(0x7f0000000980)=[{0x60, 0x10e, 0x1, "1c6aadbf058a2ca5aa18391e2d6b42c9cf4ced514ea0953286fd6e8eb4df7bfa0ed37385d00aa19f18df629f4b14afea5dda3bd21b8c67df54f45c2b564ccfe3941ce76def346a4dd8af"}, {0x100, 0x11f, 0x8, "525f0772340bdcc96f12bdfb0edc390e57f8c73f9ed38d1c45910c71462b37548a37ec040c4df96118e07920566ffaea89b03c1650a92c8e82ba472510424e53aaaf3f791c7f739fc3788ded2797cc8d05257e222f86789022729b4b31c2474f39174f2dc02142ab26f1e6aaec2bfb9b4515c69d7875c2c6b6684da22fdfdeba77c7bda51b74bce74e35f3f284c7011fac144521a9669d3bc396fd35c8f3c34ff99788f2fd23d494367e64dc68e3c15f16d1f87f3bd94076c7adf5d08ab532eedb61b3d0f763c9a8fdb1d9b90499dad407d0262971398cd87daab84c466456a91380385e0e3577ee5c632ba7c1"}, {0xb8, 0x0, 0x4, "d14b686577e632221cc8e4e36ce195c50c3f07c8d28a93445241d29d5a3010a6285e601d17d4aa881da5a51851f2a6b3d19544d1ca1c3da5998ee7a20e559f96c571f7608db54100ece5a0b3bb93001a303c021705c15bf17685fbc332024b940061b267fd0e75cebcd202e4b0924c2438c186bc0934f686cb196b91ea82e8cc234b020c953451d4377b9f88b7d9390d8235aeedd309b4d4ccdf9ee1a16bba2eeb9bee22a0c6"}, {0x1010, 0x1, 0x5, "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"}, {0x78, 0x11d, 0xa86e, "85242ab9628a2dd86f68aa5f56265208ccd680b874669e7af9ccf659c9493093c6bcd018e25b08b980680a2d2e716509c67107f0aad324920ae9b30c3f4803b1826fc88c0aa0214e52af4dad5cf74cfffdf02286629a90839b998091bfb5ac23afb81b0840"}, {0xa8, 0x0, 0x8, "276ad9a1ff06a1623e6a9c4a3ed9cf858b4649ca40820d265c79d1e34b991cb6e22ab96d0c3080c8b3a7eb3c7da9d6661764bba50a66c141d02776b30bc1bda09f0347abfc7344a5830b46776e563d24b0537142a31b22b8ff7928975d0c61db80ebbcf857f9165a9cd8bbc43d28eee798067d13c2d7a802d9a63843b0269182b1eb633277e538c480bc819ea111cc22081b97f4b9"}, {0x110, 0x0, 0x80, "da4e8f015ea26fff0dcb6350982b25633cc3266a45129843dea14f08e9217b7f270fa4cd645acfda158d9a0f4b6c92fa047c9d588d06b94c89a332fef4a5ad4c163ef758f578135cb4283c6914e5d6d5c8ad7f166471d2f4a04beb509479c463c602b70fe0fac580a9293ee44c6166ad1d488cd2ed229ab57d1aca3b5eb8901de4460f19af90e9a03792036e076660448c658b6e164a9ecc2a43c3369ecd9d1420ce2c0dbada000372032d059763903edc9009d5a72bd57c3422033ec6f95a4d5d794c9ab1ca19950ba793e0b037d30ce5eb483e82f372fb75ffec489dbfac27ace438b6c648abf280f186fe101aaf2cfef2fd1a240d245916a2db356e"}, {0xa0, 0x0, 0x3, "c4244b460bdae86db321989a5334177088d16057563f0e0b9d7d5a21b651677f469c8a8fc9ae9ff5ec892e84591f2169592f5c79c962bde3cea96916684c0b1bc6f296729d6944eba4d2b19c632111570340342490e7c86b0b29dd948400ced8d7706f9917e1a95ec3f5f68dbe8727c355ce39299249127bd2cbb7e4ba94c398f5be4888047e489e0093cf66b6d8a5b9"}, {0x1010, 0x0, 0x3b, "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"}, {0xe8, 0x10f, 0x17c, "53d83c5ffbec0afa447bf97775f2c992f3f078aa9a03e772a77ff15e7d2191045fbd109961c87b98a5527e42d7dab38cc7920267a27d55264433aa05774a22cd37ae8c6945245bcf2846de6f76984f4409e89c239b9c573c0e7311035c745153a8f23ce32660726a0d67074fa609ea8028de3e8d820d1308ead2a12eed5ae1b6cfc862a482e32b9c7c1199139cbf1242da70e406a82f2da6f001490be8af81242a5c803b4e14f28834fb0b8c47aeb06f1bd893941d7ef6f52cf320796aa334a4c071cc3041e204ff160aa8a407c6f2bebe68830518a60e"}], 0x25f0}, 0x1}, {{&(0x7f0000002f80)=@caif=@dgm={0x25, 0x8, 0xffffffff}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003000)}, {&(0x7f0000003040)="330ff010035bf5b2ea7cb6bc5e618aaf23358cd35d6cc9a04028ee3cedbae0a1efe12868d88b4d25cfd922154abeb5db4591e19b5d7dbb15a510792afab47b715154306719c5606e2bcb8eea808ecec1ce363cba0fa4130b55df265e05fd7df51dd9ffb2e5b0cdc58c4db6338b85578474d294b404d4e264", 0x78}, {&(0x7f00000030c0)="2e7a9baf0900062a1c7af0e83b818c2f0cf655d7aba52599517aea86e134", 0x1e}, {&(0x7f0000003100)="f6ccd41cf4d23d391ae23963d496659fcdd318b46b01df3c98c39b5ddc5e013a3ea6e4cc7d8315ed438952294ba1bd1f68794fc7791b26f15dc492c123ff34adecf4d5461b29db1858ba80e9c59c1713e81c6ec49c", 0x55}, {&(0x7f0000003180)="42a33c5427e93de0b58f620b51c038f65e0d47cbdfd85c449e823e38cb1ac029105103e8c72d885cb76bbaf5da36a2adb40c5aa787aa09c60ac8f2884366d375af661c8e22228c5c", 0x48}, {&(0x7f0000003200)="79a4a3373d60a5921e7ffdeddc497738772cfb2aa9569fafa1a3350814016f588bc08045c1308df6ca9b4a3806d0dd5156327dd4ecbddff449be03c3a8fd1d7847fd1e6c979c767c615541523fc07efb6c199a68f39813963abac3630abf821d69ad0cc716a7a12fba8b391c8778c30382a95e176295e90a8041430cfeef12dd00508e9d7c93d5d10e6edfbb758b924ed70960a9765fae96ba319a48c609e9a12d05069e330566ae656351", 0xab}, {&(0x7f00000032c0)}], 0x7, &(0x7f0000003380)=[{0x38, 0x10b, 0x8000000000000, "2bf6dea8a3971476e9943e9e33d1ec61dab9be8b8d0f4de9e74243d76c200af40d9d16cb5f38"}, {0x20, 0x103, 0xfbd6, "7885b1b322644f2bb2cf"}, {0x98, 0x11d, 0x4, "619f893b3d4be1fe9dc60c8cd7fdb63a5e4fce34e0ef6b871d0b2d044b519a1e59f267768b1e7cc14d54a32efa2e36f3898626c1b07e40375be5ad770b05c322e1190d67b2f8bed9deb9c915578c2272cf6c4cf43cf04cc1490181b8f881c10649ade4988e43eb9feac7d6bbbaad8499b2982185f5b9205ca811fd1263af96cdf7779884469651d2"}, {0x10, 0x104, 0x1}, {0x10, 0x112, 0x8}, {0x50, 0x10c, 0x6, "1be19546539f58191d8b48e30aa1a7e35a63bfb970e6f9c6a27d580b28e87906a93edf62e088df30d71147709ca06d109246a63642a17a52d63b118de594"}], 0x160}, 0x8001}, {{&(0x7f0000003640)=@hci={0x1f, r6, 0x2}, 0x80, &(0x7f0000004840)=[{&(0x7f00000036c0)="90c88ec54155189d489da23794251ad4a3dc8f96a3ed517218bb8647461b7f083318c8a6b5aad23080f8b364fa09af88a2b5e1fc5090eeb339c1a70bd19513939927e6af3eaf11132c9d61101b1a6fa7760b1f5facb5c42cb41d47ebf35721689a25f70f5eae53f119046ce5acf864b18548ced2b969ffd64bec9d3094cfdc06ac6d9a909f74b5fc8e936f3f7cdf19ccd890f536ccceb40ca7b5e945271637fe83a4daaa6b67c1384b42531ab6ffba4d46d41c26291fa75ee5681888498fb0acfd", 0xc1}, {&(0x7f00000037c0)="e66819873f30f07d047306a91fb6505816f8a2e11db097ec18da006cf642282d5a96732571db1dd02456fcb2172bf2e3cb7d27e4044b07015d66c577c31fc13a3d65c6e30635c7e20607abb2ff2efb60b2a22fd25cd42ab1847d0d5d177a49b0a198fbef88e31abf866621fdfe3c5961d24606fe5c42032be9acbcd1ecf1e093cc0a59750f450a268555d0b438218885397aec5cf42b3a281da8f16c5eb06a6e2ee095b4983b3a5319f7a37203b97fe976d439726ddb52c188daf293e878d254f87a197d16834783de0cdae1cacf4fb39e0727aebb677229099137a5ee4a5f6183c10aa45969ffeac7e00fb9bf89ed888e03f50424ea2d1af171ba68d1e086b548ae14607e411129855bf25f43ca90c6cd6aaeafd81215331f55e9405d03435e8e27333e31fbe514108022ea833ca3cf6c7677086bc47a75e942e2449521cc99c726e0e69d753201c7ffe31d82eb073a41e7a3a545e6bea713dd18f3229ccf687145e9d6089e76a4035ab91eeafd0fd53925dcd006bad56b568919e89ef57948e5f2aca945b1e025fb2add59baed571f2fb831e69a59369be7a316617cc7e7c9da521835fa9662cf4e387c9549ed470e5c8053ae6f1f82806f99ffd78bcb5f35934805ba6b203f4dca38629548ca7523e5e72e533fbe8e1819f19f7309b07e8e62af1a534c1c788d437839aeb10eaa0b1748eebec1a154f242e848a9deb7994b37e2f40f0990d0d91255233fb1a0b23f1e4785604c1c72a6f962629fccdd5b303b83673d43485192133922c2d0523a102c4234dbf31b410d2a477ea58f5ee70e362daec24bbfdf3074a4902819b247f5b96e84c64fb6fd7b9077abe0b7d120eea35a6ee3d63664c21a198738a972f4e560132606869f8b8e7f04c7af61132a6a6bad4a4eac238afac2523b301391d845c50dd7b0f54db23d8cc1a1a0797b279584f59c371b613b3ca2935515907727996c0924740a2448e64c5c95940f929de8a6576fdc9289df08e79097fe13e52c327b9a4761fd6e4b29f987094f86295e412d3e5d3d9849e4136de9a5d8959235b7084f0c0f7e8745953635e5975f1c7cd9ecadfc86fafcf56ee9e55b4b635ea00f20715462ea5c5159b405e80cb884f5aaba38c49ce394a051b2d3442c6e1c90f937623122a4b5715a234bde100c30b4bed137e78e44f20609ed39003e2f7ce675122c32d3ad78d9d0a12e0c61089f6790a4cecf030860e083d682d6efab4898ed58520a46f5eb6a8418045ae43cedd1820c945258026cb49b0fa1ef4bec04e397e0e2b6b6122699743da497d152e02ba06ca6f37525274e7a3c6fdf248c80b6687c289be11dd9084e1abb8777b15fe098de56df2d1380c94b41057a7f911e67d70d8228759767f53592007936f38d2d122427438d13dd944753d6e1c33cde498dfa5f24f796cfe5ccb6844b229f7d5c1009208506a5e15694cdb3ca2e85a62ad8593f5b6ca67c7c6408e9bce717c3933458262bc08229a91b91179a31d62da7da91e98b035a71acb94252474dddedaaf3a952b57d3f1c43b4d35df9901eb73ccc06bff6a92f99e448f136e3dff5c8c81e58073b3c637d52ec26c56ebd01badf86d7292e1c207b06d9e53921a3cc0778d370c08f4d8e477d7dbd3ac62b3776fefec5416f45734379dee28d477ea9d31319c48fa50175f2560d18cdccb0849ad6e40ef06c432b23a2def1e85096f5ac6e59c3ea0c7118819c2368a1f430eaa64440ac055c66cc9e0f485008b5db93bc89d28558d0d4992261b788ce318dc7ccd3f21ffbd839dac51b2109f5775a3f6473ce8397964058d20b885f0b9adb99c716c8192e958f2beec8a2f06247d9c0228ed030c81ceef6858564f59fe8cfcc44f50ece9f88292fce53a2a39b66215b346fd519ee26244d3e851aa3e82adddf12a4b243b561340485b27ae9b8f458ad9b90287a0246f0a52408ce2d4d82463d96d8e98fad692598b5d606f20fd12742f7659abe9bc512b0c0ccb8ac296690c05d00b035a2e3340300a2a1c99c4ad35bec34cf35adcfb338794c6718e3cc76fb90492545f662527a4fc3f83c252ed550ec2a7bb3ddf475a30ba67961c8d7fcde8d9ac7abcd31015d8205b427c286301ebc2951d5ff5d5ed2803a1eea3f53a1e0765369b53b0ee3fb32969e5b1f9f836ef36c3f991371fe60293f5790e81904daf5cdeff61e79b41a61212643e6834c3b7a5ff51ef95ba90ff53909a86be2d9f827fa9c53593eb355ebbb17646ed5db5df9561a36112d9b06c416a679845ea3ffa4c26a343ee5bdf3320a3b9eee0ac95a3b22aed3c8bb07155b1a7f2db4e679ffd874e968d66eed6d228910b8e9349909d0ca3010bb6dec4f41d1671d8d41a755e9d1f7834a9f1f845c7a0f0af477437d6a50aa03eb20225047b575fec22c698b97b83b8f2b57ff4c1dc13e9dfbc3c13fc4aea12d8133c6cfcc3be9bdabe33090307201a4e2f914f0a9e48cb3836ca40357610b873a1ac049da00c3eeeeedbda71cbaee924444d0a24c5f1dac31befd74f39017f85a3d83d55140ae6b28d0241d44d77b3006569c2203083140e17e0fb0484f90da02909136b78489c838176ef27fbb0cfa7b5f27471e3d8a125d46759581fa80f4232ed7d5b7a343e595fc9da830ec76160f4a086121e5209cf1de9e0773724502cb7f3e90ffba6a4739caa49071043cdc6858e7f5ddfd0ae2748ea79c8ea9a5b284c46473f2867eb0a0b900deffdf98d098e49cbba2e4740383af9cdcc4bfebe6a96eed5e09771df735d25655221d945f641f25a803c19f2ef31bda051bc0323ed61cfc2354ecef8b1f42005817ae3e4e96a6cb7ba6d32ef98fd22527f5ca319d6af4aad5bd6291b619142c01040796ae6a6f1ec0eb7cc95f39c149a9dcecf09c62f77d4aeeb3780078a8b98ebd19d60e5bacb7d2984a7cd39afd211048bf8b59247bf9a7c97d6afa18dd5d9d4b0ffa5d0b04ed133c6cac4c4e68362a1bd0900b57da32a8823c28ca66fe26ebe8ebafbb030729096c56ff6385186a901470858a870eab31a1797608b5f5b894d46369647b7f999fb125fe51ca85051ef0662335371167dc2fe7a675c44e87ce972afcfef0381a502e09ebed867c17fa351916aafd34ea61d2495ef86127af409f2ff429cc67611f6845150c02fe2c9278d1f15d1b6c3580c282ee53156d1ab279052808adc3891fac65a4d8bfb94cd12247bef9bc83f60d4c0ef0bc3a36270ff9ed4d7b3d8a78064fcc6d862d5c919752ae0b81ce8dbf6575617a8b8ca34ce061177c1cf361449b0b2d5074c33ae77e3d5f465742217c840e820828b7cb8e518249646d52396ca38b5530ee66bce0b4fe57973577cb4ec714ff5b9a390c1052e50a63d450287c7e089fe9598864731a7b00e409f886dd7b491ac22733a936af688fa08ce02331af3ad2ba5787c4a601e3643d6cf40cb551243bee3669397784d9fd609f945f59861abaf903bc3ae308c9171f202cc80ed1f471ee80e9232448e6ab2f26f505950c46f2e54fd6002e22b3e531bfa80bf760d9d38d4ed6a68f9d97b5ad5ab50262127ecc6463e1bc09a85b1eb8adcc12367ba62b154592c0974bb1ba1856dd593f99f2c011746bd613eccee4d4f7ea2ae8827d6dc3a25884b2b4b5e60d6fa1f435c22615906ea766a868a094555238f0859887fab86fb6c492ff2c7badddfd0d9d22573c7b97fadcf2841bb4e7cf61fc0f29051d0c4a0293bee5bc940502a4958c3943dd5e955c82b5ec3fd5a7c6cbce726b31809f610242f23133510f3fb5b05975c5c6ee5d2554b97e6ef3e8c507dacbfa2ca4ccd235e461f211dec24870e120f1bdd0873d9f9f6393556908b879c608dbc342846002e325ccf478d3222756d17a28f3d4739954b439b86c35b634a1373685bcfb9b458e9403851c49ad3e42aaa986d82457d4dcc58003baeae56b1cde91fa244229b1688aa1d3581da9e5e662648591189bc1a9bacc64c765168bc8ba11e250b8739b1a17b31cc30da05e4b4951c89379c6a185172b85a64428dcd674f8451568a5dbc118226ec99d0216c11032fe2cd378290295b446ea746a61f41be93148f8b6ce21ebec7169302459da035ef672a339a6932a1093c716d48f64fb029bbe69ea38a8631704bbf19a2710697e9882f5639ce9c02f907aa85161323467f8ceeea528b4a63cc8d3603bff747d57505d92338f16995f49a8143914bea934f0186ac149aff2489eb93d59e1f645107aac9c0cc476fda1cdd881cca905d11b95eb1b081dd0031cc859f816da655071093f14825feb907868c2883dbaf493cee4740e8d914b619e7d64597f45c5a3f84bf428ff63957153b9f2784a71f3b856d6741202bee5f2a17893ed5a1b20d40004c8a08f73ca3ccb984e82b6ab56ac232455e2506c3022aee03300f92b3ee9f2c5aa784961e56a744126766a144d3db65d13716638c04e466f5f4152c3a08d0daa42bc648de20ebad045601a4f425d81ccba15fbbe5948e0f7a037b7c8c52722172b2c1051e11104ac590e298bada9f07951f1ab272fe8edab3e57a65ffe558ba47465e8821b38c1f0b0a2c2380e9e83745ca794c64dfb56f44eaab9cfa0f8ed124fadc643fe9b311d457f0927546276911a0e9e4fb6a731f3dd18377c027b97e28448415cd64f7210b11f00f0a5607d16d6124967c1dda1562a0bf91fdae6519f6bb2ad2df5dfb608861dd3464da1663bd0542be2896165cc8c14a0a1436ee14aaae8ac56731eaa0dae4a22fb535759bdff63e61e08cec2e7e1fbc1f956ff32fb49adb62c32b02669cb186c1609cfe41607d42ab1ec863dcc5fcf5b5177b2c24876ae3310f28db20ed475cc1a7db26f5e63b6587ea4952a7ddee6bf65989425154580b680d584cd873bc9138e3cbd6d377fd008d26a037fcd495c25eb9be0a71d4dc91baebde42fd720a8b99a7be886d49d2a340a6d07a92a20d5fc9c3c6d94f617964e28f15d8e1d0a233a1dcba293ab7c3ae66fa7159fed0fdfa71a91d2fbf8867daa8810e638ab9c2f7a6ab0697366d02a70f50212184571ed1e746efcb0daa809a1600121274a6a641fb7c80fd669092cfb5c1f3d7d7046e0fec98b5e1c12d7dd18a1df2b2f3e4e58bea5725e03cc65b2057c5a90e70306c424884bc56099d282c3d1ae803684701fb5b68c25e3a709d63e028dd02e8bc24a5e32b9021bd83e0638bf23403f2f45a9414f09ce88375b786d1802930546fc2e91edee7eb638fff22a23bb6f2d780095921612bcb97bf796ede6a38365008734f451782f8217b0c931ed3cde45a643b3717329523eba8eb301dbfc04538f19726b59278893c99001b7161827d8ef8b3a243efabd394e0b1354a770d2542f55c2ebff45edbabfd88d8bc780abc2f9fc386a55c3814c4cea32a5d971fd917603438e79bf3c0de7cbb9ac8c2dc403c8e833262d12f1700d823dd0ef5b571576f52334bfb0b5222617d070faf8515bc2f05007522c02f03721752ccf49111f0c5786d4c0200a408714a70fdbcccda0992307b4c9e8c8db36ac1bea84af4fd7608f693e909cdec44f59b70333e244d9b5a89691abd41f3deb2c6ae8c221890ccc44e54a84bdeb18331f08cfe037aca1b3901f2ae444483bb69ce51132f17d570f73c18ee81544b70228aec21f97caec3019f44bfe215c458aebdb7b1e7479aba4769f05e825ec9ab469c1c3f368af122804e68ce80c97e7f67fe9805cab42a5b6d64ba0bdd31fd27fcfc1942a2c3d5990f8685128bdb2253990e05ff5cb00780b56212406356a9f991505e162bda1d4b11ebc", 0x1000}, {&(0x7f00000047c0)="4510ab1200c41993d7ef239de4d0629aa6e888a3d165c24de97520992f41ff6244619e60fd3f1710983e6ba2986a992527fb77b5cbfd3cb581bcbb3bd1f08529937011b1859c12eee4131287417b22c599a3833f4e7beba5d69a42c5af21079f73", 0x61}], 0x3}, 0x80}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000004880)="1d0af03215c9450bc8ed50c75a24028abde3c1b77ee524852a711fb0a777b4a775a9a5e10d395fb7bfb32702c72e28771b0ef9ecc1d967b14ff0c656af7b772704003d348491239a9e5eb4a9f04eb7ef0fb6ae23f62dd6dac5876ef50f5795d3", 0x60}, {&(0x7f0000004900)="d0e6e9aa0d3bccd9baa54b6861b3798c9bca15bca838ad913ee1c4edbac9573fc9d502c2ce9cd411a6bcbfc7944d5873252d4c17e1de661130ee2489160592f40fa1acc916dd416bc67a5ec223ca20d4f5f39cf878d694a219cae2852f86ed1d03392bebc5c0c3d2923aa30ded2d1a7173e5aa5aa56f3947f7c0ffca4aafc1377b3ccb5e11cad7f1adfb45ad6f8e1436a726c0103dd743bb4d8f66f96fd1bcc2995f9eec4f0c74cd22a46f9dfa8c1ffa28538af51455d90c5d1fe0f9c2abc82448cb25", 0xc3}, {&(0x7f0000004a00)="f812b9d3af2c7e903e84db8d2923e4660f8b8892306db914f9d3484679dd9a9393c97bfe460c23fb243e2961ee7ae6bc276b80eed5993badfacfe142fefdb712722821852e817a18c3a37a6ccbfadcfeb9", 0x51}, {&(0x7f0000004a80)="66da5176f8318ec378d8db40029ac157d610ebdc259dcab5b17ee043157fb51c5cc4afba39f3288eef100b4a8e79", 0x2e}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="aa0f3fb99bce85ab00e58bf601861f4b009a3708eeb8aa6e54399000956269d6dd08ea6314ccd2743f62e722841efe6133eab522948e0fbd2b157a9bdc0af28a6651c1aa45940d4132df79a26942", 0x4e}, {&(0x7f0000005b40)="68ac468e2292b438c05ad3dae8d60f1370c1ce03ba1f6fac0c3d944bc10ecca78d445597d2500fb1f0cdf79b126eac5375f7710d4d760856bceca5eab63bb0436a9ad4b12a062781a07b96c77fa768a1b20f8b76f700361352e8b91fe2e005c5c8e25ff081328ed15aef4c1b29259362f0c736cc32ac0770eda5bd5938f0d221e62832eb52f9eb0cf130b0855e9deafe66291a9664f5f601892369db9206458b4f08d1b06defc18a52d11684b7950a86ad0e9373f74fe2fbf545c92a1f", 0xbd}], 0x7, &(0x7f0000005c80)=[{0xe8, 0x10b, 0x8001, "be915ba78a333525c4d3974b01ac3e94e92b52f3e1f12361df180af274d2afd94cd893a3b5dece54663cb41a7328ba41616477e92cd82632a6e651eb5389a982c9b20c7f5b901f99b55cd4b830430c37b39d24cd7a0adb3776895ac1494b1833300a6e5d35211411c00b5f5fb1a05940a71df30739253aaef18a3ef22c2253734fa201a3b55d366f2d3b8a33139235d2cf8157438bd99ee736122f96549e902b4164a6927c55340eec98d3b097e7993dad54511b265b7b28bb35e09b9a3dbbf5eca4843b383a3fd2d9150b61edf21778d0d5971e0e"}, {0x10, 0x11f, 0x7f}, {0x100, 0x109, 0x3, "9f3c9b337244a984fb48eb506cf0dd504ce055ce2290966ec196c3438771001b05e91d3eabb83d9b1555a859743213046ab149e0b4eec4dce3243bcee0438d3a5a1cc0d7407983732b3bfbcedb8c4e2fba5290b221f86c92c1002b9151d0de7faa09e8fd0c1992990e5260cb28f2c144a1991c7302d6646eef0448fe9924316e9d522f6ca248eb43a99fcfc88a742c3b364a99a75a59facf8042fecb71d1a6c4bdb683e1bf0b61a3c591c0f0c3f46d660fbba5916bb34da7a1a15681dba39132dcec4f304e20c0aacce13da784a164df35501b01a4911dcc8876313d365787e2a5ac2854c7a5d20ff1fce03d"}], 0x1f8}, 0x2}, {{&(0x7f0000005e80)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000005f00)="609842c69f9c242b6c312c3bc534898711ffb7329308c8612f96620cdf502df5f2c059959aa985d128ef08b8c859138fae4f78a2b1a16486083d12e15732794a9f5bfd567ddffcb78f6c04f7958d5114fd583315a4be12b1ca5dee8817e7238adecad1d1185ad9b284fda7060fca7b8568c242c6b43e3c648f87404fb85de1e9abccd531562ecdeb1055f4f9c64d080e3b726bd30aba76e6d22180173faae654ea3bb32f6d9d9ac283d4337f2d756794ea1efa7a298e6fc3023c502bfb59226578210700a519ace0730b758f851e2afb18cb27bcc562e75aad657034d16ad7409c5925faa5865244233acacbcbbe13b5246a58", 0xf3}, {&(0x7f0000006000)="48adcc0924dc413c2c8714501f363a58604fbbc9126f0531814789b436d3f2e100cbbee986604ab2cc5d37a9e6516f405d1a", 0x32}, {&(0x7f0000006040)="dd359b860e908dfe148b874e090c602a488aa26f1ff19b418f1a8176fca416ac0b014a5bfe3b7d417b98c846681be8d247ffea107e71409f20b4e15a46230f0773835fd274f6cfa8221ef9afa7d4149315c8a68dbf0cdac25ecc9e5b7a0f47c4dc640d063b5edee0d99b0778aea0fe19d0ddea89d6ef7e00a52e277b4d274ba5f3427ba6b530768ae3e9c02e4de47c41c5412da1f9e6bafd792532766dd01ccfe93a4db9ed8d6be24ca23e361fe24a6fe47f896728953cfd9559179153fdf550b4de713a9fcb11856130f01ffa9e7c35994b0ebcde26f5101d69b1b5296cd86bc8a1d3fc1c4a08bd8646f5fef1bb6f16ba", 0xf1}, {&(0x7f0000006140)="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", 0x1000}, {&(0x7f0000007140)="4b3faf860b5947e82b0715d7f1ff1e4cd87b19598f2d8a8aefa86c8360b1f6", 0x1f}, {&(0x7f0000007180)="2aacbf12570eefa9a7bf5663ee21b8a76632bb9a1daa46dcf608c657ad4ab3bdc61910cc34d29829bcab", 0x2a}, {&(0x7f00000071c0)="65a9a9a5e9fbb18ea3522615ac5de84a3d46d685a610990a3e67a20c5032502e67db66d07bd31bed45ac9147254fcdf206388c3efa0f1131cba5e3ffaf93886a43f22bd48cfdc7f5b8315ad3b11c", 0x4e}, {&(0x7f0000007240)="e9a56b002680e02568859d7c5b9da0c61a4349b1ba7391752a540ae23aff41ab62c7012ec102ca9f4c9c609862ace2609cdc3bad191667d83aaea3026d755a1a3253f1ebb2", 0x45}], 0x8}, 0x8c85}, {{&(0x7f0000007340)=@sco={0x1f, {0x1, 0x1, 0x5, 0x2, 0xfffffffffffffffc, 0x9}}, 0x80, &(0x7f0000007600)=[{&(0x7f00000073c0)="4cfa57604ee29c4e0672b5ea6d6229454d665f7d7d80001a6b9bb2c8abbf04fb8893dbdfe7110f6564a7bb89e1ddea9251f10197abd1a1287df6f9994907a4c8eb206229455e8518cfd17930f514350d0c4c347dd2110240fb0f7a0ca66d9ea944ed772302108b9d", 0x68}, {&(0x7f0000007440)="823efd9d87c69cc4c61c34d1b8fcdf16760d88f19404cd5687c2ad318d601e09b181c3d908f9e9df7c5fc99cefed625a944922d674a7f0eef6b11528c857deb55c7350e2ba3cecf78185757a0c167e5c614395a6bcb038509d44f7b631c0ed35af998f7a760aad939183fb1b58f84e7b8d9eb43efe124fc6dffb79df0783b2a36f38a090b3eb8a2f1d86c010794a5cb4836d2a88e3e097c5450e99a99aa1550215627cc39a78082c71d6bdeb007c26697ea206c207f6924d3868583fb64260c1ba4449b7c0efb5ea25811e438f2077e49ab07b6cc5274ca6befbad5032796d05b49a9288c3132bcfe8", 0xe9}, {&(0x7f0000007540)="6e43d6e75121f53382e588658d0cff9b8d2fa47cfd6d5763ac316e1723e21568998cb867a9d8a1ecbf406e03f681b6527cffd8d61f3c64353c47c2946f988fe1032689dbb56e3b113eb2a38ec97711574042137806f1326d14ba7e7595074b20662ff9eb058fc37f4995a3bc7254a162c0b9a8c682b11087adf53d774bad562882d7a3ede44222f9be6836811f8e4bf0d38953222ca99fe483e8b8bbc7057b59046f094f20ca", 0xa6}], 0x3, &(0x7f0000009bc0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x98}, {{&(0x7f0000007740)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000007a00)=[{&(0x7f00000077c0)="8c73d6af6cdd2e44b1e32565c370ad8f7d43c5", 0x13}, {&(0x7f0000007800)="52066904ff01aa2c642a1c6c9744ddebbc4225371bee4f2af28469d1cae7c7d5a6451d12b6b968202a16732c002a7fb2ca94a67559222e736a3b9e45d0c6ad4ef1896dbc3bf4a7c7fa154ec2cddc55b6c173498941", 0x55}, {&(0x7f0000007880)="1f8474ddeadc62dcb7d16bd44a78635b76523113367c6f3c4dc35c67ea9cb071743342a12a33cf1e78819b4425e2f1c3f2895c8a5600015c1755593c78ad0cb2afa4404c2b922079748ceb88bdf0dbc6fd252ea7f1742d60760782f7ccba8d75d73c", 0x62}, {&(0x7f0000007900)="55848d0e2b75e78ec254cbefec8cb4e950eb90f9a35a3876ef", 0x19}, {&(0x7f0000007940)="dfec4d0fbb5cc9dae10a127c96c3aab85adc9736122af2416b7df1aeebd99ebd94ce0be96bb6b8fd9573aacf2af487eff62420003804fab812bf12cb82b2bbb3", 0x40}, {&(0x7f0000007980)="e4e2f133133e1ac824ff317124b1ed9f52ea7613c579cf7035e2630805aefe2ce7c82ffb0cce04b0c579ed03b4c109cd18b09ea8a0762c0c22d2b214332e5bf55bc1e2671a0b5a883fdcc080c144bbca21c46850017c0c969eb6", 0x5a}], 0x6, &(0x7f0000007a80)=[{0x20, 0x107, 0x1, "79105ebd7638242fd4ebc9b714df40d8"}, {0xa8, 0x1, 0x2, "f3d17318da034c948c4d5e08f6ae8463acd84a5ef167216ce54912a427017e0e72add4823a7b7d306463f477ffc8c37c1b6d188a7508db6dbd28d64918002d9dceb998180e70c81653ab96163c66613b9639e9897a718cb7a9cc4e6067f2d7e6c3b897eda44494bc3a11cd5f6a7b6e9600ad621148a02cbc8d26f92e21d335dd7e8ad9df2b5518b28f309f8d55603f8c6b"}, {0x28, 0x107, 0xffffffffffffff00, "59365233d3a14ea3afb358a132e31b9122d5db54a55e40"}, {0x88, 0x10a, 0xd1, "06f0ae0a7b2c0dcdff173e4f9bf23a39ac9fa9404275768e07b3052b1686b1e9990e961f8fc24f07d68f922f7e8da6182131910685d3328c30e074c274a4b276060569ae94430025884e3781e05fcf2729da4e4dd5d5d4c0c0287b22624e893a2616c3d3f5b75ead6d1a7a329244ef1c11"}, {0x1010, 0x102, 0x1000, "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"}, {0x48, 0x84, 0x41bc170b, "17aed83cf94174a89902acc5b54bab95820e4b95df351cad5b25cd3d1aaa154c6939fe7dfc6096a33dba34f85307dc33bfbbd22b6cb273b1"}, {0xa0, 0x11, 0x20, "91b2d9fc1f70d2cf2b920454a1403e2dae4fa6a8b7194f1ed2236f598182130cf22d8ea4f2b0e095309635d81e1f300a80d18a62f509e4fdbe7d7dc8c2b704e387889d3538d1b56512875432c95c27467306b5e11f3ee2f8a21be1ffd19a958c4a58dc08d677a8ab04dfa23067aa83924d5cffce915ecb340adff278f8a490da9688abef47b0ca9fd70a9922ccfd35"}], 0x1270}, 0x1}, {{&(0x7f0000008e40)=@ll={0x11, 0x5, r7, 0x1, 0x5, 0x6, @random="05a98535159c"}, 0x80, &(0x7f0000009140)=[{&(0x7f0000008ec0)="c26e62eed6e1224f0d95b55919e5845b8361c5b68f73d242bc4780f29ae6ef81d09ee249e07fff50426da37c3ac8d1b67dc8d4c73aa8ce27a0a4482f8eb6b9fdff32c087cdfac0e692d4b1ea95da20a2811112103cfa21ab91d10c140f71abbab5bb623af104667358cdac58dfce2bc3eec13a5ca9b0d15a8b7d7a9b39133f231577", 0x82}, {&(0x7f0000008f80)="d7511f94645f46c9ada20c48e0376eb6a3acb65260996b4e7e6c58e80c0a06e95ec3b524ef9838c5491c6a060216462d55eb008a1e102fba8a58d9cd8444661d69be0dda15176adc87cb78a28a7936a397b36161f26cdd7ef33ccd260083c92b9a571860e05e4b4d8e3b218edcb861d5f3778809ab62b208dca4eea0b082dc3010c018f2030ae781882eb2d95857d4389c01380dbded87c6d469c25e0a0912b008dc461fd6cddf41cc8855bd", 0xac}, {&(0x7f0000009040)="7fcc970c5f4ce86cc159802913299fe16411b88e60b852216b88f72ea699356d4d82456c7b15e3fc80750f3c50dd37e04d56a436f7fb0a0a920bd2425df3769733450b43a618887f844b819f741bbeede3dcb3e247ede30a2cebec3b438649a0c73edba6c0d4a38df41954", 0x6b}, {&(0x7f00000090c0)="305541d9130538d573a55e7b0c104b98eca0377f939cd34420a2b997d47e600fe71405aad3b3c34222f4b743288d119e39aa78a4bef0d7373c5edee23dac98e06c71d8bf79b332fb88f928d7d044a49da82ece0b3d88800a63f099aa8e09b2eda7ec", 0x62}], 0x4, &(0x7f0000009180)=[{0xa8, 0x10d, 0x3, "35507b21b33baae2e4ef39b6448ff248a6d5a3e91ed5e2d9548e9069a6d39e81c27b0db95206343cdf2194e344ef8002caf509c8a0386fe80c5df2d9484d815d930783a48aea46cd2a09a8b572c70aba9c08870b4f6fd25202316efde104d0939e1694c7532098607e78eea5f1818ca3e1403c571632954eb04a95c3475501fe6849e3f895b2045487901c71c0e6e8ec6e040e"}, {0x50, 0x84, 0x5, "6715bcd55cd7726c506284a5d644e982170a36c2ccadd3dea49df2ec697f9dff71e45ac23f9b6c91c4d7055e303edd5b07f7673e04e23ae682"}], 0xf8}, 0x5}, {{&(0x7f0000009300)=@ll={0x11, 0x1d, r8, 0x1, 0x1, 0x6, @local}, 0x80, &(0x7f00000094c0)=[{&(0x7f0000009380)="92ddf7c7a16a55187ab6998b7248", 0xe}, {&(0x7f00000093c0)="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", 0xfc}], 0x2, &(0x7f0000009500)=[{0x30, 0x19e, 0x7, "bc355a39f77bbca0753f90e406fb85683f55b995e62d2745622a7313449231"}, {0xd8, 0x10f, 0x8, "fb876fc294a3084327d0ac598c3e8072728a3697ef5f2ee7290aec35ba31e920bab6ddfc968b2afb6ea0595f0870cc89aaab617a4a046c46d9cb309b1ef27ca13f46064cf492964c528d72fea49e25111cacacb532511c6b6eb59024500473b1970eb0c0ca6a32f6d1f15b50447f0bef23465b0be05b5618f48f8740fd1b8e2ed4f19a5a39b9ff91e399b546774cf1ec18c1f71e0172cc41de688509f030e1a1afd3651c8a49ccebf6e8322a86dc35288b5b2a76f381cd60f28b0989cf88457329251b"}, {0x30, 0x111, 0x101, "d174111184a21085743bb8908d8e8ca22d345d2e38a7f9019db8"}, {0x78, 0x115, 0x6, "a5697cc79934a72c302a16e678f406bc00a405f4a9b9e2a96abaa195958c2f5cb2194a1516d505c773faf69399ec2923c10a37e426e3831f2944c2c6bc3fc5fe5fcecccff7bbdaaeb642a9354eceefe4b5246a99898545aca21b2f015c249625c3"}, {0x48, 0x187, 0xffffffffffff7fbf, "8aeda160dfcfc5cae886a675cf5811724a42e689262d9b0caea9974b8b2a3a46138d644cbef9bad465ca6c80adbe0878ae9a2b99f0"}, {0x90, 0x1ff, 0x6, "c205bf6745202ffefc7ee94f496528e0a2d8e9e8bc421bed6b8cfd6d42410797741d1cfbb66d2c3fa55a9d11881366e22065e9af729960f21bcad3c04f019ad482bf4df282df305d056a86c6b018ab5bc6869bea0896555ecdf4296920a66c7eb4d19139b643e1ce21d19a9c4175de6879ef1639896a68dcc724c4c8475c"}, {0x68, 0x0, 0x4, "610b6d57a05b3dbd17a401633bfbd0aa045a54350f4c756f95e46aee977942022948560a380ab44a38a2a4f3fde39459ba676df833fb67bb14666b5232be5d9850c12f1cb3f78d959900afeba23c837165e43b6db8e23fe8"}], 0x2f0}, 0xa359}], 0xa, 0x24000000) [ 710.514706][T22416] binder: 22415:22416 got new transaction with bad transaction stack, transaction 4532 has target 22415:0 [ 710.550161][T22416] binder_transaction: 13 callbacks suppressed [ 710.550178][T22416] binder: 22415:22416 transaction failed 29201/-71, size 0-0 line 3044 [ 710.591950][T22431] binder_alloc: binder_alloc_mmap_handler: 22415 20001000-20004000 already mapped failed -16 [ 710.612175][T22416] binder: BINDER_SET_CONTEXT_MGR already set [ 710.619883][T22416] binder: 22415:22416 ioctl 40046207 0 returned -16 [ 710.626630][T22431] binder_alloc: 22415: binder_alloc_buf, no vma [ 710.633039][T22431] binder: 22415:22431 transaction failed 29189/-3, size 0-0 line 3147 16:26:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12, 0x0}) [ 710.642013][T13392] binder: release 22415:22416 transaction 4532 out, still active [ 710.649474][T22416] binder: 22415:22416 transaction failed 29189/-3, size 0-0 line 3147 [ 710.659303][T13392] binder: undelivered TRANSACTION_COMPLETE [ 710.665148][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.671441][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.677613][T13392] binder: undelivered TRANSACTION_ERROR: 29189 16:26:20 executing program 4: r0 = signalfd4(0xffffffffffffff9c, &(0x7f0000000c00)={0x7}, 0x8, 0x800) r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000d80)=0xe8) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@broadcast}}, &(0x7f0000001000)=0xe8) r6 = getegid() r7 = getegid() getresgid(&(0x7f0000001040), &(0x7f0000001080)=0x0, &(0x7f00000010c0)) fsetxattr$system_posix_acl(r0, &(0x7f0000000c40)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x4, r2}, {0x2, 0x5, r3}, {0x2, 0x2, r4}, {0x2, 0x5, r5}], {0x4, 0x2}, [{0x8, 0x2, r6}, {0x8, 0x6, r7}, {0x8, 0x1, r8}], {0x10, 0x2}, {0x20, 0x2}}, 0x64, 0x2) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000bc0)=0x0) getpgid(r10) r11 = syz_open_dev$sndpcmc(&(0x7f0000000a40)='/dev/snd/pcmC#D#c\x00', 0x1bbe172d, 0x2000) r12 = dup(r9) r13 = syz_open_dev$usb(&(0x7f0000000a80)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) r14 = syz_open_dev$cec(&(0x7f0000000ac0)='/dev/cec#\x00', 0x3, 0x2) r15 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/btrfs-control\x00', 0x480000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={r13, 0x10, &(0x7f0000000b80)={&(0x7f0000000b40)=""/63, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={r11, 0x10, &(0x7f00000013c0)={&(0x7f00000012c0)=""/166, 0xa6, r16}}, 0x10) ioctl$UDMABUF_CREATE_LIST(r11, 0x40087543, &(0x7f0000001180)=ANY=[@ANYBLOB="cd804ee3475a0068", @ANYRES32=r12, @ANYBLOB="0000000000f0ffffffffffff0040000000000000", @ANYRES32=r9, @ANYBLOB="0000000000f0ffff000000000000010000000000", @ANYRES32=r13, @ANYBLOB="00000000000000000100000000f0ffffffffffff", @ANYRES32=r14, @ANYBLOB="00000000e6ffffff0000010000800b000000000098d0cd294fb12beef9d6661fc904d6dafa6963c8363006ba359d74143c7d03db3a2993c1070de1110e400886ea5d0464572394532bac38a7e191c331366fab1b5738e2525dddfda33041c674d86a7759ef5a8b3c6d9873ecaebecffaa2081a39d7c7735b7eed999a7ac1a3eccb3096928f39428214f8242608eb10e266c775852f00858bcb3243de136c678af3b911f8615b7c05cc17", @ANYRES32=r15, @ANYBLOB="0000000000f0ffffffffffff00f0ffff00000000"]) r17 = socket$inet(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f00000000c0)={0x2, 0x0, [0x0, 0x0]}) r18 = add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0xfffffffffffffffe, 0x0, 0x0) r19 = add_key(&(0x7f0000000900)='trusted\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)="2e4071fcfb8a53b2dd31b5c1f43feaee668defbf1dfec1c0ce3d1c540e276ba10a1f4fed8e9cf83ac78a1baba77027c4cfa18f57ee64ce7ca8bff4e234dfd59d654cd14877debfeaedb4f7ef304b5088e74ca0631b9241e5f9045e081f6b75b22308f2048667406dc16fe5fa6591ad581883b223cb46e0d2d74b2b45fb34b1821d9d79e5abfb364ab37d12d97e057d41ffe3298b20ec627a9776537ca48ede87e1ac6482305f255c8f1727866dd80a6cc680", 0xb2, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r18, &(0x7f0000000840)=[{&(0x7f00000001c0)="f4561388925173acc9617c643893d333b4d2411f301d83e26759c405ebef738a1a7338bce60a5431b95c74bedcc6003db20109f33ee2a88662310a20aa95c5ca222815d58590ea5b17caca6f86ad", 0x4e}, {&(0x7f0000000240)="b620e289e442b8568896377b6ed56d", 0xf}, {&(0x7f0000000280)="1cbf92b423b8d3b551890d92a53863e5181d34dabf443924884c7f7fbc68c258026583804eae9bb5cc3370ade93472eaf4edf46d29ec4083e0d7ed6492cda7197f8396753f2c339eefb03bb5f041b4043c82256db9e5f03d341fe36a26aa0084393247e97bbf12fb91ffc98721f888858a5d7a531f65c85e353e31e7b32af3e5356b3b2d4fa19dfcba83841f88c483917034bc530de97b76669fe85f6742ca488417f795e70f", 0xa6}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="c100a95d0ad506558a214b208aaed140b2960d2622bf84296184e238f35d21e1be0c42a49b8ba72448791abececf643f3a062bb2895d4b04b655de3e5d0b22a04770c09e", 0x44}, {&(0x7f00000004c0)="286ba5f77467ddd93f0ed1942e47787de09b92b54d1f445b5e49445a0b0769c6c84d3d60dabac3fdc4a9f3447ec07c8ffad8052f5e3efd0979415f448469387b48a4f70ce219f8ea7eba53272251a55393a7069f50f1d1da8de7db7af073a556cf0dfbe53d52542dbb66f7955c16a147ffe9a84164000052e9178c9fabcbe1e06ba06967666ac1ff4eb61df7acfd824138e2cf494e46e49b2024546e4afc4044b8942637296f1dbad9bc8fcdac5b6124505ae2810b0814cc5ff680c60d8deef49ca3f88939cc49d68d78e0e41383b5d58b8fbd68359b49c1cdd2b25f94471a", 0xdf}, {&(0x7f00000005c0)="beff355859267f16fd3d2a57c67f8c59b3b4480d706d61fabe8b4a3a4ee0dc74eb11314c46879906e6592005cc4128ad839d8c5c77eebd3bc378ba6661cb6a4dfba23b7c0706766141b949d9a86f72a85410b0c863ffa8519d446d7ff8855ebf16ebc532bea0b1c71b9e2a2b09e65ae17af27be162eea09d1f4dab481db853f782791949d2b6e6551fae2fe5fbd3641264d441e051f93510712df878d8be6723f2b685110583d5679bb826250a929995dafdfd20", 0xb4}, {&(0x7f0000000680)="e012a37ad77a53c1474865035e095cf0eda0e403eaab6bb7ba8fbf35cd944d3701423827beb42e0dff0abec9893cdacff110a76f8a137740cf2fa306fff676a706a621fd9263953f505db59f3507a1e2ca6fc46b6615ba804c700430afae34de605ec6d2a68ea1de77ef7c9de1ce773deb525b378ad3b5554040fd75189b8b4899af4464f50c22cb49f8a4273b2db8a15348e99a7aea8a2cee303496989ee8c482a4e555d581cdb7ec", 0xa9}, {&(0x7f0000000740)="802da23aaf7c4fcdcacbfc3bb39d5448d0545ee72288b928a10b325200d8ef5a59baa2fc72324e9524c5fd54e5acd0985da530ff2baf2ab699acc321a1723f8e04dd16a32954efed7507d2966c5350f4831a7fc534ac1f215ea0523690a1bc17f60a5d17fd0734f4202b0dfbc8e69956d5399743cb679158a9407b79b2a0cc1289fa4fb42f969f4fc806b417b6406fbec9dc26f15c91bb73516b7e17a937960dc7fe452dc4fd531e7fd49c780f9aabfc83d028c63739b9c1ababce4fa68499744e6988f16e2d0b2233cbdffcc0f9fa84b1ae2e6ebeb25fe8267e6f584ec979", 0xdf}], 0x9, r19) sendmsg(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 710.688200][T13392] binder: send failed reply for transaction 4532, target dead 16:26:20 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0f000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)=',\x00', 0x2, 0x3) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 710.732565][T22440] binder: 22437:22440 got new transaction with bad transaction stack, transaction 4537 has target 22437:0 16:26:20 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 710.801619][T22440] binder: 22437:22440 transaction failed 29201/-71, size 0-0 line 3044 16:26:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000100)={0x6, 0x7fffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) [ 710.851753][T22453] binder_alloc: binder_alloc_mmap_handler: 22437 20001000-20004000 already mapped failed -16 [ 710.885014][T22440] binder: BINDER_SET_CONTEXT_MGR already set [ 710.903654][T22440] binder: 22437:22440 ioctl 40046207 0 returned -16 [ 710.919538][T22453] binder: 22437:22453 transaction failed 29189/-3, size 0-0 line 3147 [ 710.939537][T13392] binder: release 22437:22440 transaction 4537 out, still active [ 710.967233][T13392] binder: undelivered TRANSACTION_COMPLETE [ 710.982904][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.999409][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 711.019313][T13392] binder: send failed reply for transaction 4537, target dead 16:26:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000200)={0x0, 0x0, @ioapic}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:26:21 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000001c0)={0x4, 0x3800000000000, 0x400, 'queue1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x431}], 0x1}, 0x0) 16:26:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48, 0x0}) 16:26:21 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="10000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:21 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x40}}, 0x40000) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socketpair(0x15, 0x0, 0x491e, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000280)=0x3, 0x4) [ 711.412306][T22479] binder: 22477:22479 got new transaction with bad transaction stack, transaction 4541 has target 22477:0 [ 711.424155][T22479] binder: 22477:22479 transaction failed 29201/-71, size 0-0 line 3044 [ 711.435190][T22487] binder_alloc: binder_alloc_mmap_handler: 22477 20001000-20004000 already mapped failed -16 16:26:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x3, 0x5a100) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 711.467942][T22479] binder: BINDER_SET_CONTEXT_MGR already set [ 711.500289][T22479] binder: 22477:22479 ioctl 40046207 0 returned -16 16:26:21 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="23000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 711.514502][T13392] binder: release 22477:22479 transaction 4541 out, still active 16:26:21 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 711.545066][T22487] binder: 22477:22487 transaction failed 29189/-3, size 0-0 line 3147 [ 711.546599][T13392] binder: undelivered TRANSACTION_COMPLETE [ 711.622094][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 711.645040][T13392] binder: undelivered TRANSACTION_ERROR: 29189 16:26:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) exit(0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @empty, @dev}, &(0x7f00000006c0)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'bcsh0\x00', r3}) r4 = socket$inet(0x10, 0x2, 0x0) r5 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) r6 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x200, 0x80000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000400)={0x3}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000380)={0x3, 0x0, &(0x7f00000001c0)=""/238, &(0x7f00000002c0)=""/175, &(0x7f0000000100)=""/68}) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000640)={0x88, &(0x7f0000000580)="c2d5d027f206bf07abbafe697f8dc8869415644396227632c47ddde66004fee492586f447073afe7060ad13861e27cadd528a59c08ebfa16627092bd38230b167c35a5b202098e18e83a2a9c26a328be51706841bda3e787ebf05b02970b8eca17eabc31eb3286cfc53fa0c68a830dc0241cdb8d755d857d5ac2cfb1bfb90b874084f879ffbbb4e8"}) sendmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0001b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c, 0x0}) [ 711.667270][T13392] binder: send failed reply for transaction 4541, target dead [ 711.744590][T22514] binder: 22513:22514 got new transaction with bad transaction stack, transaction 4545 has target 22513:0 [ 711.757463][T22514] binder: 22513:22514 transaction failed 29201/-71, size 0-0 line 3044 [ 711.784072][T22516] binder_alloc: binder_alloc_mmap_handler: 22513 20001000-20004000 already mapped failed -16 [ 711.821410][T22514] binder: BINDER_SET_CONTEXT_MGR already set [ 711.827943][T22514] binder: 22513:22514 ioctl 40046207 0 returned -16 [ 711.836018][T22516] binder: 22513:22516 transaction failed 29189/-3, size 0-0 line 3147 [ 711.846262][ T5] binder: release 22513:22514 transaction 4545 out, still active [ 711.849454][T22514] binder: 22513:22514 transaction failed 29189/-3, size 0-0 line 3147 [ 711.855188][ T5] binder: send failed reply for transaction 4545, target dead 16:26:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:22 executing program 4: set_mempolicy(0x8001, &(0x7f0000000080)=0x100003, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 16:26:22 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:22 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60, 0x0}) [ 712.253493][T22527] binder: 22526:22527 got new transaction with bad transaction stack, transaction 4550 has target 22526:0 [ 712.283527][T22527] binder: BINDER_SET_CONTEXT_MGR already set [ 712.295979][T22534] binder_alloc_new_buf_locked: 5 callbacks suppressed 16:26:22 executing program 4: [ 712.295987][T22534] binder_alloc: 22526: binder_alloc_buf, no vma [ 712.316857][T22527] binder: 22526:22527 ioctl 40046207 0 returned -16 [ 712.324375][T13392] binder: release 22526:22527 transaction 4550 out, still active [ 712.344627][T13392] binder_release_work: 1 callbacks suppressed 16:26:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68, 0x0}) [ 712.344633][T13392] binder: undelivered TRANSACTION_COMPLETE 16:26:22 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c00e0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:22 executing program 4: 16:26:22 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 712.393122][T22541] binder: BINDER_SET_CONTEXT_MGR already set [ 712.425241][T22541] binder: 22540:22541 ioctl 40046207 0 returned -16 [ 712.432784][T13392] binder: send failed reply for transaction 4550, target dead [ 712.463250][T22548] binder_alloc: 22540: binder_alloc_buf, no vma [ 712.480166][T22541] binder_alloc: 22540: binder_alloc_buf, no vma 16:26:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000000c0)=@sco={0x1f, {0x1b60000000000000, 0x2, 0x8000, 0x6, 0x1ff, 0x2}}, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)="90430b50a53b4b6bc69279fe5982b32f6aea90e29defa0090fab12d0896a516a5d0d8147150c7e760884a56badd4859fbf5fee469b4e00b54daae257744bd6caddb031cabdb5f0ef2446fe1c8971011144a9dfa3010a6ded36afa01bfa4cfd4b1c389da9f9ebafd0a686801b9007000fe14dfd0a2adba9236c162895a68eab64b82d958063c7cd9a604fb68525331e1d356deaa7bb6088a4cb99988ba560366f701032223359d3912b4b5489c3b9ba327259266fbeb8c11fd389f1a2f3a06c4d0723234f", 0xc4}, {&(0x7f00000002c0)="57538edd8a0b2cfdcb8b0314f6e3389f83957a609cde960e2aed49ec55037c6f905f372ef713df87bd3338bf025927bc74537a4a6f53773832a59d6b294c0ef750254d9ae7a7c4bd5ad7f861c45a5d66b2188668ff76f71e928d3169c924feeef6ba070e7e2e6441e54bd6c89a24ceab61ce21407863bc53d09605fd8e5a94b9cff39ae3f6637cf1aa0068d07aab29e1f215b84ac58db03261931524d8e99fdc1465dfb80606ecdf318c2a548d", 0xad}, {&(0x7f0000000380)="c1b1269e379298fd1b32ff1685cdffacd11672d52f40618d15e446f61b14782b113182c6e849a210047e396cce3913cfcc143e498092b0326ed1528ce0f75cff6f9a16466aeb334c776a95653cebf35d7321dc18098a2dca0873ab4be2a09004ef15f7766576fb87ff629792de0dcef5d16fc80130621e36d4b47156ac792057fc06bdbcab52d6ae397dec434742de1f36740f2e321cf22bda041fc7aa00a11b6beb135ad8964ca0760c884256404a1fb2fe31aea0a4656a98788255e4c30cb811416629fcfb6af589b91e12ca6dc3abb83ffdfca94b841009163cc98ed7db7317201296048b2d4082ed0bb976b5f794a8848fb7a34740e09c4b24f8c1c78aa9ecc078af427158563c3f0d7269990df10c4657914b0c1738bd7a2045b1d4cdb5fa7bf8ca4a7b162b6bc51511b3d005685058309f505a4bb454ae5edd6dd9a701057bb45944cc8ffb4ea76efb85cca72ca5f61a32d672eb432ec568a08f189517c9894971be9836918336082bafa96e2b643ecb7c9c989419bd6d4d3e4e3e9573c06b0753a791988da7e5e6938a064db282485a4680650c082092a35c01ff03fdf2bf65b121d2883f33fd276ee845adf96ff9c99d650593172c7a207f268ee0cdb42d5fce8d36b38f58e165d85861329c1749705d3ddb832728c179206bf22a38ff32896c4f2183b6b5a78265169ccf2b9964bbfa3ec94988187a4fcf14d31ba9ad2eed8e2d9a66d36eceb5ee1cc0b68063f3cef6dea7b33da21207a79637456fc02e86cff5085fe8cec377aea0468d9ca8955eef2dc66dc02cd4968fbcddb2f77e08a2f52c018cac4869d236c70cb6bc67e534bb6030acc18779fbfc8b00d069decc9452c46e7006752ddbee6e8fc5662e3c5f79b120254b75c92c244028d47f5ce705b4c63ea89897f7d91b78620e6187feb488e557c3065efa71c68be606bc4c998ec531b3b18473b6f8df48f55c771fced76e3b4f9d91b2de49090f78499c0f67702e14608d937ac30dfe8cf583b23d7c2f9030ab6d8744ca38115179b82fa3d5051bb0138abca41505c0634a1260ac0e61bb89424d5dbbd46e2c65b8b83a17acbe93918b6ac094a1bda5105ef3cea8dfdd8e329305fe4cf0239ab22978c8c1ca1dcbf2489d3cf7c125d2155ae3fdafbd2a301b791868ff0a8d05867bbaa4bdbb2b637a5b07efae378d0d45b4725b7c0ec0453d6de129f86d6194fe51b5a27cdf95772db987e80195ec659698f2ddaf365ee05edca62d8196738dc23c44bfe12707aaf4c74c90118bdae0f5459124d78d86550f11f3fc47f6d547f51f6414dd3c58f854755312aecdf6f7933212abb367cb64381df6df4adb5788f8dd0d26016940960672e020c7bb0af8b27da4addbdae40cc6a87a4a00c7025c3d2268441d44d0d621c839156d2a5dc2189e2b3b77fe1b8581bd1baa4f477207c06647052011c0838e1281815be343577112b22834e04a239824a2973bb520e434f12ca7fc08ad6bc4e5235ddfb1c87cfbe4c6901131285aa77570c5fe70e191c53f92e330382a7a529e30ce0f8170a3a256a7530978b66a2cc4e31f6afe07a2e0615d1f8a6a9cede0a3404ff7ad5b7e54b4d119964bd5731ee0f62afb093d829ddc08b20b360553e8bec475f0f84413d450d8ed544016357062887865a71b97bda83d0f2d7a82b3569cbe3b65192c9c54acdccbfa12f8b9290137db8ca9c981f8639cf17847b990d3a8236c0c26cac517bd433b6261e3f1b62cbe56eaf3df4a2187fd0195e08faa4b6e411142dae37abf4c84f043d2cdb52ee5cf9710def1e9a81e5b77d506c44c3932418f614727bafd1cdd67d3f880fcd22ca33460a4ec52d0baafc18fa50e5e8425b71c5a49b4acdab8a369242b98de17326d672818c31af5b4146965174dd86d313214db043144dbd7a03ef192f4b4bd9ffceba37eadd55c5a91beffc70c47f5978478c028a41800d42f06ff67f8cf80e5a18c401b470da8cc7c93e4b316c8bcbb1deeeb21dc53dc81dab770366720cd0126c3807efecb8f8ef496a980a39190785137aff2b4604b2f03ba1eedc0bf2038c6b6a8c7ad2aed0a4e59aa8f892572b1e93870780f601aea404c27d628176c7ad6a4027fb38d015c7c25626a0bd8b902bdcfe1c4d3d590b2acd48e1c369ebc3f6a88071721d89a2361612d9cca222b81f87d6506d6841bbbca0edfa16bfc6930128c6bb8cf1f980a43dfd1148f876eb34c6aef6a9d9fd074688a9c73b2d506fe70b8e45da6f1cf43fcc1adf402b9a65047da9185dadbb920ef8c67809dcf9589db825c4d0bf1ab23dcc050b21583c63e2058cee6d51fe80e82c59f49eba56c982ec02de00cd8092c7b2c0eacd3bdb5a443813d099743f26e5d8ec50c0ebd3e2c811c5ecdb2a1926f640af09bb1b9bffdcf3645f021a02236e1fe0f5fead0557397bc35b79595c1a94f8d24badba0626088bd63044602dfbe24e5a48003a70669dbe541aefbac3c239d4c822d2a10d530efc79d479388ddda4ad165789f7c3a427a2277fc5c907dcec2d94f10cf8d3a7b7ad0a134b3768476ee5b742555f423625c84272f88cee7b8ad425698313ea58d9c1fb2357ee7dcdb45a640b40545b32c0a365dcfb5be27cd75fe6b2b1efd444710b292c7d7653e533340937baa309f76e858b9836e83fa1598c5922bcdd701d7193dca8408090e898bb0b9d1aee8af697281fcbb39a5da97d0126bada870cb23b48909e18de791ad95a057a68aeaef220b6b9a00238cf706d8c2a612e47cef70415c208f118e7833ad569de54f6e59bce973b5f2c57efbb3f5e1c51ca7e067daeb58e4d9cf9569f1af4ef51c895b8604edc8d9ab11eecf5c510899bb49c0632457c7061d01d72d16db0d83e94ef712fcf46f459b122216d271f45109092ff48c792a152c5da8c08188e0c70fd0efc5003223984f5ea180d3cf99ebfd4bc8a50c9acdfd368fa2b92804d4197fb09db97b329e9e66c27f445901a7104b8cbf4871fbebfb31a44671d3a2031aa1cadb3cafd018cab3a071889fb461dc5e9dd5b297f34d5e90088a3fc4247766fd283707136384f59aa3a01351685cc448581c9cfcd362eb9a5b091a43226c851d83af6e3bdc99e6afd35c2a8e6f43955960313b37fd9df174dcddade792404344e27a06caf39eaa2c81bdb154f4fe08b26815ad7a15b85a8b12ad8d7d78942bb1c11378959b1839f1b2d9c2e51dbefbc8d93e00ca862bd170ee035d2cea1714a77987ece440b694b9bf94469121cba834a30ef5e133395f673c3459f8d080543cd95fa38c48afe1aac21f51100eac9aa2b033504dbe9527de523d5fa4b9741aeea5523281f2dc7bf8e2ccc656748701438f86cea842cfe532eea05a8f2a6720b0c8c701c39373e858c2221433adf114e92e0557b77f724c7d2925e777fa28873153c0370e1c1a7de65ff043ec077a10973ccdc5a43216ba7382807c59f7a810ca8d0b49a6323131a15982d78f418d98a41ac7f67fee6e60bd1511af5ece03be3f8affa8238fb72060f7d6f245ac256c101be3511f08bd22b3358f463d05adcfb69b187e20fb12749331ec455d8fe342d3218c372d1ea4fac7d844875786756486b3c9610b36212bf5fde60a35ef912af92468f82e416046a64737c7f4e8beb1f7a3fccbde54e92c25e537e84ed9969cfb1c41398ee52d89b1402b10015e04c924fe36383d16984139cc2199b1ad523063ae08768a48f9fa7dd010e2a164f771503ba183c218876bf8550572cb837c7029dfbd537beda89f450082a39c137400e4d9f40589db18c2ab1eaaf9b711e526d2faf9cdd2db19510c89181847c020f9c035f548f742d17c7df3c6da7d0008f49d89d67c45912e62d6e7ca5679935b2f627f5776c797b821012e9db064bfaa625c143c969b71ee4728eb369a16bd1322944822f7b5a4fd58c65348e1ae99c9f527d337145282e7accf9d4b3067ca1500c58290c813c60454cd2302d2f79b1bcfc5b8ee005ea8289508d3abce9d7632d50c732a33ebcdec8cc763f98cbbf3f0701a0d5176e097af743ed373b460e304475e0f94d6d4a71e1e3b8b02112ebf59cda262fe01be69e809303d294e84c8c1faa9ea9becb641ddb2b91117a2036c0d2c145e3083b6fc78eea72daefd434bd8b8498982499b2acf5361645192b249ae16b0172941c41f03f614e97e4fb22c2bd4cb252d7abfae571234d84f6f8ccec2648946049d8ac728036b1d4d5605e420b8bc648a9910b87a8624f9fcfd036aa8455e67d70ff639e4364b261615ab8d47dcb51c4c4ab2b6eed5a6182e22a191cdab5e610dc62acb5e71da47d0a1d957a99383331ddd4783b488055274db71f462b91b8d790fb68127c169dfd361a1fa5a5a59c460119016c8888ddec5f07bc2e242f0efc54a3ba9ef9fc257a9369168c2a70b328c7171f20b43a62b19d0444425d769ea46c1f579a1e5f77f125a97a324df806cc40937df94dd0617475f3d15f3bb1e12e2ca2d178783faf1d90b8ac21e05d0102a0fd8a0289dd4de15fdd6d9e8d3d48bc3112fc8b381938d7553f1b612d214e74f67585c603cc3368330fc045c8f83d39bb8c3b8a8d4e245bbf1d4843f129f2bc9c7b612322159709018da81554a987ab70587b958c086a79c9911776a8c1e526d60ea0efb9054f61fcd2691b31ad7aee91e26cc07fa5ebf3075e3c28b8de153aa0509fc48dc64a1214ea2e14b461d59b0626f75e58b70cfa8ee6fcd24c539730340a76ea328f0079038214b5cb66f955bfb827e5df173c479dcae8ee4768b13e77aee3901b6f30a3858d05b5eea7b4346def4589edae0f25b809a5a45eb5af9b35a87f9ce6f09fa520af5b272e9976e6c23b160759db0b1e5e5d56feaff2f4845ce971aa44fe6f47d94ff7b33381222870aa687146771479376e1da2146e2686197b84de7ef0c969fa3134a83b53512e80ed040659179ed8407f9befe057a1ec052f9a06b62e5f9e7be5ee1b15471cfaf80c32e00d94f086ed464b23a9fd41bc45330570cba24d83a4fe2bf8e1ba44794327fee05107ad345d1fa52657f3f0429a9cc7dde3cd3ae2ebd44a52615d4e5f134cc3200b4f9b1f72733c39a08aba7f3c01be9fc0a846cccac581712822d1083fa7a8ca4ef4e061d3bc5682811d2bbe00eb271530409a1e71b6e7c3943d899da11464daadbfdc3ac12af79efe11e98208e61a8e1a42c55cdcd75fd146178d30969dbaebb384edd5bf304500dccaef880fd397ae8037b76a260a7b7b2dbeff493817887b966a7902b0ffdc1233f6b9e93f9fcb2cabb928a18d8bb06b28b31292956115a33de6f1ff03647372a0421f91c20ee651e6ca8c14cc21dec791c175de9ee6980246653be0572817ce781659bde8720ecccd5b7650544ad4c850e2a972cf31ce3d9a0479a2c2b06f592a302f3afec8fdf2ac846fd0341d556e1e853dabced627551c1818e9f034284b8c5409eaca847fe5359258acad1a8880e328262ad7b7974a983b12006dd24c3a331d49a706e08751df9e56ed444cd7982ffc0bcd907daba6bb2c33a17caddf9091b97829ee30e8f290f7c1f124ef4fbc00c3bcefb8f0347335173d5433d9b99c24dd57c14b1d87fd6ac40df157c3f61067c6209f3037c976b5bc7f55351ee8c2e3deed66f81ba793ead70e0e9fb6a5cac9e82b17c88529b8cabadee0bb33201f20c85e483b150e0ca3dd8c129e6e9ba21c2728e1dce806402ce1e8da7223108eba9655d2b81080dd00b5ad05304eeb4b4f9a3eca6850f35533e1c4bdbe71fcf9368778b2fe54103d3e536e73e3f768aab", 0x1000}, {&(0x7f0000001380)="02802cf570a4b6cb05fdffd45b5b07132cb68ecdd737bb694dfee5f3d82a95f01e70d748d8a361935e2e83e227e24e46b6ded3862ece5ceb70e99db2de487968cdef5c0e8697cd2a3fce9632f8c104e965a684b9f63f61f2f85c70040fde0089b76a160e4323c1744745128e046bb42f8f17790051b7be40819c54ae1cf05e58768e3e7c6f25b35d1adbe46872d9384318a674d09b75fdaf10c1cd28cf06d6c8e8b5cf65553b711df299755a3dca37a23fde30333fb9017bbc80b046636ae08f4e5f5f0c18191a33b52e36f786d0baf28c564869677e45c0ed4ed9e4e3da9df8dea308c273779c86e051c6", 0xeb}, {&(0x7f0000000140)="9837e6a237daf0e6c8342397eed25bc592a1e2403f75e14205271e8577a18e", 0x1f}, {&(0x7f0000001480)="0bf1e54a611966028d23e979f073b9f1019637b2332bf5c0dbce7acc753ec673783e5ca31d900867d80c7a09f151797a3ad2c2ac277669881776de3056e03b28545ccf86d7cc95d16c1525781b4b9cc1d6c81cd67a77cd01f53ae129c94f7cad31fe68696768ad8b46f0ce20c187ce62ab098b228303d8c41ea55ff8dff08acfc67f045c76549388a1e75466673396124af360e0825fb0157aeebbd743678875abf644f874d25b836ce69535667999333143256485b38f45b8571a739438e6f54026de36b958f82fb0f48f3d74e8daaef608", 0xd2}, {&(0x7f0000001580)="2f749912dcda0722d1b10d7a981d466fe45785814bad73af75d115bf383ec4869dd4d3e75599e0dfe0aa155233210ab2ba032e0d083f9963015bdfa18c55e8197fa60d25bf2bd42256d1e47209a307bd8efb49c5c9822fc6192a6cf98773afe239dbe34ef7dc0e7268dda8607bd595925d5da7c78d008af80ccc3ea88051402b8d979bce6be981d4235fc9776495f40d36e01bffdb2eb9545e409a1d0846410dc9fc0bb9c9d3f6030fcd84407e8fbaf1dfef48adbc583d40585957bf228d8af3447fd25738", 0xc5}, {&(0x7f0000001680)="6c1cfcb9cfac561fe452a871ebf3cab544f03fdfc205881b3547a2c97e7599a11ba8284aaa43771c", 0x28}, {&(0x7f00000016c0)="e10c063663f3905d837fa34e5b6cb513", 0x10}], 0x9, &(0x7f00000017c0)=[{0x98, 0xfe27ae2ba3e4263f, 0x400, "5adf05aa0ef99999c249fe7382e001491ff7a5eb3ee71711f3f06c7d7e87189054989bfc4bbf6ff874b2403923cdeeb85c44ffc5691ef4e735e9f6bd675f40935cfea30eafbf4faf887acc177f5a14dc9b8cda764f5e50110f31626495aa6efe7b3cc937d4040ac0e9a0f0b7d797847c2c3f2e8f57badfd82f8ecbb259929025beb7e4daf4"}, {0x18, 0x110, 0x0, "f6bcea"}, {0x78, 0x113, 0x1, "d11530d41834d3c4487c8a0756022bb6305a6806bf8cecae1e7c81aeb48fa965578915ece87cb03699c42df3c4d5a527ceede648e35214bc1a32f1223e482b6df1c9c08d92979f36206f7d5431d6cdc77bf40811b54004e627eec257dc88db19a2eef4"}, {0xc8, 0x1ff, 0x6, "4a5be9dad7587316b64812966e459007427245de646d30b42d0c64d71a49551954f1310dccd0e86e0c303431b4b01e53e8f9911bfc9eadeb8173ae43cdeaef239ebbecdbf852703606c5e060cdca48a5c13bfbd6df962748ff8aeb207410494df5e8026a7e5654141ca9177e1a5cf40aaaa272dbc692846cd89290b29980648577e432ff9fb5e4e98c0631c572876a03b6d4581b4dbc866da96dbc2387cc3f4d2a8e9dacf97fccf442462d2625ea832c97bd148e02"}, {0x40, 0x3a, 0xfffffffffffffffd, "05d0d5f2ef24e357d2fd8559f88da5585acab25daf08e623110c691b5acd0f2b84893836edd47956668ea246eef4bd"}, {0x90, 0x118, 0x1000, "443f8046827a6913cf5d22c14b9015ad243152a97745920b69403b83494366e06c8d03d64d0795905ea78c812eeca54dce270d0065f399917135241dadddefa56f23c58f382fc1a14366472f07330aee9820da352254c8adc87eca60533275e114bf79fa8f134619441cfd20fe8ecc343d7203326800b5cb736f1bfbd2"}, {0x20, 0x101, 0x3, "3444cd6f609422d6833242b1849a"}], 0x2e0}, 0x10) 16:26:22 executing program 4: 16:26:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="00000010ac3c3ab90e63f173a16baea3cf72bc4657aa284edb4c8cccdfa5e4a2299fc462e24dd287187f6f1d9507b02171fc5779644fdb1361c10ad3f450a3161c00be45286df8519c73acdf3e5eeae6e9547ab5900b8d17fef92a1876292e55f7612a67a209f7ce1bdce6c2aec2762b03c7a0c969decf3a7100e2de03c880274654946ed350b290930889e1df41d4eefe7ad11826b3e64c9e258a0a529d27d4aecd76b7c1ad5fb823e777d390f31909b12dfd598185ed824f7c9ac4e0ed73e255aaf29e49364faa58", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c, 0x0}) 16:26:23 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000000f0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:23 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:23 executing program 4: 16:26:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, r1) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000200)=0xfffffffffffffffc) r3 = getpgrp(0xffffffffffffffff) r4 = socket$inet(0x10, 0x2, 0x0) r5 = getpgrp(r3) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r4, &(0x7f0000000240)={r2, r4, 0x1000}) r6 = dup3(r0, r0, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 713.101332][T22570] binder: 22569:22570 got new transaction with bad transaction stack, transaction 4559 has target 22569:0 16:26:23 executing program 4: [ 713.168229][T22581] binder_alloc_mmap_handler: 2 callbacks suppressed [ 713.168247][T22581] binder_alloc: binder_alloc_mmap_handler: 22569 20001000-20004000 already mapped failed -16 [ 713.199944][T22570] binder: BINDER_SET_CONTEXT_MGR already set 16:26:23 executing program 4: 16:26:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x800) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x8, [0xff, 0x7ff, 0x80, 0x400, 0x6, 0x8, 0x6, 0x9e]}, &(0x7f0000000140)=0x14) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x6, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 713.223173][T22570] binder: 22569:22570 ioctl 40046207 0 returned -16 [ 713.248787][T13392] binder: release 22569:22570 transaction 4559 out, still active [ 713.258385][T22581] binder_alloc: 22569: binder_alloc_buf, no vma [ 713.265141][T13392] binder: undelivered TRANSACTION_COMPLETE [ 713.271616][T13392] binder: send failed reply for transaction 4559, target dead 16:26:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x74, 0x0}) 16:26:23 executing program 4: [ 713.329128][ C0] net_ratelimit: 26 callbacks suppressed [ 713.329152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.341823][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:23 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24020000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 713.389462][T22597] binder: 22596:22597 got new transaction with bad transaction stack, transaction 4563 has target 22596:0 [ 713.408517][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.414380][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 713.434902][T22601] binder_alloc: binder_alloc_mmap_handler: 22596 20001000-20004000 already mapped failed -16 [ 713.476745][T22597] binder: BINDER_SET_CONTEXT_MGR already set [ 713.486537][T22597] binder: 22596:22597 ioctl 40046207 0 returned -16 [ 713.494294][T22601] binder_alloc: 22596: binder_alloc_buf, no vma [ 713.498503][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 713.506442][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 713.529074][T13392] binder: send failed reply for transaction 4563 to 22596:22597 [ 713.551850][T13392] binder: undelivered TRANSACTION_COMPLETE [ 713.568546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.574375][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 713.580341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.586115][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="01023cc218", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x64, 0xc40) write$P9_RLOCK(r2, &(0x7f0000000080)={0x8, 0x35, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x148000000000000, 0x2, 0x9, 0x0, 0x3f, 0x3}) 16:26:24 executing program 4: 16:26:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a, 0x0}) 16:26:24 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:24 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24030000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 713.957764][T22613] binder: 22612:22613 got new transaction with bad transaction stack, transaction 4567 has target 22612:0 16:26:24 executing program 4: [ 714.004225][T22617] __nla_parse: 46 callbacks suppressed [ 714.004249][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.021763][T22623] binder_alloc: binder_alloc_mmap_handler: 22612 20001000-20004000 already mapped failed -16 16:26:24 executing program 4: [ 714.056874][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 714.085027][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.094912][T22613] binder: BINDER_SET_CONTEXT_MGR already set 16:26:24 executing program 4: [ 714.102004][T22613] binder: 22612:22613 ioctl 40046207 0 returned -16 [ 714.112513][T22629] binder_alloc: 22612: binder_alloc_buf, no vma [ 714.119179][ T5] binder: release 22612:22613 transaction 4567 out, still active [ 714.141837][ T5] binder: undelivered TRANSACTION_COMPLETE [ 714.145614][T22628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:24 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:24 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24040000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300, 0x0}) [ 714.178590][ T5] binder: send failed reply for transaction 4567, target dead [ 714.272081][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.297563][T22644] binder: 22643:22644 got new transaction with bad transaction stack, transaction 4571 has target 22643:0 [ 714.317006][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.328836][T22647] binder_alloc: binder_alloc_mmap_handler: 22643 20001000-20004000 already mapped failed -16 [ 714.339684][T22644] binder: BINDER_SET_CONTEXT_MGR already set [ 714.345683][T22644] binder: 22643:22644 ioctl 40046207 0 returned -16 [ 714.352547][T22647] binder_alloc: 22643: binder_alloc_buf, no vma [ 714.359096][T22644] binder_alloc: 22643: binder_alloc_buf, no vma [ 714.359407][ T5] binder: send failed reply for transaction 4571 to 22643:22644 [ 714.381518][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000002", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @ipv4={[], [], @loopback}, 0x7ffe}, r1}}, 0x9) getpgrp(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:24 executing program 4: 16:26:24 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500, 0x0}) 16:26:24 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24050000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:25 executing program 4: [ 714.815358][T22659] binder: 22658:22659 got new transaction with bad transaction stack, transaction 4576 has target 22658:0 [ 714.848891][T22667] binder_alloc: binder_alloc_mmap_handler: 22658 20001000-20004000 already mapped failed -16 16:26:25 executing program 4: [ 714.865311][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.877563][T22667] binder_alloc: 22658: binder_alloc_buf, no vma [ 714.897228][T13392] binder: release 22658:22659 transaction 4576 out, still active [ 714.906394][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 714.915744][T13392] binder: undelivered TRANSACTION_COMPLETE [ 714.915831][T13392] binder: send failed reply for transaction 4576, target dead 16:26:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600, 0x0}) 16:26:25 executing program 4: 16:26:25 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24060000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 714.964775][T22669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.992778][T22679] binder_alloc: binder_alloc_mmap_handler: 22676 20001000-20004000 already mapped failed -16 16:26:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x1) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 715.057545][T22677] binder: BINDER_SET_CONTEXT_MGR already set [ 715.102409][T22677] binder: 22676:22677 ioctl 40046207 0 returned -16 [ 715.123742][T22687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 715.138778][T22688] binder_alloc: 22676: binder_alloc_buf, no vma [ 715.152977][T13392] binder: release 22676:22677 transaction 4580 out, still active [ 715.161108][T13392] binder: undelivered TRANSACTION_COMPLETE [ 715.166995][T13392] binder_release_work: 22 callbacks suppressed [ 715.167001][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.191912][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.198118][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.225938][T13392] binder: send failed reply for transaction 4580, target dead 16:26:25 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:25 executing program 4: 16:26:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x880, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x21, 0x7, 0x2, {{0x14, 'nodevsecurity$cpuset'}, 0x4}}, 0x21) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x4, 0x800) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000140)=0x78) 16:26:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700, 0x0}) 16:26:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) fadvise64(r0, 0x0, 0x9, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:25 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24070000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:25 executing program 4: [ 715.681757][T22701] binder_transaction: 1 callbacks suppressed [ 715.681770][T22701] binder: 22700:22701 got new transaction with bad transaction stack, transaction 4585 has target 22700:0 [ 715.752365][T22701] binder_transaction: 20 callbacks suppressed [ 715.752382][T22701] binder: 22700:22701 transaction failed 29201/-71, size 0-0 line 3044 [ 715.778933][T22713] binder_alloc: binder_alloc_mmap_handler: 22700 20001000-20004000 already mapped failed -16 [ 715.796179][T22701] binder: BINDER_SET_CONTEXT_MGR already set 16:26:25 executing program 4: 16:26:26 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24080000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 715.806802][T22701] binder: 22700:22701 ioctl 40046207 0 returned -16 [ 715.814823][T22713] binder: 22700:22713 transaction failed 29189/-3, size 0-0 line 3147 [ 715.835382][ T5] binder: release 22700:22701 transaction 4585 out, still active 16:26:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x100) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xfffffffffffffffb) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x80, &(0x7f0000ffd000/0x3000)=nil, 0x1}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:26 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:26 executing program 4: [ 715.857553][ T5] binder: undelivered TRANSACTION_COMPLETE [ 715.893158][ T5] binder: undelivered TRANSACTION_ERROR: 29201 16:26:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa00, 0x0}) [ 715.948534][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:26 executing program 4: 16:26:26 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24090000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 715.994690][ T5] binder: send failed reply for transaction 4585, target dead [ 716.020711][T22735] binder: 22732:22735 got new transaction with bad transaction stack, transaction 4589 has target 22732:0 16:26:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x80a, 0x1000000000000000) capget(&(0x7f00000000c0)={0x399f1336, r0}, &(0x7f0000000100)={0x2, 0xff, 0x1, 0x4f0ec0ff, 0x4, 0x8}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 716.069400][T22735] binder: 22732:22735 transaction failed 29201/-71, size 0-0 line 3044 [ 716.124692][T22744] binder_alloc: binder_alloc_mmap_handler: 22732 20001000-20004000 already mapped failed -16 [ 716.154396][T22735] binder: BINDER_SET_CONTEXT_MGR already set [ 716.174747][T22735] binder: 22732:22735 ioctl 40046207 0 returned -16 [ 716.196648][T22744] binder: 22732:22744 transaction failed 29189/-3, size 0-0 line 3147 [ 716.200927][ T5] binder: send failed reply for transaction 4589 to 22732:22735 [ 716.221054][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 716.227382][ T5] binder: undelivered TRANSACTION_COMPLETE [ 716.233825][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 716.240514][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:26 executing program 4: 16:26:26 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200, 0x0}) 16:26:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x200, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000000)=0x8) 16:26:26 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240a0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:26 executing program 4: [ 716.576227][T22758] binder: 22757:22758 got new transaction with bad transaction stack, transaction 4593 has target 22757:0 [ 716.608590][T22758] binder: 22757:22758 transaction failed 29201/-71, size 0-0 line 3044 16:26:26 executing program 4: [ 716.646183][T22774] binder_alloc: binder_alloc_mmap_handler: 22757 20001000-20004000 already mapped failed -16 [ 716.659054][T22758] binder: BINDER_SET_CONTEXT_MGR already set [ 716.665299][T22758] binder: 22757:22758 ioctl 40046207 0 returned -16 [ 716.683884][T22774] binder: 22757:22774 transaction failed 29189/-3, size 0-0 line 3147 16:26:26 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x1, 0x80000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x20000000000002, 0x0, @ioapic={0x1000, 0x4c, 0x200, 0xff, 0x0, [{0x7, 0x7, 0xffff, [], 0x9}, {0x8, 0x8, 0x1fbf, [], 0x100000001}, {0x63, 0x401, 0x7, [], 0xffffffff}, {0x4, 0x3, 0x7, [], 0xffff}, {0x3, 0xff, 0x4, [], 0x100000001}, {0x100000001, 0x5, 0x1000000, [], 0xfff}, {0x9, 0x1, 0x2, [], 0x2}, {0x6, 0x3f, 0x7, [], 0x2}, {0x7f, 0x3, 0x4, [], 0x1800}, {0x5, 0x3ff, 0x7}, {0xffffffffffffffff, 0x3, 0x4, [], 0xa851}, {0x7fff, 0x5089, 0x1, [], 0x57}, {0x401, 0x8, 0x4, [], 0x75d}, {0x4, 0x400, 0x5, [], 0xfff}, {0x1, 0x2973, 0x0, [], 0x6}, {0x4, 0x5, 0x10000}, {0x0, 0x3f, 0x10000, [], 0x7}, {0x6, 0x4ef38515, 0x2, [], 0x9}, {0x38, 0x8000, 0x100000000, [], 0xd0e0000000000000}, {0x3, 0x1, 0x100000001, [], 0xffffffffffffffdc}, {0x200, 0xce84, 0x7f, [], 0x80000001}, {0x100, 0x401, 0xc46, [], 0x6}, {0x8000, 0x4, 0x0, [], 0xffffffff}, {0x9, 0x800, 0x2, [], 0xc4}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x8000000000000002, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') r3 = accept4$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14, 0x80000) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000dc0)={@dev={0xfe, 0x80, [], 0x14}, @remote, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}, 0x0, 0x10000, 0xfffffffffffffffc, 0x400, 0xdf7e, 0x402c1, r4}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r6 = accept$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) accept$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) accept$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000600)) tee(r3, r1, 0x7f, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005e00)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000005f00)=0xe8) getsockname$packet(r0, &(0x7f0000006040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006080)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001080)={0x0, @remote, @multicast1}, &(0x7f00000010c0)=0x4) accept4$packet(r1, &(0x7f0000006200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006240)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006280)={'vcan0\x00', 0x0}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000005c0)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000006880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c050000", @ANYRES16=r2, @ANYBLOB="080329bd7800fbdbdf25020000000800010226601579c7e06eb560b86e5a886d755ed52affedc42d95f6cc38347988d5084d67500b9c43d83278227dac44478e21d95d350d7d78d1a391cb597654c46d568a4d2adb77d857235e366b31a3472b2fd9f22a9571ff159ed4074d5df5ab85982ab733004f590043b3d1c5ab9fc239d289804ef6a52f6929f8f5587cd33a51c081", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f424d74657276616c000000000000000800030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000101000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="3c00020030000100240001006d636173745f72656a6f69867276616c00000000000000000400002800010000080000000000000000000000000000", @ANYRES32=r11, @ANYBLOB="9c0002004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400fb000305ca790000080000b00000008048350002000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040000800701050000000100000201000000000007b00200000008000100", @ANYRES32=r12, @ANYBLOB="28020200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100008008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r15 = add_key(&(0x7f0000000e40)='cifs.idmap\x00', &(0x7f0000000e80)={'syz', 0x3}, &(0x7f0000000ec0)="3b166da0c672923a827879", 0xb, 0xfffffffffffffffb) keyctl$instantiate(0xc, r15, 0x0, 0x0, 0xfffffffffffffffe) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) fgetxattr(r6, &(0x7f0000000f00)=@random={'osx.', '.ppp0GPL\x00'}, &(0x7f0000000f40)=""/21, 0x15) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000003c0), &(0x7f0000000400)=0x4) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x200, 0x4}, {0xffff, 0x5}]}, 0x14, 0x3) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)='sit0\x00') getsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) 16:26:26 executing program 4: [ 716.706729][T13392] binder: release 22757:22758 transaction 4593 out, still active [ 716.708288][T22778] binder: 22757:22778 transaction failed 29189/-3, size 0-0 line 3147 [ 716.719693][T13392] binder: undelivered TRANSACTION_COMPLETE [ 716.763869][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 716.780171][T13392] binder: undelivered TRANSACTION_ERROR: 29189 16:26:27 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240b0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="e460cdfba83c7074230707000547", 0x0, 0x4000000000040004}, 0x28) 16:26:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000, 0x0}) 16:26:27 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 716.824283][T13392] binder: send failed reply for transaction 4593, target dead [ 716.916044][T22789] binder: 22788:22789 got new transaction with bad transaction stack, transaction 4598 has target 22788:0 16:26:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x189, 0x20000802, &(0x7f0000000040)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 716.974794][T22789] binder: 22788:22789 transaction failed 29201/-71, size 0-0 line 3044 [ 717.000546][T22801] binder_alloc: binder_alloc_mmap_handler: 22788 20001000-20004000 already mapped failed -16 16:26:27 executing program 0: getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400100, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000001c0)=0x1) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0x6, 0x0, 0x5, 0x20000000000000}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) [ 717.045687][T22789] binder: BINDER_SET_CONTEXT_MGR already set [ 717.065409][T22789] binder: 22788:22789 ioctl 40046207 0 returned -16 [ 717.078815][T22807] binder: 22788:22807 transaction failed 29189/-3, size 0-0 line 3147 [ 717.092445][T22789] binder: 22788:22789 transaction failed 29189/-3, size 0-0 line 3147 [ 717.105228][T13392] binder: release 22788:22789 transaction 4598 out, still active [ 717.132590][T13392] binder: send failed reply for transaction 4598, target dead 16:26:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x8c02) prctl$PR_SET_KEEPCAPS(0x8, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='^', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:27 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240c0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xfffffffffffffff8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r3 = getgid() keyctl$chown(0x4, r1, r2, r3) 16:26:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f00, 0x0}) 16:26:27 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 717.447386][T22822] binder: 22820:22822 got new transaction with bad transaction stack, transaction 4603 has target 22820:0 [ 717.467912][T22822] binder: BINDER_SET_CONTEXT_MGR already set [ 717.476251][T22829] binder_alloc_new_buf_locked: 7 callbacks suppressed [ 717.476259][T22829] binder_alloc: 22820: binder_alloc_buf, no vma [ 717.479480][T22822] binder: 22820:22822 ioctl 40046207 0 returned -16 16:26:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000813acebc91951fdea78900003a1ea383a6669ac37611da93d71cf433eab15d2484e0f2ef21371eb0ee36287c98f6b9c6b5d22d54a0df0c176575d14a13e9aa33e70100193961a18eedc89bf7d7ddf99eb37759d3e9e68d1c3b82", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250a0000001c000200080003000600000008000600ff07000008000500000000003000010008000b007369700008000b00736970000c0007002c00000008000000080002007f000000080004004e210000"], 0x60}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) write$eventfd(r3, &(0x7f0000000140)=0x416, 0x8) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000280)) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @rand_addr=0x2}, {0x2, 0x4e20, @remote}, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x7a9a, 0x20, 0xff}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 717.499887][T13392] binder: release 22820:22822 transaction 4603 out, still active [ 717.508158][T13392] binder_release_work: 1 callbacks suppressed [ 717.508162][T13392] binder: undelivered TRANSACTION_COMPLETE [ 717.529092][T22833] sg_write: process 4944 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. 16:26:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800, 0x0}) 16:26:27 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240d0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 717.572987][T13392] binder: send failed reply for transaction 4603, target dead 16:26:27 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) getpgrp(r1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(r2, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4004280}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="60000000160001002dbd7000fddbdf2502190000", @ANYRES32=r3, @ANYBLOB="06000800100400000800010000000000140006000010000003000000000000002703000014000300697064647030000000000000000000000800010000000080080002007f000001"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$unix(r2, &(0x7f0000000a00)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000340)="043f349cf123a720af6fe69897d87bf9a9107734830016150dd7b8d4a5f8f84fe0b54329b6811ab141492916082f36cd13932105654579f755c5f1a7dfa793aceecabb49fba61ef7df74da0329fa1e218c26d6ff93ca90fda5527ef5c85ce7e963f565d1ba4dac0dffce07ebea686419633671ebdc22006c8b9699a9c82373d28660719324da5615a901153960c3117b80301f6a5dcf2fb758ca0522fbe87e0a8106c99193e41c2495b11ae3cdd62a0331f846efd319d9848235c425bac3cebde838043feda2888930eed8266b9f18b7329ab8eb041cb65449f7935070f055b1bd62290921d1cda1cd45f38d2d118b7feb", 0xf1}, {&(0x7f0000000440)="961641ff4de8befdc22e90cbd937b22354742748e39a6f7da6cc64f8695e121e837f40e3a394af0e9494641d05cc70e7b92a2bdc14d5929277b5e94f9baf4955c9d505229e7d6968cd90e050215411f673b25a0fbd46dc83ac1eb6f5a866c65a732b40057cd4bc9252749ade8ddbd4c4a36870ce4e2d4e404e49e0296e7aed6d015114c13e337b9c518eba29e2bbefb3bec4c9f801594a53b1646343c79f84689ec76882fe8949c5155c39c1b3145d22d72342887b28b64246c5cd66a6ba824830b784e8", 0xc4}, {&(0x7f0000000780)="1ab1bfde97e77e97412b1d339a41bdf24e9f47f241ae5364a05471c191c298174f0a8328e6d1257cf3156ebf5c085f9e7cf0faa6ef52aafceba07b500f839029428ec9dd8e4be0caff9f995fa7f7e10e61eed78d8dcd4450c08ad2d7e00dcfe76b12b79864edde50544100ac434309534240c171d356edb522056cc148", 0x7d}, {&(0x7f0000000800)="ea5841cd262abf65547e62ad", 0xc}, {&(0x7f0000000840)="56eec5b16707e90b47e48fcece5887630faf48f010bb35dd02b77e1a4cf074636c536bce6e43ef041058c5ba7d7da60601f4394698c1dfb2a3a3ef1c02560a684983cb885ccdbd03c055f938bc1fbdf20029fb4410510e83e97f0fbdbf48f6d98c72c0347dc5e88a13f0ed6721e8dafa1d7e9f2eaf315c0c8b3c95dcc584b642d3688315d941ce5969", 0x89}, {&(0x7f0000000900)="89be30db67bb72121a78a11fe7897aaa876b92d8d277131cffa816f190d9c2442617270e8299656f0527f51c", 0x2c}], 0x6, &(0x7f00000009c0), 0x0, 0x1}, 0x8000) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 717.681048][T22848] binder: 22846:22848 got new transaction with bad transaction stack, transaction 4607 has target 22846:0 [ 717.768012][T22848] binder: BINDER_SET_CONTEXT_MGR already set [ 717.768031][T22854] binder_alloc: 22846: binder_alloc_buf, no vma [ 717.780890][T22848] binder: 22846:22848 ioctl 40046207 0 returned -16 [ 717.789584][ T5] binder: release 22846:22848 transaction 4607 out, still active [ 717.791911][T22848] binder_alloc: 22846: binder_alloc_buf, no vma [ 717.798217][ T5] binder: undelivered TRANSACTION_COMPLETE [ 717.810482][ T5] binder: send failed reply for transaction 4607, target dead 16:26:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x800454d3, 0x70a000) 16:26:28 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240e0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:28 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x1a5, 0x2}, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="62631d85", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) 16:26:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00, 0x0}) 16:26:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) getpgrp(r1) r2 = socket$inet(0x10, 0xf, 0x8) dup2(r2, r0) 16:26:28 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4000000004}}, 0x14}}, 0x0) 16:26:28 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240f0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 718.302076][T22877] binder: 22876:22877 got new transaction with bad transaction stack, transaction 4612 has target 22876:0 16:26:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext3\x00', 0x80000, &(0x7f00000001c0)='\x00') [ 718.375762][T22890] binder_alloc_mmap_handler: 2 callbacks suppressed [ 718.375778][T22890] binder_alloc: binder_alloc_mmap_handler: 22876 20001000-20004000 already mapped failed -16 [ 718.404176][T22877] binder: BINDER_SET_CONTEXT_MGR already set 16:26:28 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24100000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) sendmsg$tipc(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="2f3401b9f3c791ae8504cf0d0007c265e2714fc2d3b6941c2b426a32469dbac57aee63f0dc8148a13c8722c4a2c8387c1dd67da2d3796c96f58f8842ffb043", 0x3f}], 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 16:26:28 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 718.424163][T22877] binder: 22876:22877 ioctl 40046207 0 returned -16 [ 718.445038][T22895] binder_alloc: 22876: binder_alloc_buf, no vma 16:26:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = dup2(r0, r0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000001c0)=""/68) getpgrp(r1) r3 = socket$inet(0x10, 0x2, 0x0) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1f, 0xe0040) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000010000004cb50d0fab497a8d8eaa9e03b731de24f73d3fbbfcbd0c271f2e248b177a2e181fd550e32d85f4db9ee8d34ddeb2"]) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xf4272) [ 718.540563][T13392] binder: send failed reply for transaction 4612 to 22876:22877 16:26:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000, 0x0}) [ 718.583743][T13392] binder: undelivered TRANSACTION_COMPLETE [ 718.643583][T22916] binder: 22915:22916 got new transaction with bad transaction stack, transaction 4616 has target 22915:0 [ 718.674194][T22919] binder_alloc: binder_alloc_mmap_handler: 22915 20001000-20004000 already mapped failed -16 [ 718.704462][T22916] binder: BINDER_SET_CONTEXT_MGR already set [ 718.711755][T22916] binder: 22915:22916 ioctl 40046207 0 returned -16 [ 718.714077][T22919] binder_alloc: 22915: binder_alloc_buf, no vma [ 718.728644][T22916] binder_alloc: 22915: binder_alloc_buf, no vma [ 718.728710][T13392] binder: release 22915:22916 transaction 4616 out, still active [ 718.744724][T13392] binder: undelivered TRANSACTION_COMPLETE [ 718.751562][T13392] binder: send failed reply for transaction 4616, target dead 16:26:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="0100005ed36c07a2d86918f6f42800ba4c057628a31384b486ced469c2bbfd2a654b7d06c3e80e26abe54c8e4c3667278bdfe09b2a0a703f8c57de45eb072601e70cadf66fa151693932fa3fb1a42881715c7c3cc9", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000813acebc91951fdea78900003a1ea383a6669ac37611da93d71cf433eab15d2484e0f2ef21371eb0ee36287c98f6b9c6b5d22d54a0df0c176575d14a13e9aa33e70100193961a18eedc89bf7d7ddf99eb37759d3e9e68d1c3b82", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250a0000001c000200080003000600000008000600ff07000008000500000000003000010008000b007369700008000b00736970000c0007002c00000008000000080002007f000000080004004e210000"], 0x60}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) write$eventfd(r3, &(0x7f0000000140)=0x416, 0x8) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000280)) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @rand_addr=0x2}, {0x2, 0x4e20, @remote}, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x7a9a, 0x20, 0xff}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = dup(r0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000140)={0x40, 0x10, &(0x7f00000001c0)="9b6022f1ba7749c0f4d67d85cf2611d42b2a6297c97bb3c18969b48a02d6accfdc7549be9d586e6f96ba8c5c77f741369e8806d7ad559f010fb2141471d6dcdc75171e74b3604037d04fec69a99101a96c01b5a9ac530bfcbfbd12065ff64de27d18a42a5d3027646401a598430f2c245f804e5e1c5113c73dd16401cf1eeda89b5e5bf0f70e6432b86db5fa4a0bd95c1da1a73c3a90381f0df6933827450b433a068b7db82a909f64b1b3ed83378f36f7725c481ed6da283181535b25ea487c6bd872b9b9c4007be216c13b54f32ba33093aea2ded0e7f99d69fa719cb2ab4416e2dbda328520aa1d0a", {0x800, 0x5, 0x30314742, 0x3, 0x6, 0x5, 0x5, 0xffffffff}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000002c0)) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) 16:26:29 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24110000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:29 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800, 0x0}) [ 719.137544][T22932] binder: 22924:22932 got new transaction with bad transaction stack, transaction 4621 has target 22924:0 [ 719.157824][T22937] binder_alloc: binder_alloc_mmap_handler: 22924 20001000-20004000 already mapped failed -16 [ 719.168333][T22932] binder: BINDER_SET_CONTEXT_MGR already set [ 719.168353][T22937] binder_alloc: 22924: binder_alloc_buf, no vma 16:26:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x80a, 0x1000000000000000) capget(&(0x7f00000000c0)={0x399f1336, r0}, &(0x7f0000000100)={0x2, 0xff, 0x1, 0x4f0ec0ff, 0x4, 0x8}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 719.177953][T22932] binder: 22924:22932 ioctl 40046207 0 returned -16 [ 719.184317][T22939] __nla_parse: 31 callbacks suppressed [ 719.184335][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 719.207331][T22930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:26:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, r1) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000200)=0xfffffffffffffffc) r3 = getpgrp(0xffffffffffffffff) r4 = socket$inet(0x10, 0x2, 0x0) r5 = getpgrp(r3) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r4, &(0x7f0000000240)={r2, r4, 0x1000}) r6 = dup3(r0, r0, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 719.239940][T22940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 719.249997][T13392] binder: send failed reply for transaction 4621 to 22924:22932 [ 719.259979][T13392] binder: undelivered TRANSACTION_COMPLETE [ 719.272067][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00, 0x0}) 16:26:29 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24120000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 719.300755][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:29 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) r2 = socket$inet(0x10, 0x406, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000240)={{0xfffffffffffffffc, 0x4, 0xff, 0x1, 0x1, 0xae}, 0xfffffffffffffffb, 0x7f, 0x495}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000300)={0xca7, @broadcast}) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000200)={0x0, 0x100, 0x80000001, [], &(0x7f00000001c0)=0x282}) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000340)={0x10, 0x1, {0x54, 0x1, 0x7, {0x4c, 0x3}, {0xfffffffffffffffb, 0xfffffffffffffff9}, @cond=[{0x4, 0x1, 0x4, 0x3, 0x7fffffff, 0x9}, {0x3f, 0x1, 0x6, 0x1, 0x1, 0x3c}]}, {0x56, 0x5, 0xfffffffffffffff9, {0x3, 0xffffffffffffff81}, {0x30f7, 0x8257}, @const={0x7f, {0x4, 0x7fffffff, 0x7, 0x6434d3a2}}}}) [ 719.375965][T22957] binder: 22955:22957 got new transaction with bad transaction stack, transaction 4625 has target 22955:0 [ 719.396637][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 719.463413][T22961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 719.472136][T22965] binder_alloc: binder_alloc_mmap_handler: 22955 20001000-20004000 already mapped failed -16 [ 719.503173][T22957] binder: BINDER_SET_CONTEXT_MGR already set [ 719.509552][T22957] binder: 22955:22957 ioctl 40046207 0 returned -16 [ 719.517328][T22965] binder_alloc: 22955: binder_alloc_buf, no vma [ 719.529715][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 719.543041][ T5] binder: release 22955:22957 transaction 4625 out, still active [ 719.556745][ T5] binder: undelivered TRANSACTION_COMPLETE [ 719.568540][ C0] net_ratelimit: 26 callbacks suppressed [ 719.568549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.580102][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 719.596262][ T5] binder: send failed reply for transaction 4625, target dead [ 719.648519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.656091][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 719.728713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 719.734768][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 719.808515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.814487][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 719.820361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.826125][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket$inet6_sctp(0xa, 0x80000002, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r1, 0xffffffff}, &(0x7f0000000080)=0x8) 16:26:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, r1) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000200)=0xfffffffffffffffc) r3 = getpgrp(0xffffffffffffffff) r4 = socket$inet(0x10, 0x2, 0x0) r5 = getpgrp(r3) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r4, &(0x7f0000000240)={r2, r4, 0x1000}) r6 = dup3(r0, r0, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:30 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24130000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:30 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x7, &(0x7f00000000c0)='-em1-^\x00'}, 0x30) getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgrp(r1) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400, 0x0}) 16:26:30 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 719.988127][T22985] binder_alloc: binder_alloc_mmap_handler: 22978 20001000-20004000 already mapped failed -16 [ 720.041699][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 720.053429][T22984] binder: BINDER_SET_CONTEXT_MGR already set [ 720.060923][T22984] binder: 22978:22984 ioctl 40046207 0 returned -16 [ 720.070090][T22989] binder_alloc: 22978: binder_alloc_buf, no vma [ 720.070638][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00, 0x0}) [ 720.076803][ T5] binder: release 22978:22984 transaction 4629 out, still active [ 720.107172][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:30 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24140000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) r2 = socket$inet(0x10, 0x406, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000240)={{0xfffffffffffffffc, 0x4, 0xff, 0x1, 0x1, 0xae}, 0xfffffffffffffffb, 0x7f, 0x495}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000300)={0xca7, @broadcast}) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000200)={0x0, 0x100, 0x80000001, [], &(0x7f00000001c0)=0x282}) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000340)={0x10, 0x1, {0x54, 0x1, 0x7, {0x4c, 0x3}, {0xfffffffffffffffb, 0xfffffffffffffff9}, @cond=[{0x4, 0x1, 0x4, 0x3, 0x7fffffff, 0x9}, {0x3f, 0x1, 0x6, 0x1, 0x1, 0x3c}]}, {0x56, 0x5, 0xfffffffffffffff9, {0x3, 0xffffffffffffff81}, {0x30f7, 0x8257}, @const={0x7f, {0x4, 0x7fffffff, 0x7, 0x6434d3a2}}}}) [ 720.143812][ T5] binder: send failed reply for transaction 4629, target dead 16:26:30 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xa2}, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000180)={{0x5, 0x7, 0xb89, 0x3ff, '\x00', 0x9}, 0x1, 0x20000056, 0x1, r0, 0x4, 0x1f800000000, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfa\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x13\xfd%\x00\x00\x00\x00\x00\x00\x00\x00\xa2\x16k.\x00\x00\x03\x00', &(0x7f0000000140)=['\x00', ']\x00', 'vboxnet1\x00', 'selinux\x00'], 0x14, [], [0x2, 0xc3b5, 0x200, 0x5e70]}) [ 720.197784][T23001] binder_alloc: binder_alloc_mmap_handler: 22998 20001000-20004000 already mapped failed -16 [ 720.218969][T22999] binder: BINDER_SET_CONTEXT_MGR already set [ 720.264472][T23001] binder_alloc: 22998: binder_alloc_buf, no vma 16:26:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0xa11f, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="95b6bac4", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000080)={0x0, 0x5d6a, 0x300b}) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xb, 0x200800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sync_file_range(r3, 0xe79e, 0x3ff, 0x1) [ 720.304956][ T5] binder: release 22998:22999 transaction 4633 out, still active [ 720.329890][T22999] binder: 22998:22999 ioctl 40046207 0 returned -16 [ 720.345290][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x400006, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x2, 0x4, 0x7) arch_prctl$ARCH_SET_CPUID(0x1012, 0x100000000) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f00000000c0)=""/187, &(0x7f00000001c0)=0xbb) r2 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x3, 0x3}, 0x10) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 720.378183][ T5] binder_release_work: 22 callbacks suppressed [ 720.378190][ T5] binder: undelivered TRANSACTION_ERROR: 29201 16:26:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 16:26:30 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24150000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:30 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 720.486509][T23033] binder: BINDER_SET_CONTEXT_MGR already set [ 720.556612][T23033] binder: 23030:23033 ioctl 40046207 0 returned -16 [ 720.568238][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 720.580442][ T5] binder: send failed reply for transaction 4633, target dead 16:26:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x5, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) [ 720.637327][T23038] binder_alloc: binder_alloc_mmap_handler: 23030 20001000-20004000 already mapped failed -16 16:26:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000, 0x0}) [ 720.678297][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 720.704109][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:30 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:30 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24160000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) getpgid(0xffffffffffffffff) r1 = socket$inet(0x10, 0x5, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 16:26:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x80040) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000300)=[{}], 0x1, 0x9, &(0x7f0000000340)={0x8}, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000480)=0x1f) getpgrp(0xffffffffffffffff) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000004c0)=0x7) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000001c0)={0x9, @raw_data="d6482a22c4d609caf180e16a1f3e5215d14ca0987e955c51a99b725503f8d86cf1e8c44bbf56972ace2a895f3334afde56f63c571d896884076dd430481d42e6f5166b14e92623f764f4215a79e9a6aa1990cd9c82c1f7c1519267c8bcec5b3b16baf7b9a1e6b6b6be43582f23aa8cb1f1b734865e454834377a25af954d647dba36da5294bec79481c8b4df499dd86f7a86f4c1034740db189157143a0e8cfc2fa6f59a02b7f99fdff2a777312bf372f8a4314d32fb103def6cd6dc714cb9b49ce3a686c75793cb"}) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000380)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) [ 720.862992][T23052] binder_transaction: 2 callbacks suppressed [ 720.863007][T23052] binder: 23049:23052 got new transaction with bad transaction stack, transaction 4640 has target 23049:0 16:26:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = msgget$private(0x0, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x6, 0x80000) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x110, r2, 0x0) msgctl$IPC_RMID(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ad48235524130cc5bad284e8983fc7b6268e3966cf055d90f15a3", 0x59}], 0x1}, 0x40) [ 720.984531][T23052] binder_transaction: 20 callbacks suppressed [ 720.984549][T23052] binder: 23049:23052 transaction failed 29201/-71, size 0-0 line 3044 [ 721.046060][T23071] binder_alloc: binder_alloc_mmap_handler: 23049 20001000-20004000 already mapped failed -16 [ 721.064478][T23052] binder: BINDER_SET_CONTEXT_MGR already set [ 721.072708][T23052] binder: 23049:23052 ioctl 40046207 0 returned -16 [ 721.079943][T23071] binder: 23049:23071 transaction failed 29189/-3, size 0-0 line 3147 [ 721.099994][T13392] binder: release 23049:23052 transaction 4640 out, still active [ 721.122072][T13392] binder: undelivered TRANSACTION_COMPLETE 16:26:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32, @ANYRES64=0x0], @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f00000004c0)=0x7) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0xe39e, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b010405150100008e0100000400000088020000000000000000000000000000cedc22f4e6de39fc4e24c27016fbb3450cbd3d2f687dd7236ebe1a9e1dcd402d65314d610558ff4a109654b5385271a3f0de62a0ddc502d34a15deabc715c08a1ccbbfa55cdfec20be0b7e61a21de47b27ae50906f27751564962939e9101e8df076ba256675b9238c3157acef020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x28e) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r2, 0x120, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48080}, 0x4008081) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xffff}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x105480, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r4, 0x80000, r5}) pwritev(r3, &(0x7f0000000b40)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="83b4756526d72c97b1cfe53ff9036916961afd37a5c3f5adc9fcfed6e546e67619", 0x21}, {&(0x7f0000000840)="f724995f329464cdb25cbc6d3168f7ccf4dfdd916ba04db8e976e84a355645bdb5f6108bdd5c85ff6c20c1113fe1798679afe9940d5cab56281d605c03ecc368cb3834299f657f6a090cacbde3bff366e2a131db4a864e639a8e667acd4a0fd96bd6eeea9598174cf87d640bfa4991ba13cf80b4390b66fb3ecb9b56b4f108f745426d486f9522bfb736870343e4562068d011cc4309f0d7e8f308a4713bd98bb3cdff2e799af620", 0xa8}, {&(0x7f0000000900)="2810ad60edbd3bef5375bc921f16c087ea7bacfbdb10e83bea1f0865d47b0fd02de93c1fcc570f7ecb2ce84a0d08978a97f354a0e0bca900e998d3d098e5d88a6f36", 0x42}, {&(0x7f0000000980)="c17a4e4db597bc0b18d515987329380cd98eb4829673063795bdddab", 0x1c}, {&(0x7f00000009c0)="4ac606fb38eb96b927c248eba1c501e81d2ba4cbf1fab065a9bf079b06bc83d76f6714539b886767d88b3247c02477b91d424992cc4f38ebf98e634f92acef7f2d35d50ab900f84fd4284bf2835b1e64bab5319e354a19637057806da0771b6fd24982d2a12fa255547c61fb3b2f6907ab58309dc0e19e3cb45c44249aa0c5885dac7d95deeb5f73856095fc8ad68efa34cc2fe5d25760d4af7d44d2f4c5", 0x9e}, {&(0x7f0000000a80)="ed55ebe3a9a14846b02b10b83e74448a26a64c0ee165334c457c36400e08de5388ffeba43d090f2bcb4cc598fbde4f36795c8696a41e877db5c11914d4810bb42b579a68e891f9a93a4b76d3ce28e220cb396077ea96e90f", 0x58}, {&(0x7f0000000b00)="c4", 0x1}], 0x8, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 16:26:31 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24170000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:31 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x200000) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r7 = getpgid(0xffffffffffffffff) r8 = geteuid() ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000001840)={0x9, 0xff, 0x3, 0x800, 0x4, 0x1f}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0x1ec) sendmmsg$unix(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="2c7cf6dbf49d20b521f6150e443a63a9baa7e767c7e864979d7bb5183388c6b386be044023e06bdb76f9a461ab072f5db1d1dbc09781ce540b9a3109948bb056e2def55d7aa429967eb7f9632aba412558a6f935bae7f9a1d8", 0x59}, {&(0x7f0000000240)="c3352a5d756f207ad8dad342eb8bb27b942d75116c91c9d2c44b409d8d05c9008964212b21907a76e845ad33d146cdb5cc26e1b61f0592cc08", 0x39}, {&(0x7f0000000280)="17372782e8bd697ef6a4448cd76407f12c76bd3250b851fde132e35291e37426db8ae7fd144eac8dda57cefa0e26338754457257d417751167b0a81099ed5152961216142af776325ae2d975f47bc909fa5a3a3588cdddd82913db25492b6f2bb25b2762b701eac47248ddbb0fcf00939a7760af1cc33721a17f6eb683b399722220a8ee2c2f48c3e717f2d54f7e0c5f7c85deddb9a2cacdde34487d50fcac568c2b69ee52fc2a5bf4cda5680faef4c50d8341092429f1c24b761a242e959e3af6df625377114c98647ea0ce30fa99d9ccca64422f28287eb60c07061bc1057b47aff4a32720b0", 0xe7}], 0x3, &(0x7f0000000640)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0xc800}], 0x1, 0x40080c0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r10 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xd14e33c899c51956}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r10, 0x120, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x20004000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r11 = socket$inet(0x10, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:31 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = msgget$private(0x0, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x6, 0x80000) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x110, r2, 0x0) msgctl$IPC_RMID(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ad48235524130cc5bad284e8983fc7b6268e3966cf055d90f15a3", 0x59}], 0x1}, 0x40) 16:26:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3000000, 0x0}) [ 721.144705][T13392] binder: undelivered TRANSACTION_ERROR: 29201 [ 721.167320][T13392] binder: undelivered TRANSACTION_ERROR: 29189 [ 721.187283][T13392] binder: send failed reply for transaction 4640, target dead [ 721.214625][T23083] binder: 23082:23083 got new transaction with bad transaction stack, transaction 4644 has target 23082:0 16:26:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x80040) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000300)=[{}], 0x1, 0x9, &(0x7f0000000340)={0x8}, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000480)=0x1f) getpgrp(0xffffffffffffffff) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000004c0)=0x7) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000001c0)={0x9, @raw_data="d6482a22c4d609caf180e16a1f3e5215d14ca0987e955c51a99b725503f8d86cf1e8c44bbf56972ace2a895f3334afde56f63c571d896884076dd430481d42e6f5166b14e92623f764f4215a79e9a6aa1990cd9c82c1f7c1519267c8bcec5b3b16baf7b9a1e6b6b6be43582f23aa8cb1f1b734865e454834377a25af954d647dba36da5294bec79481c8b4df499dd86f7a86f4c1034740db189157143a0e8cfc2fa6f59a02b7f99fdff2a777312bf372f8a4314d32fb103def6cd6dc714cb9b49ce3a686c75793cb"}) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000380)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) [ 721.285195][T23083] binder: 23082:23083 transaction failed 29201/-71, size 0-0 line 3044 [ 721.308783][T23094] binder_alloc: binder_alloc_mmap_handler: 23082 20001000-20004000 already mapped failed -16 16:26:31 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:31 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24180000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 721.342647][T23083] binder: BINDER_SET_CONTEXT_MGR already set [ 721.392113][T23083] binder: 23082:23083 ioctl 40046207 0 returned -16 [ 721.406192][ T5] binder: send failed reply for transaction 4644 to 23082:23083 16:26:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0xffffffffffffff27) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000000, 0x0}) [ 721.452842][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) dup2(r1, r2) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 721.493682][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 721.524754][T23116] binder: 23115:23116 got new transaction with bad transaction stack, transaction 4647 has target 23115:0 16:26:31 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24190000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:31 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 721.543148][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 721.591811][T23116] binder: 23115:23116 transaction failed 29201/-71, size 0-0 line 3044 [ 721.629049][T23130] binder_alloc: binder_alloc_mmap_handler: 23115 20001000-20004000 already mapped failed -16 16:26:31 executing program 4: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x200000) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r7 = getpgid(0xffffffffffffffff) r8 = geteuid() ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000001840)={0x9, 0xff, 0x3, 0x800, 0x4, 0x1f}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0x1ec) sendmmsg$unix(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="2c7cf6dbf49d20b521f6150e443a63a9baa7e767c7e864979d7bb5183388c6b386be044023e06bdb76f9a461ab072f5db1d1dbc09781ce540b9a3109948bb056e2def55d7aa429967eb7f9632aba412558a6f935bae7f9a1d8", 0x59}, {&(0x7f0000000240)="c3352a5d756f207ad8dad342eb8bb27b942d75116c91c9d2c44b409d8d05c9008964212b21907a76e845ad33d146cdb5cc26e1b61f0592cc08", 0x39}, {&(0x7f0000000280)="17372782e8bd697ef6a4448cd76407f12c76bd3250b851fde132e35291e37426db8ae7fd144eac8dda57cefa0e26338754457257d417751167b0a81099ed5152961216142af776325ae2d975f47bc909fa5a3a3588cdddd82913db25492b6f2bb25b2762b701eac47248ddbb0fcf00939a7760af1cc33721a17f6eb683b399722220a8ee2c2f48c3e717f2d54f7e0c5f7c85deddb9a2cacdde34487d50fcac568c2b69ee52fc2a5bf4cda5680faef4c50d8341092429f1c24b761a242e959e3af6df625377114c98647ea0ce30fa99d9ccca64422f28287eb60c07061bc1057b47aff4a32720b0", 0xe7}], 0x3, &(0x7f0000000640)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0xc800}], 0x1, 0x40080c0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r10 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xd14e33c899c51956}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r10, 0x120, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x20004000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r11 = socket$inet(0x10, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 721.651407][T23116] binder: BINDER_SET_CONTEXT_MGR already set [ 721.673444][T23116] binder: 23115:23116 ioctl 40046207 0 returned -16 [ 721.673685][T23130] binder: 23115:23130 transaction failed 29189/-3, size 0-0 line 3147 [ 721.704891][ T5] binder: release 23115:23116 transaction 4647 out, still active [ 721.717864][ T5] binder: undelivered TRANSACTION_ERROR: 29201 16:26:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5000000, 0x0}) 16:26:31 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="241a0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:31 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 721.769682][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 721.807061][ T5] binder: send failed reply for transaction 4647, target dead [ 721.850994][T23152] binder: 23149:23152 got new transaction with bad transaction stack, transaction 4651 has target 23149:0 [ 721.879730][T23152] binder: 23149:23152 transaction failed 29201/-71, size 0-0 line 3044 [ 721.893669][T23152] binder: BINDER_SET_CONTEXT_MGR already set 16:26:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000001c0)=""/100) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1, 0x0, 0x3, 0xfffffffffffffff8}, {0x4, 0x6aa1, 0x7, 0x1}, {0x6, 0x200, 0x2}]}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc8080, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, 0xfc2c}, 0x2) [ 721.900893][T23159] binder: 23149:23159 transaction failed 29189/-3, size 0-0 line 3147 [ 721.911358][T23152] binder: 23149:23152 ioctl 40046207 0 returned -16 [ 721.911931][ T5] binder: release 23149:23152 transaction 4651 out, still active [ 721.934115][ T5] binder: send failed reply for transaction 4651, target dead 16:26:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0}) 16:26:32 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24280000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 722.039438][T23168] binder: 23167:23168 got new transaction with bad transaction stack, transaction 4655 has target 23167:0 [ 722.082425][T23168] binder: 23167:23168 transaction failed 29201/-71, size 0-0 line 3044 [ 722.110653][T23168] binder: BINDER_SET_CONTEXT_MGR already set [ 722.118789][T23174] binder: 23167:23174 transaction failed 29189/-3, size 0-0 line 3147 [ 722.127107][T23168] binder: 23167:23168 ioctl 40046207 0 returned -16 [ 722.134148][T13392] binder: release 23167:23168 transaction 4655 out, still active [ 722.142701][T13392] binder: send failed reply for transaction 4655, target dead 16:26:32 executing program 3: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r0 = open(&(0x7f0000000100)='./file0\x00', 0xe80, 0x2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:26:32 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x9) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = semget(0x1, 0x3, 0x2) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f00000001c0)=""/221) 16:26:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) sendfile(r1, r3, 0x0, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400040, 0x10) write$P9_RUNLINKAT(r4, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0}) 16:26:32 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24600000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 722.392983][T23188] binder: 23187:23188 got new transaction with bad transaction stack, transaction 4659 has target 23187:0 16:26:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) fadvise64(r0, 0x0, 0x4, 0x3) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 722.445751][T23188] binder: 23187:23188 transaction failed 29201/-71, size 0-0 line 3044 [ 722.469470][T23188] binder: BINDER_SET_CONTEXT_MGR already set [ 722.478753][T23188] binder: 23187:23188 ioctl 40046207 0 returned -16 16:26:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x9) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = semget(0x1, 0x3, 0x2) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f00000001c0)=""/221) 16:26:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x5) r3 = socket$inet(0x2, 0x4, 0x7fffffff) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={r2, 0x5}, &(0x7f00000000c0)=0x8) [ 722.493288][T23197] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 722.493296][T23197] binder_alloc: 23187: binder_alloc_buf, no vma [ 722.515251][ T5] binder: release 23187:23188 transaction 4659 out, still active [ 722.529808][ T5] binder_release_work: 3 callbacks suppressed [ 722.529812][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:32 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24f00000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:32 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa000000, 0x0}) 16:26:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x9) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = semget(0x1, 0x3, 0x2) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f00000001c0)=""/221) [ 722.623921][ T5] binder: send failed reply for transaction 4659, target dead 16:26:32 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x14200, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 722.703308][T23219] binder: 23217:23219 got new transaction with bad transaction stack, transaction 4663 has target 23217:0 16:26:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x9) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = semget(0x1, 0x3, 0x2) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f00000001c0)=""/221) 16:26:32 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000300250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 722.815119][T23232] binder: BINDER_SET_CONTEXT_MGR already set [ 722.837634][T23233] binder_alloc: 23217: binder_alloc_buf, no vma 16:26:33 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000008c0)=0x0) ioctl$int_out(r0, 0x5462, &(0x7f00000000c0)) capget(&(0x7f0000000900)={0x39980732, r2}, &(0x7f0000000940)={0x52, 0x6, 0x9, 0x100000001, 0x8, 0x4}) sendmsg(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="d751efa5425f3980d789ed2d0440af9595f0a47ba42265dba2fef88786dfabdff12de08e1d7dd6e9453600318d940e485bbbeaacf59293cfc22dfb375c03045c61e7c20627db9b81d4b8b22ba01e4d7a2a3fb521a6012a58fe8133070fb07ec409f036fb21d60d239b09259eadf8d6c25bc16ddfd9fb19d6d69ea31e312135e6c3f40dbc33609c3a95c3bae385389c2793de28a7deda629bd5b3723022a67d080cc2d4036b623ebff5a92851a75d9af2f37d047d76efe9566d5d327857ac4f2f16b3cf04df5c5eb14b771a8e1c9622dde652b34932f59264117e598de9d73defb1edb5cafe", 0xe5}, {&(0x7f0000000100)="333320c7627f7e9ad633be06a54be67ae15c02a377b887703127ceef4e651414d61adb4c0166b017938af0de5574bc1ef46d012ae5f45ea0c18c37e9c07a8617729152e6c1f808920636448e9337e73e833cc6db38", 0x55}, {&(0x7f00000002c0)="2aae0baed2029f8199da4a1c4ddcd36420906cefeff062288dcfd9a049523e18431afdda7232f79b752e3918a3c86f2450539b5cfdf3a632bd1cefa81207033f16f5a0ec48b14714772a21322e13b813ae6fe2b3cfe7587cc2ae88b4e7d4f2b02a585cc71a35ed1f5d94e4679f17b0daa49083fbf4cbc5264313e86ba4b71fe93db3ae116b1d7dc41174", 0x8a}, {&(0x7f0000000380)="bf63e4c04e0851e77727548efab4d4da477da97a62c79e59d2a1eae273fb97fa42ef39b631180ee5948b62320ec05933bed4c1a874485b78e96cab48dc13e0c2ac3660726ba2e81ed7880d78582f6b521d4787822dc8424998d58f15d494", 0xfffffffffffffe35}, {&(0x7f0000000a40)="31bc2e7b89462f8fb50cf42a11214ce3aedfadfec228f26577335c3b38e982489d80ef243781f5e1cc14ec5997abca3bc1aab50f36ae4e287139b17afddde1f9e8d309e795a2fcd70d9a9a6db5c0f84fa8615230e2b8d9d4ddeb68bd4e7c3c204f5f", 0x62}, {&(0x7f0000000480)="967fdc80094273617d3632701afa70750a8f6b682c3474d929d2344e1df0e07a02c8448deca1909cf417f8000000db8ca5d101ee613069b195637a7a7aaaab93870c84f45363b592cda094a526d9ce0a3cb183b2bd1749de3a0d776f1087a20aa578bc6d779d54a31e3e774bfbfb8a3484702353810b5b5f67b7cdb1c83fadf2bf4b6140d9087b556a8c12dc4d13416f81447d89d48492e74b0275fb2dd93577fa38", 0xa2}, {&(0x7f0000000540)="0d6e617d1a7752e2aae44687ceabe4e84015f173a0ca7d84136b056873d8df598f5edeb0a20ab8cfa8bd1386e709f6a32ec7a599127a535534a6ee8c230a4765a7b3a5e2d23f99a96040d1561c83ef7f2bed5477b901e1ae9896bf75efc11260282f99874aebab7a0d05b074991e5d1ae48d8faf5a099790ab676065faf194f5fc0d15237c104d9137edbaec34c0e0031adba93fbc87422c0d653889997733ab7e1f11c49c67b990704b97dc3853996b7e84e7c0e059a85396bb82da2309ff746ba0fdc50e00279a69e36a25da66dbca0b82bb4336ef52f08c7f85294f364a9794f3c6041ed6", 0xe6}], 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="08010000000000000f010000db0e00009c9b1c9356f96cd117cf3967c2937f1e7590a1d4d10814c2f22b1b5a0e17f7006f2432748c26f95cc77d52e0842835a23fa15dd86a2b3a4aa6325e70176efc5e33f8b65a02d582fde93824f89a5c393bf7df4503fcc725e98701e5d290e3aa3d0ea05a67e08fad5abfb2db67f46e9b61181ccfe76c9a9e4587a55666324a737c395aeb1bb44c9fe115ae8e6b2b8c27187ddfcbc5fcdb0139b1d24670faebf61c64e45679cc90b6c4415a7b71d09ca28e64e8945cef1e115d76639c69cc9c4ee4ecc6b49212e116b8b95cdcdee0011df35173a3c40cc511468b3634e945c9cffa5c1d177ae3e5336a68527d5ba776d36012a91ccb1825562a3e00b00000000000000014010000090000001074cae2d11c8907e0729a49cf16d06ba65844daab2ae960ad7374390290a6189b464d8d3a516433fd2845d30b05ac924947624e6fdb1972566726f2e33dcbd4eb1b12df92fb699e968cb1bae1b98da48b0dcbb439257e6caaccebafe7449b00e4a9356db188dc0afaf8221421dfa8cb9bb8125697e6a6ac6b7056accabacff99bb1ae6bd8ebf4fab2c3338b83b91b85ab74a6d888b61458b2cc6faf4c09611118000000050000000000000000000000000000"], 0x1b8}, 0xd3ae273e72ddff78) getpgrp(0xffffffffffffffff) socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r3 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) 16:26:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) [ 722.875703][T23232] binder: 23217:23232 ioctl 40046207 0 returned -16 [ 722.887206][ T5] binder: release 23217:23219 transaction 4663 out, still active [ 722.896783][T23219] binder_alloc: 23217: binder_alloc_buf, no vma [ 722.908395][ T5] binder: undelivered TRANSACTION_COMPLETE [ 722.950272][ T5] binder: send failed reply for transaction 4663, target dead 16:26:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000240)={0x2, 'syz1\x00'}) r2 = socket$inet(0x10, 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000804) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r4, 0xcbe}, &(0x7f0000000500)=0x8) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'cgroup]\x00'}) setsockopt$inet_dccp_int(r2, 0x21, 0x1, &(0x7f00000001c0)=0x98, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x190, 0x1, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x919, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x7, 0x100, 0x2, 0x100000000, 0xfffffffffffffffc, 0x0, 0x3f, 0x4, 0x0, 0x2, 0x1, 0x401, 0x5, 0x2, 0x2, 0x8, 0x9, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x810, 0x0, 0x200, 0x9, 0x9, 0x1, 0x6}, r0, 0x0, 0xffffffffffffff9c, 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = semget$private(0x0, 0x3, 0x80) semctl$IPC_INFO(r5, 0x2000003, 0x3, &(0x7f0000001200)=""/4096) 16:26:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000008793ac68361d2a0f2659c5353591bfe3746fff1eff2f6fd5fdae8c212126617585c8aa8808991ae3d80cccf7863623", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:33 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000500250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12000000, 0x0}) 16:26:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = getpgrp(0xffffffffffffffff) getpgrp(r0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5c3, 0xc2c1) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[0x100000001, 0x8, 0x3, 0x400, 0x2, 0xffffffffffffff02, 0x9, 0x3]}) 16:26:33 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 723.454792][T23266] binder: 23262:23266 got new transaction with bad transaction stack, transaction 4668 has target 23262:0 16:26:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x206900) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="e145e45b42f600220eade61d9c940e12", 0x10) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x0) [ 723.529223][T23274] binder_alloc_mmap_handler: 4 callbacks suppressed [ 723.529239][T23274] binder_alloc: binder_alloc_mmap_handler: 23262 20001000-20004000 already mapped failed -16 [ 723.546615][T23274] binder: BINDER_SET_CONTEXT_MGR already set [ 723.554386][T23274] binder: 23262:23274 ioctl 40046207 0 returned -16 [ 723.562423][T23275] binder_alloc: 23262: binder_alloc_buf, no vma [ 723.569376][T13392] binder: release 23262:23266 transaction 4668 out, still active 16:26:33 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000600250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 723.577170][T13392] binder: undelivered TRANSACTION_COMPLETE 16:26:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x20000000, 0x0}) [ 723.669692][T13392] binder: send failed reply for transaction 4668, target dead 16:26:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000300001d6fe7a766b085e71985680c1ba3a20400ff7e280000ba16a0aa1c0009b3ebea41287d5d7e6397d90f15a300000000005d32b9531dcb9309b579f13ddcd86607e4abc3472fa7a578bd7261497267f7c0e19d647761c38171f9810070e6763de4fbf42211a348f7eb8087e869c542088ae7f4ca1a26b28809f3a0887949e45438e38ad722ac8f4e5e3491b35efd0568ada593d716ebe57f11466b3222b4bfa0dcf231ef1dc426eccb89a4b0b69adcdda2ae48e1df3e69e0475afafc69aa4bba0670fd2b372c9c7c63d3ad8de14d55ee41cdd4bf16f4166cfe3b31dd82f0682c04fadc89e94d575d8d02cb6b78367b5a4ad524dd024413c9bb512dbf6b5f03152f4a7aa7013d4d61177db2c3ab19191a3b2219ac1e626b2f5100d013a336dff95b78cb3740cdb52014665ce5cd9d17055e58be", 0x14b}], 0x375}, 0x0) 16:26:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) [ 723.848358][T23289] binder: 23287:23289 got new transaction with bad transaction stack, transaction 4672 has target 23287:0 16:26:34 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:34 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000700250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 723.912676][T23292] binder_alloc: binder_alloc_mmap_handler: 23287 20001000-20004000 already mapped failed -16 [ 723.919225][T23289] binder: BINDER_SET_CONTEXT_MGR already set [ 723.940255][T23296] binder_alloc: 23287: binder_alloc_buf, no vma [ 723.953345][T23289] binder: 23287:23289 ioctl 40046207 0 returned -16 [ 723.985737][T23292] binder_alloc: 23287: binder_alloc_buf, no vma [ 724.000809][T13392] binder: undelivered TRANSACTION_COMPLETE 16:26:34 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x4000) ioctl$sock_proto_private(r0, 0x400000000089e8, &(0x7f0000002200)="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") socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:26:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x2}}, 0xfff, 0xef05, 0xe09, 0x101, 0x10}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r2, 0x4}, 0x8) r3 = socket$inet(0x10, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000280)={0x80000000}, &(0x7f00000002c0), 0x8) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f000000, 0x0}) 16:26:34 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000900250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:34 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 724.308066][T23316] __nla_parse: 42 callbacks suppressed [ 724.308090][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.338222][T23319] binder: 23312:23319 got new transaction with bad transaction stack, transaction 4677 has target 23312:0 [ 724.348726][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.360788][T23323] binder_alloc: binder_alloc_mmap_handler: 23312 20001000-20004000 already mapped failed -16 [ 724.369654][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.376869][T23319] binder: BINDER_SET_CONTEXT_MGR already set [ 724.387950][T23319] binder: 23312:23319 ioctl 40046207 0 returned -16 [ 724.389257][T23323] binder_alloc: 23312: binder_alloc_buf, no vma 16:26:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48000000, 0x0}) [ 724.405178][ T5] binder: undelivered TRANSACTION_COMPLETE [ 724.414439][T23326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000001540)={@remote, @broadcast, 0x0}, &(0x7f0000001580)=0xc) sendmsg$xdp(r0, &(0x7f0000001800)={&(0x7f00000015c0)={0x2c, 0x6, r1, 0x13}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001600)="6289f7c934f05947f039630723d1af1f581c7a850ff08cccbd1ad3f7376ab7d4261e0e49f37b0fa4a5f712695e8e8f531b8ff25a2f2d3166e588943aeb3bc4acb877c1c9e76e648f47f1b6838f4955472d0425986fcaa4e577c5de7ed738a6074b1696d1e85e586411beb6db72a6c8de7176da299f36ddd993f2d08ac5386b9a462f3652974f8e331149472f6876e6f85e18065ee198e8a128774109b089fb75090b9cac3b290cf316f9c90168c4a16feca2e3ba13d5df1a71e160002f731222029369d792730737", 0xc8}, {&(0x7f0000001700)="c060540400ed2e63d90af3c1e07a7eebe2cafef13f93816a89e591f1fea7f9cf041ba8389822a3d59f9ee2bcb34494374a178ab8a43c70beb1da94065e9a2db35752b0f72905b0ea0e46e7b4056109549f2a3d7ece81c44ccb85df042f029c132e7002a2f8a1dc3e22af4f61dc41bcfc70c11c86a3fc5f864238417055dd1d6fe45fd15868473fb6b00021b1b6d6b2807a20764844113bfb528a4a40", 0x9c}], 0x2, 0x0, 0x0, 0x1}, 0x4080) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:34 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000a00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:34 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 724.555406][T23342] binder_alloc: binder_alloc_mmap_handler: 23336 20001000-20004000 already mapped failed -16 [ 724.582592][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.620672][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.627392][T23337] binder_alloc: 23336: binder_alloc_buf, no vma [ 724.631094][T23348] binder: BINDER_SET_CONTEXT_MGR already set [ 724.651496][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.651772][T23348] binder: 23336:23348 ioctl 40046207 0 returned -16 [ 724.661116][ T5] binder_thread_release: 2 callbacks suppressed [ 724.661126][ T5] binder: release 23336:23337 transaction 4681 out, still active 16:26:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c000000, 0x0}) 16:26:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400800, 0x0) sendto$inet(r0, &(0x7f00000001c0)="06a6488c452014df70003d6a231ea023719ac4ce0686a596c54e91cd8fac0fc1d83ccbbde0e6f937aa04181eb3e2412d29673e5f404d2fef8f908ff9c74a71d9fb091d6b85b1a5f72cb2fe18dfbda89b332d26476db1d4295b3c21cf290633666a4df1747e572b8922b78f2ad2db7ec30d5ac200bd1482bdbc210d2945cf36a216617b594ee22ccda837bca86d7140541c0b2f1b7189107ce630414614dc0102077ed054dde9cc0c6eace0019695d302bddfde1fd6ee70b3775573ea5d79b941fe624a6314e399f1e8ed892b7c99f30425a534879abbf13e08eaa15969a2f039baa44bd096a1618bc00a421616fdeee8bc4e", 0xf2, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:34 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:34 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000b00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 724.719922][ T5] binder: undelivered TRANSACTION_COMPLETE [ 724.737331][ T5] binder_send_failed_reply: 2 callbacks suppressed [ 724.737337][ T5] binder: send failed reply for transaction 4681, target dead [ 724.792059][T23364] binder_alloc: binder_alloc_mmap_handler: 23353 20001000-20004000 already mapped failed -16 [ 724.811012][T23362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.845220][T23360] binder_alloc: 23353: binder_alloc_buf, no vma [ 724.852228][T23371] binder: BINDER_SET_CONTEXT_MGR already set [ 724.852877][T23365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.859622][ T3757] binder: release 23353:23360 transaction 4685 out, still active [ 724.882968][T23371] binder: 23353:23371 ioctl 40046207 0 returned -16 16:26:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SECUREBITS(0x1c, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getpgrp(0xffffffffffffffff) r2 = socket$unix(0x1, 0x0, 0x0) getpeername$unix(r2, &(0x7f00000002c0)=@abs, &(0x7f0000000140)=0x6e) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:35 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000c00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 724.898708][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 724.920452][ T3757] binder: send failed reply for transaction 4685, target dead 16:26:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60000000, 0x0}) [ 724.951701][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:26:35 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000d00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x20000) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x13d, 0x3, 0x6, 0x0, 0x94a18c6, 0x4040, 0x0, 0x2, 0xee, 0x4, 0xfffffffffffffffa, 0x100000000, 0x6, 0x8000, 0x3, 0x5, 0x7f, 0x100, 0xfffffffffffffc01, 0x5, 0x3, 0x5, 0x2, 0x1, 0x8, 0x7, 0x7, 0x0, 0x1d2b000000000, 0x8, 0xb00, 0xfffffffffffffffe, 0x4, 0x9, 0x87e9, 0x0, 0x9, 0x7, @perf_bp={&(0x7f00000000c0), 0x8}, 0x800, 0x0, 0x101, 0x5, 0xfff, 0x0, 0x6f}, r1, 0x3, r0, 0x3) sched_getparam(r1, &(0x7f0000000080)) getsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 725.123998][T23392] binder_alloc: binder_alloc_mmap_handler: 23384 20001000-20004000 already mapped failed -16 16:26:35 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000e00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 725.243777][T23386] binder_alloc: 23384: binder_alloc_buf, no vma [ 725.244820][T23398] binder: BINDER_SET_CONTEXT_MGR already set [ 725.297892][T23398] binder: 23384:23398 ioctl 40046207 0 returned -16 [ 725.322753][ T3757] binder: release 23384:23386 transaction 4689 out, still active [ 725.335451][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 725.376370][ T3757] binder: send failed reply for transaction 4689, target dead 16:26:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:35 executing program 0: getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:35 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:35 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24c00e00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68000000, 0x0}) 16:26:35 executing program 3: syz_emit_ethernet(0xd8, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa8137ffff00caff140100a94a0000000000000006ffffffffffffffffffff00d51613932f85681175a2462e9c0e88a90febf246e2a114812efd3bd6aa1d393d7b04160400033aeceee06973374db2a942b3e9a97a470a8d80958c5c758dba8d4e961f7caf1f19b1fda3a9f86cadd85bcd1e390a6634f76049789b5ebebe9275ffb7fb5afaddae2f401a5692467e65fc431c4e86c8bc90e3f8726f569b6ab8f4ee28501e6639a527821b3ed88b174816899f270053d16642a250db0987caef011a2d596ddf3a62"], &(0x7f0000000000)={0x0, 0x1, [0x362, 0xf87, 0x97c, 0xf38]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe2$9p(&(0x7f00000003c0), 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x25f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x200, 0x200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x68, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 725.632254][T23417] binder_alloc: binder_alloc_mmap_handler: 23411 20001000-20004000 already mapped failed -16 16:26:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000013c0)={'team0\x00', 0x208000000000}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000001c0)=""/200, 0x20000, 0x1000, 0x2}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=""/4096, 0x1000}, 0x12100) prctl$PR_CAPBSET_READ(0x17, 0x14) open_by_handle_at(r1, &(0x7f0000001540)={0x8, 0x81}, 0x40080) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000001380)=0x8001, 0x394) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000014c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'netdevsim0\x00', r2}) [ 725.677696][T23414] binder: BINDER_SET_CONTEXT_MGR already set [ 725.684308][T23414] binder: 23411:23414 ioctl 40046207 0 returned -16 [ 725.700000][ T5] binder_release_work: 23 callbacks suppressed [ 725.700007][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c000000, 0x0}) 16:26:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = getpgid(0x0) ptrace$cont(0x1f, r1, 0x8, 0xb87) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) [ 725.731464][ T5] binder: send failed reply for transaction 4694 to 23411:23414 16:26:35 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 725.788647][T23435] binder_alloc: binder_alloc_mmap_handler: 23433 20001000-20004000 already mapped failed -16 [ 725.808498][ C0] net_ratelimit: 26 callbacks suppressed [ 725.808505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 725.809457][T23434] binder: BINDER_SET_CONTEXT_MGR already set [ 725.814252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 725.826557][T23434] binder: 23433:23434 ioctl 40046207 0 returned -16 16:26:36 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000f00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) capget(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)={0x7, 0x6, 0xff, 0x9, 0x9, 0x8000}) [ 725.838537][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 725.865071][ T5] binder: send failed reply for transaction 4698 to 23433:23434 [ 725.888567][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 725.894385][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 725.930638][ T5] binder: undelivered TRANSACTION_COMPLETE [ 725.966364][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 725.973213][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 725.978499][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 725.979822][ T5] binder: undelivered TRANSACTION_COMPLETE [ 725.985182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 725.991235][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 726.003220][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 726.048541][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 726.056580][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 726.062463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 726.069945][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x74000000, 0x0}) 16:26:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r0, 0xab5, 0x7) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:36 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001100250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:36 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 726.489226][T23464] binder_transaction: 5 callbacks suppressed [ 726.489241][T23464] binder: 23459:23464 got new transaction with bad transaction stack, transaction 4702 has target 23459:0 [ 726.512381][T23464] binder_transaction: 22 callbacks suppressed [ 726.512398][T23464] binder: 23459:23464 transaction failed 29201/-71, size 0-0 line 3044 [ 726.543073][T23470] binder_alloc: binder_alloc_mmap_handler: 23459 20001000-20004000 already mapped failed -16 [ 726.553542][T23470] binder: 23459:23470 transaction failed 29189/-3, size 0-0 line 3147 [ 726.554452][T23464] binder: BINDER_SET_CONTEXT_MGR already set [ 726.580761][T23464] binder: 23459:23464 ioctl 40046207 0 returned -16 16:26:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) getpgrp(r0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 726.584337][ T3757] binder: release 23459:23464 transaction 4702 out, still active [ 726.604576][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 16:26:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a000000, 0x0}) 16:26:36 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001200250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 726.642259][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 726.674862][ T3757] binder: send failed reply for transaction 4702, target dead 16:26:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000003, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], &(0x7f0000000180)=0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x7, @mcast1, 0xe9}}, 0x0, 0x8, 0x1, 0x2, 0x8}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) 16:26:36 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x7, 0xfffffffffffffffe) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 726.751442][T23485] binder: 23484:23485 got new transaction with bad transaction stack, transaction 4706 has target 23484:0 16:26:36 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001300250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 726.802303][T23485] binder: 23484:23485 transaction failed 29201/-71, size 0-0 line 3044 [ 726.826351][T23498] binder_alloc: binder_alloc_mmap_handler: 23484 20001000-20004000 already mapped failed -16 [ 726.869127][T23485] binder: BINDER_SET_CONTEXT_MGR already set [ 726.884422][T23485] binder: 23484:23485 ioctl 40046207 0 returned -16 [ 726.891446][T23498] binder: 23484:23498 transaction failed 29189/-3, size 0-0 line 3147 [ 726.909244][ T5] binder: release 23484:23485 transaction 4706 out, still active [ 726.929543][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 726.971249][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 726.978667][ T5] binder: send failed reply for transaction 4706, target dead 16:26:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) prctl$PR_SET_FPEMU(0xa, 0x2) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)=0x6) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000100)=0x10001) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x9, 0xffc000000000000}, 0x2) 16:26:37 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:37 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001400250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0}) [ 727.360362][T23515] binder: 23514:23515 got new transaction with bad transaction stack, transaction 4710 has target 23514:0 [ 727.376854][T23515] binder: 23514:23515 transaction failed 29201/-71, size 0-0 line 3044 [ 727.392770][T23515] binder: BINDER_SET_CONTEXT_MGR already set [ 727.401167][T23515] binder: 23514:23515 ioctl 40046207 0 returned -16 16:26:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x28}, @empty, 0x0, 0x8, [@remote, @loopback, @empty, @loopback, @multicast1, @multicast1, @loopback, @empty]}, 0x30) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000380)=r2) 16:26:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) [ 727.409455][T23522] binder: 23514:23522 transaction failed 29189/-3, size 0-0 line 3147 [ 727.418072][T23515] binder: 23514:23515 transaction failed 29189/-3, size 0-0 line 3147 [ 727.419735][ T3757] binder: send failed reply for transaction 4710 to 23514:23515 16:26:37 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001500250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:37 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x8000000000000002, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 727.531993][T23534] binder: 23531:23534 got new transaction with bad transaction stack, transaction 4715 has target 23531:0 [ 727.592718][T23534] binder: 23531:23534 transaction failed 29201/-71, size 0-0 line 3044 [ 727.619600][T23534] binder: BINDER_SET_CONTEXT_MGR already set [ 727.626057][T23534] binder: 23531:23534 ioctl 40046207 0 returned -16 [ 727.626495][T23547] binder_alloc_new_buf_locked: 7 callbacks suppressed 16:26:37 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000000c0)='securitybdevsystembdevposix_acl_access\x00'}, 0x30) r2 = getpid() acct(&(0x7f00000004c0)='./file0\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x4) tgkill(r0, r2, 0x2f) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'U-', 0x4}, 0x28, 0x2) ioctl$NBD_DO_IT(r4, 0xab03) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) getpgrp(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000500)={'filter\x00'}, &(0x7f0000000580)=0x78) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0xffffffffffffffa8, &(0x7f0000000440)=[{&(0x7f0000000240)="d99462605f561956fa95c50bc79d010630cc038482321bfe67ca5d7f342e1ad9f15133be886451e7cc9b97f1234e550215d02dc09a0a275c9f7ff9d7bb460e2c18346be1eeaa5b42ef36c1251a2642bd0198cd4b777093e437f89a8c05367914535d1f06e3a55053a967890a2a853e67bc5f51301831d6fb8c50953f9f54a98138fa32bbcdeef5d3a7f70866635e9629412b4cc77e5e062a79576cbfd06968331d21e5ce32994afcc101155b97619f45a1398d8718d61755a11add05"}, {&(0x7f0000000300)="87e9fde9925b892e4c716c67b49411cf6bf4f968cbb5384284542fb98af6812be8643e112ea793fac006b74302335e4e07bbefedee7847cb0473bb7a6aa20dce8cbfb2a045b4fb8496a73a656df946e10c9b4a0757a1c661dd545cd9d1a2d21a63b59f5ae63f9a1951249b3869f6afd53189e14cfc72b278bf8d0070ffcdbb74c7b5f8645a8eeddb58d3f103d480af75d6f6af81e1e7e7ae8948b4c536233e93c5b6aee6e3ce67099e8d859b68d749d1d297890e0cdc2972bf"}, {&(0x7f00000003c0)="f8543b97d746aa14b17bb68a85cafc63bd5e957bff21a0b3135d8958eaa57868e27ff8cf72b3d0294eb0e1b6e114759860e929519fe4cffe656fea60e011048b6bdaffc4de3fb2b903530051f4412d43743b6e8f3fc1af"}], 0x1, 0x0, 0x1cd}, 0x80000050) [ 727.626501][T23547] binder_alloc: 23531: binder_alloc_buf, no vma [ 727.661057][T23547] binder: 23531:23547 transaction failed 29189/-3, size 0-0 line 3147 [ 727.666696][ T3757] binder: release 23531:23534 transaction 4715 out, still active [ 727.686603][ T3757] binder_release_work: 3 callbacks suppressed [ 727.686609][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 727.741612][ T3757] binder: send failed reply for transaction 4715, target dead 16:26:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:38 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) 16:26:38 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="241c1500250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4080, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0x8}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x7fffffff, 0x0, 0xffff, 0x0, 0x0, 0x43228, 0x6, 0x6, 0x4, 0x0, 0x7fff, 0x40, 0xffffffff, 0x24, 0x10000, 0x3, 0xff, 0x7f, 0x4, 0x8, 0x8, 0x8, 0x1000, 0x3, 0x9, 0x2, 0x62b2, 0x5, 0x5, 0x311, 0x5749, 0x800, 0xffffffffffff207d, 0x3, 0x6, 0x0, 0x5, 0x5, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4010, 0x7, 0x4, 0x6, 0x2, 0x7, 0x7fffffff}, r1, 0xc, r0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000240)={0x1, 0xc9c1, 0xffff, @broadcast, 'bridge0\x00'}) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4000) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000002c0)={r4, 0x80000, r2}) 16:26:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0xffffff82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) [ 728.252824][T23568] binder: 23561:23568 got new transaction with bad transaction stack, transaction 4719 has target 23561:0 [ 728.273848][T23568] binder: 23561:23568 transaction failed 29201/-71, size 0-0 line 3044 [ 728.285897][T23568] binder: BINDER_SET_CONTEXT_MGR already set [ 728.294003][T23568] binder: 23561:23568 ioctl 40046207 0 returned -16 [ 728.295452][T23576] binder_alloc: 23561: binder_alloc_buf, no vma [ 728.312277][T23568] binder_alloc: 23561: binder_alloc_buf, no vma [ 728.312323][ T3757] binder: release 23561:23568 transaction 4719 out, still active [ 728.338870][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:38 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x200000000000000, 0x0}) 16:26:38 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001600250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 728.354039][ T3757] binder: send failed reply for transaction 4719, target dead 16:26:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x10000000000002bf}, 0x0) 16:26:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0)=0x9, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x1, 0x4) r1 = socket$inet(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffff9c, 0x50, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=r2, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) memfd_create(&(0x7f0000000140)='\x00', 0x6) [ 728.461510][T23589] binder: 23587:23589 got new transaction with bad transaction stack, transaction 4724 has target 23587:0 16:26:38 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 728.507866][T23589] binder: BINDER_SET_CONTEXT_MGR already set [ 728.519531][T23597] binder_alloc: 23587: binder_alloc_buf, no vma [ 728.526102][T23589] binder: 23587:23589 ioctl 40046207 0 returned -16 [ 728.526548][ T5] binder: send failed reply for transaction 4724 to 23587:23589 [ 728.541402][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300000000000000, 0x0}) 16:26:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:39 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001700250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:39 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES32=0x0], &(0x7f00000001c0)=0x8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0x10000, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) [ 729.091426][T23612] binder: 23611:23612 got new transaction with bad transaction stack, transaction 4728 has target 23611:0 [ 729.125675][T23623] binder_alloc_mmap_handler: 4 callbacks suppressed 16:26:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 729.125690][T23623] binder_alloc: binder_alloc_mmap_handler: 23611 20001000-20004000 already mapped failed -16 [ 729.144659][T23612] binder: BINDER_SET_CONTEXT_MGR already set [ 729.152712][T23612] binder: 23611:23612 ioctl 40046207 0 returned -16 [ 729.176422][T23623] binder_alloc: 23611: binder_alloc_buf, no vma 16:26:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000000000000, 0x0}) [ 729.195227][ T5] binder: release 23611:23612 transaction 4728 out, still active [ 729.201245][T23631] binder_alloc: 23611: binder_alloc_buf, no vma [ 729.216000][ T5] binder: undelivered TRANSACTION_COMPLETE [ 729.223606][ T5] binder: send failed reply for transaction 4728, target dead 16:26:39 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001800250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:39 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r0, 0x6aa0}, 0x8) [ 729.294361][T23638] binder: 23637:23638 got new transaction with bad transaction stack, transaction 4733 has target 23637:0 16:26:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/251, 0xfb}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/39, 0x27}, {&(0x7f0000001440)=""/64, 0x40}, {&(0x7f0000001480)=""/35, 0x23}, {&(0x7f00000014c0)=""/35, 0x23}], 0xa) 16:26:39 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:39 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r0, 0x6aa0}, 0x8) [ 729.396962][T23651] binder_alloc: binder_alloc_mmap_handler: 23637 20001000-20004000 already mapped failed -16 [ 729.416513][T23638] binder: BINDER_SET_CONTEXT_MGR already set [ 729.418874][T23650] __nla_parse: 35 callbacks suppressed [ 729.418903][T23650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.422917][T23638] binder: 23637:23638 ioctl 40046207 0 returned -16 16:26:39 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001900250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 729.462868][T23653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.477963][T23657] binder_alloc: 23637: binder_alloc_buf, no vma [ 729.477974][ T3757] binder: release 23637:23638 transaction 4733 out, still active [ 729.477987][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:39 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r0, 0x6aa0}, 0x8) [ 729.511514][T23655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.523017][T23651] binder_alloc: 23637: binder_alloc_buf, no vma [ 729.543618][ T3757] binder: send failed reply for transaction 4733, target dead 16:26:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 729.570542][T23653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.591051][T23650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.608271][T23655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000), 0x21c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10200, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x8000, 0x20, 0x839, 0x0, 0x80000000, 0x4080, 0x8, 0x9, 0x400, 0x0, 0x80000000, 0x100000000, 0x100, 0x146, 0x50b2, 0x0, 0x7, 0x3, 0x4, 0x7fff, 0x5, 0x2, 0x6, 0x0, 0x12bf6fb3, 0xfffffffffffffffc, 0x680, 0x0, 0x0, 0x0, 0x4, 0x20, 0xc70, 0x100, 0x100000000, 0x0, 0x2400000000, 0x2, @perf_config_ext={0x1, 0x8001}, 0x20, 0xffffffff80000000, 0x9, 0x1, 0x0, 0x3, 0x6}, r1, 0xb, r2, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x8) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000200)="b10419690a4fcb13f5ef7ba3bd8b57b860d10ef1d4f81917e5782de18937d44be5ba317607744006795a5afe2d31e3dccebfca55f5eead1865e15046afaf6a7022e9bf3dfe81926aa9db8f9bdbca6b86645cae505f7cc8f28505fb5f049d326907f80cab9f3ac6499c62836eca45dad776407befdfb1bf051c5e0c8394932e59e998f17f948c5d63") setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r3, 0xffffffff}, 0x8) 16:26:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500000000000000, 0x0}) 16:26:40 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:40 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001a00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 729.949906][T23686] binder: 23684:23686 got new transaction with bad transaction stack, transaction 4738 has target 23684:0 [ 729.981854][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 730.000864][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 730.020970][T23698] binder_alloc: binder_alloc_mmap_handler: 23684 20001000-20004000 already mapped failed -16 [ 730.025474][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 730.037446][T23686] binder: BINDER_SET_CONTEXT_MGR already set 16:26:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="65f40b38668373cf29afc7f2668cba3f71c109d288969cbc6dd2b527a3700736798549146f38d08b4ffc08e153408c26648ea22d96d27ab98e16eb6395b7701289087564e72964027e736be80d1d8650a4b26fcc05c56348cde8ad986a3ac37c78e4ab875c527469edf35fffbb93297f0558b023732a2590f2c0c86b2aaa6db5853f2dad54dea85978ab10079edd667df761374d1f79b4ac29b169f9ebb38c18293cf1cdba3a874bcaccdedb", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) socket$inet6(0xa, 0x2, 0x9) [ 730.047611][T23686] binder: 23684:23686 ioctl 40046207 0 returned -16 [ 730.057286][T23698] binder_alloc: 23684: binder_alloc_buf, no vma [ 730.063975][ T5] binder: release 23684:23686 transaction 4738 out, still active [ 730.083277][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600000000000000, 0x0}) 16:26:40 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24151c00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 730.106715][ T5] binder: send failed reply for transaction 4738, target dead [ 730.171207][T23713] binder: 23709:23713 got new transaction with bad transaction stack, transaction 4742 has target 23709:0 [ 730.198784][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:26:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/115) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r0, 0x0, 0x10, &(0x7f0000000280)='/dev/cachefiles\x00', 0xffffffffffffffff}, 0x30) getpgrp(r1) r2 = socket$inet(0x10, 0x6, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80800, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000002c0)={{0x0, @name="9d291ca4c3bf7f627b9df23ccc947f0bad2bf134465c710c5708e2c59fcf6bc3"}, "5aa175a382df1cbcda2bb21ad90d2f3498229602ffff9be9b389adc797393ad8", 0x100000000000003}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000400)=@hopopts={0x2d, 0xa, [], [@pad1, @generic={0x100000001, 0x2, "c304"}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x18, {0x7fffffff, 0x4, 0x7, 0x1f, [0x100000000, 0x100]}}, @jumbo={0xc2, 0x4, 0x100000001}, @jumbo={0xc2, 0x4, 0x2c0}, @pad1]}, 0x60) [ 730.213028][T23719] binder_alloc: binder_alloc_mmap_handler: 23709 20001000-20004000 already mapped failed -16 [ 730.230748][T23713] binder: BINDER_SET_CONTEXT_MGR already set [ 730.237040][T23713] binder: 23709:23713 ioctl 40046207 0 returned -16 [ 730.247128][T23719] binder_alloc: 23709: binder_alloc_buf, no vma [ 730.256235][ T3757] binder: release 23709:23713 transaction 4742 out, still active 16:26:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:40 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 730.271423][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 730.298842][ T3757] binder: send failed reply for transaction 4742, target dead 16:26:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 16:26:40 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24002800250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 730.414009][T23738] binder_alloc: binder_alloc_mmap_handler: 23736 20001000-20004000 already mapped failed -16 [ 730.445717][ T5] binder: release 23736:23737 transaction 4746 out, still active [ 730.454851][T23737] binder: BINDER_SET_CONTEXT_MGR already set 16:26:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x22) setsockopt$sock_timeval(r2, 0x1, 0x31, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r3 = fcntl$getown(r1, 0x9) capset(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000100)={0x4, 0x309, 0x63bc, 0x99d, 0x2, 0x81}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x140) 16:26:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 730.461244][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa00000000000000, 0x0}) [ 730.499486][T23737] binder: 23736:23737 ioctl 40046207 0 returned -16 [ 730.503905][ T5] binder: send failed reply for transaction 4746, target dead [ 730.645468][T23750] binder_alloc: binder_alloc_mmap_handler: 23748 20001000-20004000 already mapped failed -16 [ 730.677793][T23753] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 730.678968][T23749] binder: BINDER_SET_CONTEXT_MGR already set [ 730.699188][ T3757] binder: release 23748:23749 transaction 4750 out, still active [ 730.707514][T23749] binder: 23748:23749 ioctl 40046207 0 returned -16 [ 730.719808][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 730.731357][ T3757] binder_release_work: 24 callbacks suppressed [ 730.731362][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 [ 730.770031][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 730.778059][ T3757] binder: send failed reply for transaction 4750, target dead 16:26:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x501000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x64, r5, 0x12, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x70b1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3c00000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) 16:26:41 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24004000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:41 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:41 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x7, 0x13}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) inotify_init1(0x80000) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200000000000000, 0x0}) 16:26:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 730.997030][T23777] binder_alloc: binder_alloc_mmap_handler: 23769 20001000-20004000 already mapped failed -16 16:26:41 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24655800250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 731.051531][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 731.058076][ T5] binder: send failed reply for transaction 4754 to 23769:23771 16:26:41 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000000000000, 0x0}) [ 731.098126][ T5] binder: undelivered TRANSACTION_COMPLETE [ 731.121045][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 731.137759][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 731.198851][T23794] binder_alloc: binder_alloc_mmap_handler: 23791 20001000-20004000 already mapped failed -16 [ 731.217754][T23792] binder: BINDER_SET_CONTEXT_MGR already set [ 731.242399][T23792] binder: 23791:23792 ioctl 40046207 0 returned -16 [ 731.273791][ T3757] binder: release 23791:23792 transaction 4758 out, still active [ 731.289412][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 [ 731.307010][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 731.318318][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 731.336148][ T3757] binder: send failed reply for transaction 4758, target dead 16:26:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="4828b0b8b6187bbc4e6726b3c42a341fdec97028211792cb91a2df4a832288d8fee46e68d42e7a8dc52527dd09e137555f50e08cb1abdb00aa1735b95d634d96faeda63090d2f8467b708aaf2ad4ba976258b09ffe8c83ab8ab4db7a71f4bb456bf1d6648ecf1cc20d93d75760ea4ae2709abd9e5eaaa056ec5a5c849c3f190130ca21b04551bc3aa75824453032d1bb7ad3913bba5ca4e0c998b01a2a41531b4cc8b7d8042b1fb48d9a021b826647d530046f77428592a6ec753addd10545d269fb", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000080)) 16:26:42 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24006000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x2, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0x200, 0x0, 0x3}) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f00000000000000, 0x0}) 16:26:42 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 731.879121][T23813] binder_transaction: 4 callbacks suppressed [ 731.879135][T23813] binder: 23811:23813 got new transaction with bad transaction stack, transaction 4763 has target 23811:0 16:26:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 731.930333][T23813] binder_transaction: 23 callbacks suppressed [ 731.930351][T23813] binder: 23811:23813 transaction failed 29201/-71, size 0-0 line 3044 [ 731.954951][T23826] binder_alloc: binder_alloc_mmap_handler: 23811 20001000-20004000 already mapped failed -16 [ 731.969605][T23813] binder: BINDER_SET_CONTEXT_MGR already set 16:26:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) getpgrp(0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) getpgrp(r2) r3 = socket$inet(0x10, 0x2, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x1, r1}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xd}], 0x1}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000001200)={0x4, 0x0, &(0x7f0000000200)="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", {0x8, 0x2, 0x3234564e, 0xf, 0x6, 0x3, 0x4, 0x1}}) [ 731.988618][T23813] binder: 23811:23813 ioctl 40046207 0 returned -16 [ 732.001693][T23826] binder: 23811:23826 transaction failed 29189/-3, size 0-0 line 3147 [ 732.026021][ T3757] binder: release 23811:23813 transaction 4763 out, still active 16:26:42 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 732.047967][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 [ 732.051106][ C0] net_ratelimit: 26 callbacks suppressed [ 732.051114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.068151][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800000000000000, 0x0}) 16:26:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:42 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24586500250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 732.101356][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 732.128539][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.134465][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 732.139960][ T3757] binder: send failed reply for transaction 4763, target dead [ 732.194072][T23845] binder: 23844:23845 got new transaction with bad transaction stack, transaction 4767 has target 23844:0 [ 732.219314][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 732.226025][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 732.238237][T23845] binder: 23844:23845 transaction failed 29201/-71, size 0-0 line 3044 [ 732.253766][T23853] binder_alloc: binder_alloc_mmap_handler: 23844 20001000-20004000 already mapped failed -16 [ 732.264315][T23845] binder: BINDER_SET_CONTEXT_MGR already set [ 732.272371][T23845] binder: 23844:23845 ioctl 40046207 0 returned -16 [ 732.272431][T23853] binder: 23844:23853 transaction failed 29189/-3, size 0-0 line 3147 [ 732.287747][T23845] binder: 23844:23845 transaction failed 29189/-3, size 0-0 line 3147 [ 732.287789][ T3757] binder: release 23844:23845 transaction 4767 out, still active [ 732.296239][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.304346][ T3757] binder: send failed reply for transaction 4767, target dead [ 732.309611][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 732.322818][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.328627][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:42 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200003, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x7f, 0x7fff, 0x2a, 0xfffffffffffffffc}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r3 = fcntl$getown(r2, 0x9) migrate_pages(r3, 0x1, &(0x7f0000000000)=0xffffffffffffff6c, &(0x7f0000000080)=0x100000001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) 16:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) ptrace$pokeuser(0x6, r0, 0x3, 0xab5) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00000000000000, 0x0}) 16:26:42 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:42 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24008100250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) [ 732.790315][T23866] binder: 23865:23866 got new transaction with bad transaction stack, transaction 4772 has target 23865:0 [ 732.813659][T23866] binder: 23865:23866 transaction failed 29201/-71, size 0-0 line 3044 16:26:43 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 732.854953][T23873] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 732.854962][T23873] binder_alloc: 23865: binder_alloc_buf, no vma [ 732.876840][T23866] binder: BINDER_SET_CONTEXT_MGR already set [ 732.883065][T23873] binder: 23865:23873 transaction failed 29189/-3, size 0-0 line 3147 16:26:43 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240ec000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 732.919793][ T3757] binder: release 23865:23866 transaction 4772 out, still active [ 732.931193][T23866] binder: 23865:23866 ioctl 40046207 0 returned -16 [ 732.947202][ T3757] binder_release_work: 3 callbacks suppressed [ 732.947207][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) [ 732.994077][ T3757] binder: send failed reply for transaction 4772, target dead 16:26:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000000000000, 0x0}) 16:26:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)='][wlan1#vboxnet1\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000001c0)='\x00', 0xffffffffffffffff}, 0x30) gettid() r1 = getpgrp(0x0) getpgrp(r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x321002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x5b, 0x2d, &(0x7f0000000280)="446bd33b952a27417370600634db57e3fef30c42dd52f47e047cc7bbd684ca65de34b3281c14f1d1861ff8776755f5165eb611831c2fab886e637c799627ee23904b31ce514499ba15992548d854836026349fcbfcbe8ff4a16ec4", &(0x7f0000000300)=""/45, 0xffffffff80000000}, 0x28) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 733.125432][T23897] binder: 23896:23897 got new transaction with bad transaction stack, transaction 4776 has target 23896:0 [ 733.139107][T23897] binder: 23896:23897 transaction failed 29201/-71, size 0-0 line 3044 [ 733.187079][T23904] binder_alloc: 23896: binder_alloc_buf, no vma [ 733.193704][T23897] binder: BINDER_SET_CONTEXT_MGR already set [ 733.200280][T23897] binder: 23896:23897 ioctl 40046207 0 returned -16 [ 733.207251][T23904] binder: 23896:23904 transaction failed 29189/-3, size 0-0 line 3147 [ 733.221694][ T5] binder: release 23896:23897 transaction 4776 out, still active [ 733.224187][T23897] binder_alloc: 23896: binder_alloc_buf, no vma [ 733.236368][T23897] binder: 23896:23897 transaction failed 29189/-3, size 0-0 line 3147 [ 733.237083][ T5] binder: undelivered TRANSACTION_COMPLETE [ 733.259378][ T5] binder: send failed reply for transaction 4776, target dead 16:26:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e24, 0x55d5, @empty, 0x2}, @in={0x2, 0x4e23, @remote}], 0x58) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:26:43 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:43 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400f000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xc3e, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800000000000000, 0x0}) [ 733.649995][T23916] binder: 23915:23916 got new transaction with bad transaction stack, transaction 4781 has target 23915:0 16:26:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc98}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044080}, 0x40) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x23, 0x0, 0x198}, 0x3) [ 733.705840][T23916] binder: BINDER_SET_CONTEXT_MGR already set [ 733.725758][T23924] binder_alloc: 23915: binder_alloc_buf, no vma [ 733.742273][T23916] binder: 23915:23916 ioctl 40046207 0 returned -16 16:26:44 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000260007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 733.779098][ T3757] binder: release 23915:23916 transaction 4781 out, still active [ 733.788162][T23932] binder_alloc: 23915: binder_alloc_buf, no vma [ 733.796581][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00000000000000, 0x0}) 16:26:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@initdev}, &(0x7f00000000c0)=0x14) [ 733.833595][ T3757] binder: send failed reply for transaction 4781, target dead 16:26:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:44 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 733.897227][T23943] binder: 23941:23943 got new transaction with bad transaction stack, transaction 4786 has target 23941:0 [ 733.934074][T23943] binder: BINDER_SET_CONTEXT_MGR already set [ 733.941020][T23947] binder_alloc: 23941: binder_alloc_buf, no vma 16:26:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x1}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e24, @remote}}, 0x9, 0x7fff, 0x101, 0x8, 0x1372e236eedbfcc4}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)={r3, 0x90, "53d4251353f10e065cc8758301939c08f2e5e723f3886b705f53368dbbd84f67afde305521ee8906d24d5882c0ec904b51ac1f4c6bca23dcd94f4bb2849f58634ebbf3950e368fa10cef96fdfc4e68f0aa5fdcf3162dba18106e0dc760b5b480c670a80a91f05b039692277d2a2ab9590c546a1ac6ba10d6226235eed822de57aa61245d64e0155e9e017adcc490eee9"}, &(0x7f0000000380)=0x98) r4 = socket$inet(0x10, 0x4004, 0x200100000000002) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x8, 0x5e, 0x3780cf11, 0x71098c6a, 0x100000000, 0x3}) [ 733.967615][T23943] binder: 23941:23943 ioctl 40046207 0 returned -16 [ 733.981264][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400000000000000, 0x0}) 16:26:44 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000670007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:44 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xc031774e74e54c6d, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)=0x1) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 734.093674][T23967] binder: 23964:23967 got new transaction with bad transaction stack, transaction 4790 has target 23964:0 16:26:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000100)) getpgrp(0xffffffffffffffff) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 734.182887][T23975] binder_alloc_mmap_handler: 4 callbacks suppressed [ 734.182903][T23975] binder_alloc: binder_alloc_mmap_handler: 23964 20001000-20004000 already mapped failed -16 [ 734.201449][T23975] binder_alloc: 23964: binder_alloc_buf, no vma [ 734.207997][T23967] binder: BINDER_SET_CONTEXT_MGR already set [ 734.216972][T23967] binder: 23964:23967 ioctl 40046207 0 returned -16 [ 734.224257][ T3757] binder: send failed reply for transaction 4790 to 23964:23967 16:26:44 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:44 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000200250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 734.241150][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00000000000000, 0x0}) [ 734.369340][T23988] binder: 23987:23988 got new transaction with bad transaction stack, transaction 4794 has target 23987:0 [ 734.396747][T23994] binder_alloc: binder_alloc_mmap_handler: 23987 20001000-20004000 already mapped failed -16 [ 734.407986][T23988] binder: BINDER_SET_CONTEXT_MGR already set [ 734.414172][T23988] binder: 23987:23988 ioctl 40046207 0 returned -16 [ 734.418581][T23994] binder_alloc: 23987: binder_alloc_buf, no vma [ 734.427438][T23988] binder_alloc: 23987: binder_alloc_buf, no vma [ 734.427497][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x13a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x3, 0x2, 0x8}]}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000080)) 16:26:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2200, 0x0) exit(0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000340), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101002, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x3fffffffffe) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r1, r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x401}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={r5, 0x80000000}, &(0x7f0000000340)=0x8) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) getpgrp(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = socket$inet(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0}) 16:26:44 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:44 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000300250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xd7a4, 0x101000) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) [ 734.812429][T24006] binder: 24005:24006 got new transaction with bad transaction stack, transaction 4799 has target 24005:0 [ 734.837784][T24012] __nla_parse: 38 callbacks suppressed [ 734.837854][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.851987][T24020] binder_alloc: binder_alloc_mmap_handler: 24005 20001000-20004000 already mapped failed -16 [ 734.863193][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.883130][T24006] binder: BINDER_SET_CONTEXT_MGR already set [ 734.892632][T24006] binder: 24005:24006 ioctl 40046207 0 returned -16 [ 734.904049][T24020] binder_alloc: 24005: binder_alloc_buf, no vma 16:26:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x50150, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="006340c600000000000000000000a41b000000000000000000000000000000000000000000e7ffffffffffffff0000000000000000000010000000000000000000000005"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) [ 734.908770][T24022] sctp: Trying to GSO but underlying device doesn't support it. [ 734.913193][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 734.913501][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:45 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000400250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:45 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 734.963503][T24027] binder: BINDER_SET_CONTEXT_MGR already set [ 734.975665][T24027] binder: 24026:24027 ioctl 40046207 0 returned -16 [ 734.986161][T24027] binder: 24026:24027 unknown command -968858880 [ 734.996621][T24027] binder: 24026:24027 ioctl c0306201 20000340 returned -22 [ 735.042044][T24033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.069722][T24033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.077572][T24034] binder: 24026:24034 unknown command -968858880 16:26:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, r2}, @decrefs={0x40046307, 0x1}, @decrefs], 0x26, 0x0, &(0x7f0000000140)="198e9f5d4dc9d015d035a7a5e1f8cb663af096c992a0dddf95b74e83d888946754474f56a3a1"}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 735.085514][T24034] binder: 24026:24034 ioctl c0306201 20000340 returned -22 [ 735.125306][T24039] binder: 24038:24039 BC_ACQUIRE_DONE u0000000000000000 no match [ 735.133544][T24039] binder: 24038:24039 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 735.142421][T24039] binder: 24038:24039 DecRefs 0 refcount change on invalid ref 0 ret -22 16:26:45 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000500250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:45 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 735.165450][T24039] binder: 24038:24039 got new transaction with bad transaction stack, transaction 4806 has target 24038:0 [ 735.187906][T24039] binder: 24038:24039 BC_ACQUIRE_DONE u0000000000000000 no match [ 735.211438][T24041] binder: BINDER_SET_CONTEXT_MGR already set [ 735.218399][T24039] binder: 24038:24039 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 735.230863][ T3757] binder_thread_release: 3 callbacks suppressed [ 735.230873][ T3757] binder: release 24038:24039 transaction 4806 out, still active [ 735.234160][T24039] binder: 24038:24039 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 735.240760][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.248063][T24041] binder: 24038:24041 ioctl 40046207 0 returned -16 [ 735.254349][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 735.280259][ T3757] binder_send_failed_reply: 3 callbacks suppressed [ 735.280266][ T3757] binder: send failed reply for transaction 4806, target dead [ 735.301119][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:26:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xc0002, 0x50) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000380)={0x1ed8, &(0x7f0000000100)=[{}, {}, {}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x102, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x15}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x48010) 16:26:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000100)=0x4) 16:26:45 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:45 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000600250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="3e660f545e050f20e035000040000f22e0b928000000b8a785fec9ba04df9d3b0f3066baf80cb87457da8fef66bafc0ced0f01c9c744240093000000c7442402fab3ce9ec7442406000000000f011424380366ba210066b8000066ef0f01c9f2da9cc863000000", 0x67}], 0x1, 0x0, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r1, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x4}, &(0x7f00000000c0)=0xffffff9d) [ 735.728412][T24072] binder_alloc: binder_alloc_mmap_handler: 24062 20001000-20004000 already mapped failed -16 [ 735.750951][T24070] binder: BINDER_SET_CONTEXT_MGR already set [ 735.757237][T24070] binder: 24062:24070 ioctl 40046207 0 returned -16 [ 735.787512][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.787733][ T5] binder: release 24062:24070 transaction 4810 out, still active [ 735.809920][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 735.820821][ T5] binder: undelivered TRANSACTION_COMPLETE [ 735.830602][ T5] binder_release_work: 25 callbacks suppressed 16:26:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000380)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 735.830607][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.844373][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:26:46 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000700250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xe6d, 0x40100) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000240)) r1 = gettid() getpgrp(r1) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 735.884996][T24083] binder: BINDER_SET_CONTEXT_MGR already set [ 735.904560][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 735.912113][T24083] binder: 24082:24083 ioctl 40046207 0 returned -16 16:26:46 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 735.933278][ T5] binder: send failed reply for transaction 4810, target dead [ 735.961621][T24090] binder_alloc: binder_alloc_mmap_handler: 24082 20001000-20004000 already mapped failed -16 16:26:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x10, &(0x7f0000000040)='selflo+[,wlan0.\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f0000000100)='%keyring\\(\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r2 = getpgrp(r1) sched_rr_get_interval(r2, &(0x7f00000000c0)) socket$inet(0x10, 0x80000, 0x20) [ 735.993904][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_GET_THP_DISABLE(0x2a) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x6080, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000001c0)) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2, @remote}, &(0x7f0000000380)=0xc) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x3, 0x5, 0x80000001, 0x400, 0x9, 0x81000088, r3}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x8080) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200)=0x1000, 0x8) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000100)) [ 736.041470][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 736.094366][T24102] binder_alloc: binder_alloc_mmap_handler: 24099 20001000-20004000 already mapped failed -16 [ 736.123663][T24100] binder: BINDER_SET_CONTEXT_MGR already set [ 736.130475][T24100] binder: 24099:24100 ioctl 40046207 0 returned -16 [ 736.140703][ T5] binder: release 24099:24100 transaction 4817 out, still active [ 736.152414][ T5] binder: undelivered TRANSACTION_COMPLETE [ 736.166321][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.192712][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 736.200786][ T5] binder: send failed reply for transaction 4817, target dead 16:26:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:46 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000800250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x200) r1 = getpid() setpriority(0x2, r1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000001c0)={0xd96c, 0x8, 0xfff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000280)={0x8, 0x0, 0x8001}) r2 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xf, r2, 0xfffffffffffffffc, &(0x7f00000000c0)="bc259cb189dc83d3b2320cdcf785c43b932cc1f918a1c0c47cff3bee7574635dc67f8f8b725a89e1dbca3fb8d73c7ec10de08619e1a028099cf86feb8c0890cea1390101f912e5f522e26361c000c462fad68fa5ca0cdfac95a1c8c6c695ca0a857c7b789866aecccab012326569deb035cb33d8f0a11ee37b2c3c3a") accept$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) r3 = socket$inet(0x10, 0xb, 0xfffffffffffffffd) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 16:26:46 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 736.510908][T24121] binder_alloc: binder_alloc_mmap_handler: 24110 20001000-20004000 already mapped failed -16 16:26:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f00000001c0)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = shmget(0x1, 0x2000, 0x840, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x101, r3, r4, r5, r6, 0x20, 0xffff}, 0xfff, 0xacd, 0x3, 0x9, r1, r1, 0x100000000}) r7 = socket$inet(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:46 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000900250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 736.565685][T24116] binder: BINDER_SET_CONTEXT_MGR already set [ 736.589009][T24116] binder: 24110:24116 ioctl 40046207 0 returned -16 [ 736.605327][ T5] binder: release 24110:24116 transaction 4821 out, still active 16:26:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) [ 736.628857][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.663547][ T5] binder: undelivered TRANSACTION_ERROR: 29189 16:26:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), 0x4) [ 736.704725][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 736.749523][ T5] binder: send failed reply for transaction 4821, target dead [ 736.791223][T24146] binder_alloc: binder_alloc_mmap_handler: 24143 20001000-20004000 already mapped failed -16 16:26:47 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000a00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 736.833679][T24144] binder: BINDER_SET_CONTEXT_MGR already set [ 736.862075][T24144] binder: 24143:24144 ioctl 40046207 0 returned -16 16:26:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) getpgrp(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 736.898293][ T5] binder: release 24143:24144 transaction 4826 out, still active [ 736.919540][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.959905][ T5] binder: send failed reply for transaction 4826, target dead 16:26:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:47 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) fcntl$addseals(r0, 0x409, 0xd) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x801, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:47 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000b00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 737.360627][T24167] binder: 24166:24167 got transaction to context manager from process owning it [ 737.391848][T24167] binder_transaction: 28 callbacks suppressed [ 737.391864][T24167] binder: 24166:24167 transaction failed 29201/-22, size 0-0 line 2985 [ 737.407872][T24178] binder: 24166:24178 got transaction to context manager from process owning it [ 737.423000][T24178] binder: 24166:24178 transaction failed 29201/-22, size 0-0 line 2985 [ 737.436092][T24178] binder_alloc: binder_alloc_mmap_handler: 24166 20001000-20004000 already mapped failed -16 [ 737.447065][T24178] binder: BINDER_SET_CONTEXT_MGR already set [ 737.456577][T24178] binder: 24166:24178 ioctl 40046207 0 returned -16 [ 737.464923][T24167] binder: 24166:24167 transaction failed 29189/-3, size 0-0 line 3147 16:26:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xff, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe0, r2, 0x600, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff1c}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x2a}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x12}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000380)=0xffffffffffffff7c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) 16:26:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000001c0)={r2, r0, 0x2000000000000000}) r3 = gettid() getpgrp(r3) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:47 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000c00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x20c, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:47 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 737.562285][T24192] binder: 24191:24192 unknown command 0 16:26:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x20400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000280)={{0x7, 0x6}, 'port1\x00', 0x28, 0x1020, 0x10001, 0x7, 0x20, 0xe1, 0x782c, 0x0, 0x4, 0x5}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@remote, @initdev, @dev}, &(0x7f0000000100)=0xc) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 737.612602][T24192] binder: 24191:24192 ioctl c0306201 20000000 returned -22 [ 737.644791][T24198] binder_alloc: binder_alloc_mmap_handler: 24191 20001000-20004000 already mapped failed -16 [ 737.655597][T24198] binder: BINDER_SET_CONTEXT_MGR already set 16:26:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e23, @loopback}}, 0x80000001, 0x40, 0x1, 0x80000001, 0x10}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={r3, 0xc2f6, 0x30}, &(0x7f0000000440)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 737.663309][T24198] binder: 24191:24198 ioctl 40046207 0 returned -16 [ 737.670314][T24203] binder: 24191:24203 unknown command 0 [ 737.677338][T24203] binder: 24191:24203 ioctl c0306201 20000000 returned -22 [ 737.689471][ T5] binder: release 24191:24198 transaction 4835 out, still active [ 737.698099][ T5] binder: send failed reply for transaction 4835, target dead [ 737.772002][T24211] binder_transaction: 4 callbacks suppressed [ 737.772016][T24211] binder: 24209:24211 got new transaction with bad transaction stack, transaction 4837 has target 24209:0 [ 737.792865][T24211] binder: 24209:24211 transaction failed 29201/-71, size 0-0 line 3044 [ 737.807992][T24211] binder: BINDER_SET_CONTEXT_MGR already set [ 737.817667][T24211] binder: 24209:24211 ioctl 40046207 0 returned -16 [ 737.826699][T24212] binder: 24209:24212 transaction failed 29189/-3, size 0-0 line 3147 [ 737.837611][T24214] binder: 24209:24214 transaction failed 29189/-3, size 0-0 line 3147 [ 737.850741][ T3757] binder: send failed reply for transaction 4837 to 24209:24211 16:26:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:48 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000d00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:48 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffa}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5118}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x8001) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000380, 0x0, 0x0, 0x200004d8, 0x20000508], 0x0, &(0x7f0000000100), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x5, 0x9300, 'veth0_to_hsr\x00', 'dummy0\x00', 'vxcan1\x00', 'vlan0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0x8dec99425c4f3665], 0xf0, 0xf0, 0x128, [@helper={'helper\x00', 0x28, {{0x0, 'amanda\x00'}}}, @state={'state\x00', 0x8, {{0x1000}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xb, 0x44, 0x88be, 'nr0\x00', 'veth1_to_bridge\x00', 'bridge0\x00', 'hsr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x282abb75b3e4f4ef, 0xff, 0xff], 0xc0, 0x130, 0x160, [@helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@remote, 0x10}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xaf}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x3c0) flistxattr(r0, &(0x7f0000000880)=""/106, 0xfffffffffffffe77) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) [ 738.199946][T24220] binder: 24219:24220 got new transaction with bad transaction stack, transaction 4842 has target 24219:0 [ 738.218834][T24220] binder: 24219:24220 transaction failed 29201/-71, size 0-0 line 3044 [ 738.234043][T24220] binder: BINDER_SET_CONTEXT_MGR already set [ 738.240633][T24220] binder: 24219:24220 ioctl 40046207 0 returned -16 [ 738.247534][T24230] binder_alloc_new_buf_locked: 12 callbacks suppressed [ 738.247543][T24230] binder_alloc: 24219: binder_alloc_buf, no vma [ 738.261229][T24230] binder: 24219:24230 transaction failed 29189/-3, size 0-0 line 3147 [ 738.272066][ T3757] binder: release 24219:24220 transaction 4842 out, still active [ 738.286455][ T3757] binder_release_work: 4 callbacks suppressed [ 738.286459][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 738.288513][ C0] net_ratelimit: 26 callbacks suppressed [ 738.288520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.301091][ T3757] binder: send failed reply for transaction 4842, target dead [ 738.304342][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 738.368513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.374344][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000d842f63ffe7195341b76c6809b572d15dddd02d25314f0fddde97d2853294994018a1a9ee16c37d7390240e45dd1fde1c53f78b36d62a124", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:48 executing program 5: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3, 0xffffffffffffff9c}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fchmodat(r0, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffe66, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340402000000000000000000000000000000000000000005b06ea5d000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) r4 = getegid() r5 = getuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x229080, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}], [{@uid_gt={'uid>', r5}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '/dev/radio#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/radio#\x00'}}]}}) 16:26:48 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000e00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:48 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 738.448521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 738.454396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 738.481982][T24243] binder: 24242:24243 ioctl c0306201 20000340 returned -14 [ 738.504204][T24243] binder: 24242:24243 got transaction to invalid handle [ 738.521542][T24243] binder: 24242:24243 transaction failed 29201/-22, size 0-0 line 2994 [ 738.528536][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.535597][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 738.541549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.544094][T24243] binder_alloc: 24242: binder_alloc_buf, no vma 16:26:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2ca4ad97, 0xc0000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x8, 0x3, 0x1f, 0x20, 'syz0\x00', 0x6}, 0x6, 0x28, 0x8001, r1, 0x1, 0x5, 'syz1\x00', &(0x7f0000000100)=['vmnet0-GPL\x00'], 0xb, [], [0x6, 0xfffffffffffffe00, 0x400000000000, 0x9]}) getpgrp(0xffffffffffffffff) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 738.547305][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 738.564294][T24253] binder: 24242:24253 got transaction to invalid handle [ 738.577222][T24243] binder: 24242:24243 transaction failed 29189/-3, size 0-0 line 3147 [ 738.593573][T24243] binder: 24242:24243 ioctl c0306201 20000340 returned -14 16:26:48 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000f00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 738.607788][ T3757] binder: release 24242:24243 transaction 4846 out, still active [ 738.621405][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 738.627342][ T3757] binder: send failed reply for transaction 4846, target dead 16:26:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x40c000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x9, 0x4, 0x3, 0x1}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x2, @rand_addr="13b242176fd7249adeda1d03c167ffc2", 0x8}}, [0x400, 0x1, 0x5, 0x7, 0x6, 0x3ed8, 0x401, 0x8, 0x3, 0x1ff, 0x1, 0x6, 0x67, 0x5, 0x88]}, &(0x7f0000000500)=0x100) write$P9_RRENAME(r1, &(0x7f00000002c0)={0x7, 0x15, 0x1}, 0x7) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r3, r4) getpgrp(0xffffffffffffffff) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000240), 0x4) readahead(r0, 0x51, 0x800) 16:26:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x42, 0x0, &(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f00000009c0)=ANY=[@ANYPTR=&(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRESDEC], @ANYPTR64=&(0x7f0000000980)=ANY=[@ANYRES16=r1, @ANYRES64=r1], @ANYRES16=r1], @ANYBLOB="7882d641c8bcb3d7d60895633c6687b8555182eda2e7345d4c1cab07bbbfdb47ef4355ebc716958d98467a11bfe69f8d8839362f", @ANYRES64=r1, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYRES16=r0, @ANYPTR64], @ANYBLOB="cf6b8c58843e20712da9305c12878027b6cb848373132b3defd9ddb39af94ca5c718a76c632c0d9a61b8f0c32d3a553440225fa81491eaa6d506be3d99d0a1142582af8c386530e90f649e4c47701c0e4d8ce1c0b44e169ea1f5a25ca6d8d43c7083669170e698848f297e46cc9bfb45679c9083772a58ed"], @ANYRES16=r0], 0xfffffffffffffe69, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e22, @local}}, [0x1, 0x7, 0x1800, 0x8, 0x100000001, 0x7, 0x7fff, 0x10001, 0x3, 0x8, 0x400, 0xa76, 0x1, 0x5, 0x3d17]}, &(0x7f0000000900)=0x100) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000940)=@assoc_value={r3, 0x100000001}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r4, &(0x7f0000000140)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) ioctl$CAPI_SET_FLAGS(r5, 0x80044324, &(0x7f0000000100)=0x1) 16:26:49 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:49 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 739.066314][T24275] binder: 24269:24275 unknown command 536873408 [ 739.095267][T24275] binder: 24269:24275 ioctl c0306201 20000300 returned -22 [ 739.116101][T24275] binder: BINDER_SET_CONTEXT_MGR already set [ 739.124044][T24284] binder: 24269:24284 unknown command 536873408 [ 739.127379][T24275] binder: 24269:24275 ioctl 40046207 0 returned -16 [ 739.134354][T24284] binder: 24269:24284 ioctl c0306201 20000300 returned -22 [ 739.151434][T24287] binder_alloc: 24269: binder_alloc_buf, no vma [ 739.158314][ T3757] binder: release 24269:24275 transaction 4851 out, still active [ 739.184547][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 739.217183][ T3757] binder: send failed reply for transaction 4851, target dead 16:26:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="010000e13f7cca300354bcaf982ede8b00fa9abe0d77bafeccefa8fd8f6b440bc461652ebab02ddede0b021b68512f42c882a9a6f315b1af1b895bf02288993b09118ce172bb1a2bc8f6d86a3e02d1b18553fd2b6bdc0ea0d7e24054851fe7a3b2d109cd00330a178a88d48f9ac1a6b68eed70317f96ccf336ee130e85ee9e26b04586f2772272f667ef8ef303a92c2fef3d162a242b06894ecfa03a6ae2a80f024cf8ebc3dceedfd9b1957d74fdbe80a3a66dce324e44bf85993a8bf6bc7968b19cadb4a15d00e476b99ed7ea3b39fd218a894bad0e23d1202fd369f773ccfb06b00fe25594ced67823c966", @ANYRES32=0x0], &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000000180), 0xfffffffffffffed1}], 0x9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000640)={r1}, &(0x7f0000000140)=0x8) prctl$PR_SET_FP_MODE(0x2d, 0x3) 16:26:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80800) connect$packet(r1, &(0x7f0000000280)={0x11, 0xf8, r2, 0x1, 0x200a}, 0x14) 16:26:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000ffffffffffffffde000000000000000000000000000000000000000000000000000000000000000000000000407561fd84b3720c288448c7d312a8827ade063d38feb22ccefd2776cd7a4dcada13662e723bddf8a6692154c87fb1d735c56695"], 0x0, 0x0, 0x0}) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, &(0x7f0000000000)=0x80, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000001c0)=""/132, 0x9}) 16:26:49 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001100250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:49 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 739.304234][T24301] binder_alloc_mmap_handler: 4 callbacks suppressed [ 739.304250][T24301] binder_alloc: binder_alloc_mmap_handler: 24297 20001000-20004000 already mapped failed -16 16:26:49 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x26000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r3 = socket$inet(0x10, 0x80002, 0x0) faccessat(r2, &(0x7f0000000140)='./file0\x00', 0x5, 0x200) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 739.368321][T24299] binder: BINDER_SET_CONTEXT_MGR already set [ 739.388731][T24299] binder: 24297:24299 ioctl 40046207 0 returned -16 [ 739.405549][T24312] binder_alloc: 24297: binder_alloc_buf, no vma 16:26:49 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001200250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 739.420118][T24299] binder_alloc: 24297: binder_alloc_buf, no vma [ 739.427186][ T3757] binder: release 24297:24299 transaction 4854 out, still active [ 739.443445][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 739.461557][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 739.488028][ T3757] binder: send failed reply for transaction 4854, target dead [ 739.516206][ T3757] binder: undelivered transaction 4855, process died. 16:26:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfbd, 0x20000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:50 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:50 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000700250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:50 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001300250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 739.925467][T24325] binder: 24324:24325 got new transaction with bad transaction stack, transaction 4859 has target 24324:0 [ 739.946038][T24332] __nla_parse: 31 callbacks suppressed [ 739.946075][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 739.970404][T24336] binder_alloc: binder_alloc_mmap_handler: 24324 20001000-20004000 already mapped failed -16 [ 739.991890][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 739.995684][T24336] binder: BINDER_SET_CONTEXT_MGR already set [ 740.012909][T24336] binder: 24324:24336 ioctl 40046207 0 returned -16 [ 740.013635][T24339] binder_alloc: 24324: binder_alloc_buf, no vma [ 740.026641][T24325] binder_alloc: 24324: binder_alloc_buf, no vma [ 740.033429][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x9, @mcast1, 0x81}}}, &(0x7f0000000180)=0x84) 16:26:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2200, 0x0) exit(0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000340), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101002, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x3fffffffffe) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r1, r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x401}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={r5, 0x80000000}, &(0x7f0000000340)=0x8) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) getpgrp(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = socket$inet(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:50 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001400250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:50 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_crypto(0x10, 0x3, 0x15) [ 740.174822][T24352] binder: 24346:24352 got new transaction with bad transaction stack, transaction 4864 has target 24346:0 [ 740.194408][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 740.231156][T24359] binder_alloc: binder_alloc_mmap_handler: 24346 20001000-20004000 already mapped failed -16 [ 740.245620][T24352] binder: BINDER_SET_CONTEXT_MGR already set [ 740.252557][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 740.263730][T24352] binder: 24346:24352 ioctl 40046207 0 returned -16 [ 740.272235][T24359] binder_alloc: 24346: binder_alloc_buf, no vma 16:26:50 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001500250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000001c0)={0x7, 0xa, 0x1f, "de0514dc6dba12ed924ab601dca68681401c2bd21b18205dfef85bd4af419db1fa9bf6d06578c2886f93cf9bdbad922976fda153c15e62778f45037d", 0x22, "03173aeb28e924be4c8125c57a8ddb20ab15ff1a5cbb77560c18d55946d5933bc09f59917c2db7eb55976550302e7c757148ca6279f6632c61cafe08", 0x70}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 740.279982][ T3757] binder_thread_release: 1 callbacks suppressed [ 740.279993][ T3757] binder: release 24346:24352 transaction 4864 out, still active [ 740.295397][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 740.301443][T24360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 740.309354][ T3757] binder_send_failed_reply: 1 callbacks suppressed [ 740.309360][ T3757] binder: send failed reply for transaction 4864, target dead [ 740.394823][T24369] binder: 24368:24369 got new transaction with bad transaction stack, transaction 4868 has target 24368:0 [ 740.418207][T24369] binder: BINDER_SET_CONTEXT_MGR already set [ 740.425605][T24371] binder_alloc: 24368: binder_alloc_buf, no vma [ 740.437875][T24369] binder: 24368:24369 ioctl 40046207 0 returned -16 [ 740.446367][T24369] binder_alloc: 24368: binder_alloc_buf, no vma [ 740.446425][ T3757] binder: release 24368:24369 transaction 4868 out, still active [ 740.465188][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 740.471205][ T3757] binder: send failed reply for transaction 4868, target dead 16:26:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:50 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x8, 0x101, 0x0, 0x0, 0x3, 0x81, 0x10000, {0x0, @in6={{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffffe}}, 0x8, 0x8, 0x3, 0x1, 0x2}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r3, 0xe2, "90486181097a54b8bb9fb7be4a183b443bc50641dcad4599181711e300417291a91724eed5cd63e72c3380be232844272c77ff43af255f531e4fc0bd6766d77e075c58ae1c575dabe9e168795cb7def4155f3e6c6f2b4a48ccd2de6ccb9b814b18b97cb61340de6b048f7148be69ab73df8331bc67de090e779fa4ae03f125d0d91c491d07d2fd5df49c47638298e75ac22000aecc4d00df3fbc2d58d2fa485c942a7730484d96cb43af6641cdda0ea2d7a06e56e3bd36e14af932d11f040ca9802f7ff840cbf0155372d43c503ad7f96c0fd4b320ff5eabf850f64d80405611c14c"}, &(0x7f0000000140)=0xea) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:50 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001600250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 740.773979][T24380] binder: 24375:24380 got new transaction with bad transaction stack, transaction 4873 has target 24375:0 [ 740.808340][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 740.811197][T24384] binder_alloc: binder_alloc_mmap_handler: 24375 20001000-20004000 already mapped failed -16 [ 740.832567][T24380] binder: BINDER_SET_CONTEXT_MGR already set [ 740.833144][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 740.839765][T24380] binder: 24375:24380 ioctl 40046207 0 returned -16 [ 740.850053][ T5] binder: release 24375:24380 transaction 4873 out, still active [ 740.865344][ T5] binder: undelivered TRANSACTION_COMPLETE 16:26:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 740.871351][ T5] binder_release_work: 25 callbacks suppressed [ 740.871357][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 740.883937][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 740.890335][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 740.897363][ T5] binder: send failed reply for transaction 4873, target dead [ 740.924835][T24391] binder: 24389:24391 got new transaction with bad transaction stack, transaction 4878 has target 24389:0 [ 740.946765][T24392] binder_alloc: binder_alloc_mmap_handler: 24389 20001000-20004000 already mapped failed -16 [ 740.965456][T24391] binder: BINDER_SET_CONTEXT_MGR already set [ 740.972760][T24391] binder: 24389:24391 ioctl 40046207 0 returned -16 [ 740.997936][ T3757] binder: release 24389:24391 transaction 4878 out, still active [ 741.021947][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 741.041493][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 16:26:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x2) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0xce, 0x1, 0x3ff, 0xf0, 0x8, 0x0, "be0a35f582c8505b3475f5f3fa5e59c027081de0f529403ef2b6c84defb7e2339aa379e23f2745b86f7984d1979e54420f5b5c3a1073429e7001a2b0944b8f5654a10b7552c0df62aeb0f57c89ce916ae652ae110250f5b21a144fe9df43259f4e00bd8d1fde52b45f7508c39352dac053f7ba5dcc0f37c2e7d9c38420f74793079208e58bda5f40c9d38b9bb8b07ab2b18eed2b70ca80456a99cb53dacaec3b95808b7d58fcc4360e0389e0c7a753a381ca3abe2e75dc6ed0876e9142da4d2c11e8eb5d3165a7ebec569e69a293"}, 0x1e6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:26:51 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001700250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:51 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:51 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2200, 0x0) exit(0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000340), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101002, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x3fffffffffe) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r1, r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x401}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={r5, 0x80000000}, &(0x7f0000000340)=0x8) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) getpgrp(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = socket$inet(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000100)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 741.056789][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 741.073513][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 741.106949][T24408] binder: BINDER_SET_CONTEXT_MGR already set [ 741.117736][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 741.123478][T24408] binder: 24407:24408 ioctl 40046207 0 returned -16 [ 741.134924][ T3757] binder: send failed reply for transaction 4878, target dead 16:26:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 741.155638][ T3757] binder: release 24407:24412 transaction 4884 out, still active [ 741.179791][T24414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 741.183055][ T3757] binder: send failed reply for transaction 4884, target dead 16:26:51 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001800250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 741.220213][T24418] binder: 24417:24418 got new transaction with bad transaction stack, transaction 4886 has target 24417:0 [ 741.238224][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 741.246513][T24419] binder_alloc: binder_alloc_mmap_handler: 24417 20001000-20004000 already mapped failed -16 [ 741.261534][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 741.268065][T24418] binder: BINDER_SET_CONTEXT_MGR already set [ 741.277993][T24418] binder: 24417:24418 ioctl 40046207 0 returned -16 [ 741.285002][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 741.293660][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 741.309539][ T5] binder: send failed reply for transaction 4886 to 24417:24418 [ 741.337132][ T5] binder: undelivered TRANSACTION_ERROR: 29201 16:26:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:51 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000100)=""/31, 0x10000, 0x1000, 0x2}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000286aa2f51566dde8000000000000000000000000000000000000000000000000000000000000001000000000000000"], 0x0, 0x0, 0x0}) 16:26:51 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001900250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 741.640469][T24439] binder_alloc: binder_alloc_mmap_handler: 24432 20001000-20004000 already mapped failed -16 [ 741.652428][T24439] binder: BINDER_SET_CONTEXT_MGR already set [ 741.659544][T24439] binder: 24432:24439 ioctl 40046207 0 returned -16 [ 741.666809][ T5] binder: release 24432:24435 transaction 4891 out, still active [ 741.677585][ T5] binder: send failed reply for transaction 4891, target dead 16:26:51 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001a00250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 741.685456][ T5] binder: undelivered transaction 4892, process died. 16:26:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x90300, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x9, 0xff}, 'port0\x00', 0x0, 0x4, 0x3, 0x2, 0x6, 0x800, 0x401, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x2, 0x4) fremovexattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/udmabuf\x00', 0x2) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x10000, 0x3, 0x800, 0x5, 0x4}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0xfffffffffffff29c, 0xff, 0x1, 0x200, 0x80000001, 0x2, 0x7, 0x8}, &(0x7f0000000100)=0x20) fcntl$addseals(r2, 0x409, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x800) 16:26:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x20011, r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff801, 0x1) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='veth1_to_hsr\x00') ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="006340400000000000000000000000af274dd10000000000e1ffffffffffffff00000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:52 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:52 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24002800250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) getpgrp(0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) getpgrp(r2) r3 = socket$inet(0x10, 0x2, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x1, r1}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xd}], 0x1}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000001200)={0x4, 0x0, &(0x7f0000000200)="39f8786ebbab83b00cd293c70e3f5da75a78136f102b2cc4d7ae12861b23952dc516153c5879ee3d68f9341fecdd43331a25b6cd28a50bddbc6af11f0bfc53ca10cf7c9125e298f4dfed65bdbbba7126d296c9bfe1a276bda5f395edf53f95d5ad4d467e3bd1b9bbb5bb8de784c8e1af88117547e35b9f406f92763e379b73b7c81f3d83109b83463939e44fac1b80d5209477f0a3cf26c3ef4fbf0ae651514d2d3641da04ba7a766167bdd8a2577f90929583f24afc0d73f5000243d225be1ec526bfc90e8f05d9274cc727c19ad587f378123749c674a0f10a36647bb85b6dc7e2b40a90d5d0dc08d3d8e23ac97fccaf9d1def68c7d0161821a98ccb6f83341d940555ad24ce93cd9572419e7b37312cb5eb953cc7009ae2ce6514ec04cb088ece600c91f31a9e27d9a7a346fe07f21f08d340c081eec112b350b8e89ce5f77b8a355dbe5e3f6130ea3b79f390fd116a66ec3c860f6fec0168a2da3117286ebf1129f0830c597eb2e043ae0b99f7c3ee718efca5226ec652ab8bc667f863a4eab847de862c98ff8563ac3f4ca53a37dc52625a7c350ead62e7da5d89e2d38162e3263c3f99a9e3479893f01bfcb770cb69d58235bc5ae860d64550f1110fbcf89590f942165da1e8895e8a10f232899ac5fa209bcd2d57dca9d993f22e549deabe7541d10811a07aec948f98f805a964df00e2f52db19caf9411c9d9c95ea5bd9112d58dd0b22d52876befa883a01dd1c5df868e13951391b404cf97891f230103dfef04a07ac1772aef1c52856c3ebad55b6eb70f51de7ec426dfac4d91b55a3ea531e1e92c44b0a3d9d3eecb25fadbf893689cb194d9526ecd95af8fad370ae3d5a7e80ac07cbe9430b0198fbe82e6d280391bb0d1312cc5665fd2a0c7bdd904ade7759460d7c087cb78a3ab2c7ec9a0856f849109546a7683b73c9f704b0658e4873d1529ed9ac8a49518fa08a5182ca308deb5564fd6dc858930b1d164be12e81154ef7710a4eebeca19d3c097cd6edc7454e257cd345fc8962684aafaa9d7490bbb1e136791c0f985ae7203743261af1810f7cc01f039f67be0e94633e0a5b9059d6fa312036c6cb321595af13b41845cd29a44a82e55ca3d1466a16544918eed1693ecbd5f59dcc56a6d11129c133b29b578416bcbad8f6ad4adf233206fe0eb4388ec59b257a761a82c194053782d0ef9b2ff45655a2fa44271ff428fe14e408d6a45626fc5af6b10e6c0d9ecf579126fe8a4a24a24a91cb5e5984c5146df122d364ef90ad368ad5dda93e6c6ad446e686455728a113fb31489a3a709fefe44cec3f33a3fa5f0774739b1dbb2f3956b97ad012b563ca3d6ad4069c8b6411c26153833092f1a8b90232874c0d64d0e8e34c3b6cabc2fb425c27c77aa4f144c62a0ede2dc31e09f143b61bb874d0b32c640cacb764e6c1e836881f46558589eeeb1badb1399832a1277985a119cb628efc1f75804e949bd5dc430155386cc3ac7722f3c2c318de0da3047ef3b2b3fb129bb44ebc96738eccef3be0afcd011550c31c719bc58603c2763da5756132152d519f4249bedc320812a07d2d7d2654ebbdfabe052cdd149d728e38fd1086e68dc54227dd616739547f52f0ac2dccce57db2e9aa1ccc3a40fca222235321acb596217f14ccbd31b215fbee8fee256cdf265795a8051563e42d7f39847ea09c679af5629d45a80c3a9f06f571bbbf889b7d755729bfc086edbd656bc3509b367b37d7e6695fce96795e31eae64ec483348422949a765187a858d1effb404ad584d0f4a9414c52b498dbb4acadc2e0319270db6ab7653ff202367d71270d91fb617ca40809b2f01e0d5ac349fc182384c77cdf3908fcf2a713d63085c7e3c163408faac9fd718cfa23075eda429913754a6d48ceab7c8a61be9a40f6323c5d7f296604fdc809f54fdb1d11a90d38fccc26ef45bd0727085a7741da85f80d1856c1205623540ea8970e5e3ec949d362965c7e6f41e0dd30f238ffb40741a6d617f69af6f45575ca5ba515aa945644c20298f81f0ed9c72365925b41152ee266527bd8d957db0e604508279f7f7c1460eedcf4043ac40c0a58784b85c7ce5eb1389a0b6619f974e46aa3a3a2feb714967a49a96d25e074333744d738c5d1acfc09f29de977072587903bbce17496043f49195294e7e480f2432cdf1565875fb5759c291ddd960ea2e2c9af76e739de4fad2276b5d71139cc7caf30823809d3663212fb3f9503c52ca7cdd653a82f17f80dc6e07c8ca52e522b0f5f681a628fa4463b8a371345f9e8a8e4261c355c8a95fc6edb21e011618c1f6152b56bbbaaee24bce8e79dc2f171c5b73c72f0d87ed9531e33509250859b88723ea52e05741214c017c25b0a47161dc12cbdbe0312b72c2427620fb0add5068308ef02eb696614d7b1ed43a9c78a44e6bd6213ec0047b50d5a84b9a9a8dfa91d300a2f508482c8ca31178211db809f9f6e7a908aab2a97b54df41035c6af246645c5c651d9c14c116a2882f29da5e64c3fc5c8b3f619db304a32917d1d886cbebaf666f337a1a7e40fb4322c8c8d2ce233d5862146e751f31181479c5694909f2e1a3a37d415cae5f95d1f37dfd046dae01b6987ce579bb73590d90b544dd4ff9ec54ee87aec7cdeba8abed9f8e3ea07c30b15dc42c037b617f5ef7985eceade61984442ed85f67912e32b9201809a7a259cb284df2eb5a19b21f099b498859be8c139d499e11ae3c9fd4d04dc80bf8fd119e7c719ea5d8208e66dd794a8d4b80223f0fb6191e19329252a19a6fcb12494b2fc3ae7368c041c6ef46bb1210286c1425a21055709d5637dd8c7513fee085bfa5303b31bdf473a72f75f42ceb99e5475bc3660c32132ac414a85ff21543910da1b0a13dc594430790249160237428e55f4ab1a4994b309a10da0de6391935d39737a53257d9be84a793f37e4057868faa4e4d37e815c592b7abc81c03733422cd24fce4f5e74531f3d936a16141d13a5ec1583d74938a0ac97ff93e58890e1125c5327c305ce72a26f3fcb3b10ca1c29937592b85c61d4f48bfd1c67b5995549d122919ba86d2ee9f5655e7e2fcafd5da686ea1141b1e13024b5c55b655bee90f150cca7a7fa6055a27c56088f1ef8eb7b766b6025e7b91c2b66c03c8dfbd4377f7b915dffbdb409378ca5c65e04daff6ea6290cf275ebb930e5dc77d93ff8b21bd9fb59763c25f6cd5d63dab22dad89ffc816c8dbf609957c3f755f8fe55c1379ceee8de84894bcf2f75b06a45d2912c5847028b30b317323c9d45ae9f4a4a141f5f3cf57ee37c24bb57f8880c19d8d8af7fd1cf0afb36b5c54bfd68473f3f8854f0f6b34cf516961406ba5277df8087eac101a60c99dd611db39516354e3db59e32e5e07936b312ab587ffa34387470693f4cfa81483a4cffbccf71e439fa34ad95ce3ab6ee21b91e192ac07e3b49080a6375c81a1ca4d21d535a55810e566e474dd85c87741bb3c7902995b04213d796b3d488562851f2e9b60400f522a0dc7be37a3173cdca896b052aa1bef93187a6d0187d612a1e09b390d404083a08d844dd5deae8e96db53e57e6212c2013186b5bb153d3f3a72faaadd236a8346955019b2734ae4dc776d11e8491891094c0eda60d020116ebfd598f40c2b3910254dadbafd2cd07a26dfd4ebd7e0aa37ffc3474dfca4bb6b0f8a9df56d90dcbbf1903e13dc632a21abca9e237974d8e9af2fe513309de0109bef6162c0df375713139188695e90429f2028de7193f1a9d786732cc311113579d108181993017dfac159b9726a915efde306e0d270863e43881e58de3f04995dd712a2cadf4a1087df4ef695d0d5c007e18cec4ac26bb6d27c674b26be6923d9bad05e8a2a3c177d90a12f4217f805f45ef9d7700a2c7bbd825a769404eb3167a6b31807447138653b0b09a9f505fb9645fab73c0a3ee146136f5f17908fbebb911841e4bd0153f282525d63109e95ddef51b26d42626ec20cbc79d75a030108de2d4d7545edc888c7a038608dd41aa64b7b5e531006387ecc76baad72188aab0bbc4bc516d85c53d9bea1c339c9b1396dee77a79a3d66bbb9a606efd26cc09eea3ffeb25ed1ec627e1d73fb79319d03924b68071e084a1c9884ba3c7590046569f582c7653893ebcd794283b149d3802f519099db308e07f2be75a9211dfcba52a3dc6546637ec39297898cad906efb9d42b8c947d8528f33ef68565e6dabd2e31add4f9ea6470fb5abc653ba299a4e8e42d002ceb1841d118470d7579b9dd4f02af1f5b3a9d0c697df3d2102e606c249385f20ebf901b80c72688a4abf521d6b7a9f104df0a4c6baf0f5288ed14afb3493b29de8de3ecc5dbf9be3c695bdc3784f91c1bf6c703681435f901437ac98b930d86964d80642f5c8270e722eb5b6e058bb9fd7b194bdcca255683b09f4dd908a1e5e87180ae30894d3df02733cace34b11e22ae1d3b7d56b1950d4aee32eafd3891643681efb3ddfed930ce8f1729b875893402e2e97c95382e70cefb6e43a55cc63729d3756331a76e73e1d585e1d24bf207596211e46059ad8d442c8c659751c513e2f13ada9a5c8266dbe2b5e5c000397009eec6520bc59c7e7a00cccfac18b7041477dce83e16ed864efa26c57a75b63034bab4576caf6db68b59881dbd1fc617cf1ec58e4efbe7c269c43ded4eb033f6afc80e007020738600bc734a957c4627c04c3212e0617b391b2aa04cc931edcdaff5ccf6d8c02b3dccb8a1bbd50c09bee3b2af290f7d7647c459f534bd2381ddb9d3e414eff721d146ec5fab19795c6ddb8f7a72c2bb9e5f8fac485f6d26edc60da0a8d3566f7e37d97502cfd95b8534499a4df744f437454d5b6c15bfd49ce030cf0e69b75407b68278f3cedfada699a79adfb0e8400f4ff979ac2a0861ae33ccff01014d4ddafb0f056c64d95cc5a5edc52dbc44cf46c4594e0b30557277b232a9291cb1ca142580ac1beaac40821a04bbb85e9dbf8ce57ec0676c17c88f1a8d4334b48c6651f21386fd1bee740369492539d03ec7418f96470eb25b83642c5fab57ff06e7b6b0d9597e1208cb44a18bd8bb4d06f5866a50cddaa4e86a76308c31478ccf459d2dc2c0039469c95ec8d5e1d6e53de63594e79a07b46af467345be01c1d2ce19da4b8208e88caaf22416dc554ab3b689bcdd668c307550a8e3b7827eb298215348b742f6f819a86f56ba9fa7674cd049bd793b5bc97b8f5777c0b4d02522d3e058ab016e70f23466ada70a4fe6afc384b3aa1dde6f95a999b11a2e36799d63ec3cfef4742b4cbee5a2fb46b2f9a5e7b3e022ed9d3a115f77f73c32932847de9dc81b29c290878e6e6be34125cf71b9afad2a4a7d5d4502574850cee385d86bc205bd0ed040cb8ee0fb8fe02a6665beada33d7a978df67e08b5cdb5b099a39ec5485ac22ac96041097472d8a85e25b894e92a38f4f3e22424b5e90422ac702a374007b2d8d76cdaf7e8aa8691975a3accbec17f9957e0a1ff993739a394384ab9cb0fe7fb7b4c4310c2653216e6b0904b40768e60dcd48fea5d2197bd5c4dbbefe9c7a49b358839b324e77aa3acb8b0d5e4fb6147c28b38844956176e15f44f842589035619193b2b45b2eaa7601dfa385c9e4b55b9422b51414be54b9ee521e098226f178f062b6f776a12d563a55749e437c27a6bfdba9a457c06d4e7609dcb307872199bcfc9b3bb90e01107778a52f29ed2eb1e8dd05d7278d427c145b13417d5b9866b57206bf1c2fdc9f109d960c29c58d070c6e6721cca7ff13f3a436d", {0x8, 0x2, 0x3234564e, 0xf, 0x6, 0x3, 0x4, 0x1}}) [ 741.958915][T24458] binder_alloc: binder_alloc_mmap_handler: 24454 20001000-20004000 already mapped failed -16 16:26:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) getpgrp(0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) getpgrp(r2) r3 = socket$inet(0x10, 0x2, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x1, r1}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xd}], 0x1}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000001200)={0x4, 0x0, &(0x7f0000000200)="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", {0x8, 0x2, 0x3234564e, 0xf, 0x6, 0x3, 0x4, 0x1}}) [ 742.024950][T24458] binder: BINDER_SET_CONTEXT_MGR already set [ 742.036261][T24458] binder: 24454:24458 ioctl 40046207 0 returned -16 [ 742.054593][ T3757] binder: release 24454:24455 transaction 4897 out, still active 16:26:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4080, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0x8}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x7fffffff, 0x0, 0xffff, 0x0, 0x0, 0x43228, 0x6, 0x6, 0x4, 0x0, 0x7fff, 0x40, 0xffffffff, 0x24, 0x10000, 0x3, 0xff, 0x7f, 0x4, 0x8, 0x8, 0x8, 0x1000, 0x3, 0x9, 0x2, 0x62b2, 0x5, 0x5, 0x311, 0x5749, 0x800, 0xffffffffffff207d, 0x3, 0x6, 0x0, 0x5, 0x5, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4010, 0x7, 0x4, 0x6, 0x2, 0x7, 0x7fffffff}, r1, 0xc, r0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000240)={0x1, 0xc9c1, 0xffff, @broadcast, 'bridge0\x00'}) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4000) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000002c0)={r4, 0x80000, r2}) [ 742.076087][ T3757] binder: undelivered transaction 4896, process died. [ 742.126145][ T3757] binder: send failed reply for transaction 4897, target dead 16:26:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:52 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24006000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:52 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000380)={0x6, 0x3, @start={0x2000000000, 0x1}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x980000, 0x101, 0xc4e, [], &(0x7f0000000140)={0xa10905, 0x2, [], @p_u8=&(0x7f0000000100)=0x77c3f3f9}}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:52 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4080, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0x8}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x7fffffff, 0x0, 0xffff, 0x0, 0x0, 0x43228, 0x6, 0x6, 0x4, 0x0, 0x7fff, 0x40, 0xffffffff, 0x24, 0x10000, 0x3, 0xff, 0x7f, 0x4, 0x8, 0x8, 0x8, 0x1000, 0x3, 0x9, 0x2, 0x62b2, 0x5, 0x5, 0x311, 0x5749, 0x800, 0xffffffffffff207d, 0x3, 0x6, 0x0, 0x5, 0x5, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4010, 0x7, 0x4, 0x6, 0x2, 0x7, 0x7fffffff}, r1, 0xc, r0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000240)={0x1, 0xc9c1, 0xffff, @broadcast, 'bridge0\x00'}) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4000) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000002c0)={r4, 0x80000, r2}) [ 742.459492][T24481] binder: 24480:24481 got new transaction with bad transaction stack, transaction 4901 has target 24480:0 [ 742.485838][T24481] binder_transaction: 26 callbacks suppressed [ 742.485856][T24481] binder: 24480:24481 transaction failed 29201/-71, size 0-0 line 3044 [ 742.510539][T24494] binder_alloc: binder_alloc_mmap_handler: 24480 20001000-20004000 already mapped failed -16 [ 742.523349][T24481] binder: BINDER_SET_CONTEXT_MGR already set [ 742.530554][T24481] binder: 24480:24481 ioctl 40046207 0 returned -16 [ 742.530683][T24495] binder: 24480:24495 transaction failed 29189/-3, size 0-0 line 3147 [ 742.546614][T24481] binder: 24480:24481 transaction failed 29189/-3, size 0-0 line 3147 [ 742.555125][ T3757] binder: release 24480:24481 transaction 4901 out, still active [ 742.563901][ T3757] binder: send failed reply for transaction 4901, target dead 16:26:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r1, 0x10000}, 0x8) 16:26:53 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400f000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:53 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4080, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0x8}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x7fffffff, 0x0, 0xffff, 0x0, 0x0, 0x43228, 0x6, 0x6, 0x4, 0x0, 0x7fff, 0x40, 0xffffffff, 0x24, 0x10000, 0x3, 0xff, 0x7f, 0x4, 0x8, 0x8, 0x8, 0x1000, 0x3, 0x9, 0x2, 0x62b2, 0x5, 0x5, 0x311, 0x5749, 0x800, 0xffffffffffff207d, 0x3, 0x6, 0x0, 0x5, 0x5, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4010, 0x7, 0x4, 0x6, 0x2, 0x7, 0x7fffffff}, r1, 0xc, r0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000240)={0x1, 0xc9c1, 0xffff, @broadcast, 'bridge0\x00'}) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4000) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000002c0)={r4, 0x80000, r2}) 16:26:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'bridge_slave_0\x00', 0xa100}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 742.883431][T24513] binder: 24505:24513 got new transaction with bad transaction stack, transaction 4906 has target 24505:0 [ 742.896043][T24513] binder: 24505:24513 transaction failed 29201/-71, size 0-0 line 3044 [ 742.907458][T24518] binder_alloc: binder_alloc_mmap_handler: 24505 20001000-20004000 already mapped failed -16 [ 742.918248][T24513] binder: BINDER_SET_CONTEXT_MGR already set [ 742.924679][T24513] binder: 24505:24513 ioctl 40046207 0 returned -16 16:26:53 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000003250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 742.924734][T24518] binder: 24505:24518 transaction failed 29189/-3, size 0-0 line 3147 [ 742.944580][ T5] binder: release 24505:24513 transaction 4906 out, still active [ 742.966323][ T5] binder: send failed reply for transaction 4906, target dead [ 743.022751][T24527] binder: 24526:24527 transaction failed 29189/-3, size 0-0 line 3147 [ 743.039812][T24527] binder: BINDER_SET_CONTEXT_MGR already set [ 743.048947][T24529] binder: 24526:24529 transaction failed 29189/-3, size 0-0 line 3147 [ 743.066224][T24527] binder: 24526:24527 ioctl 40046207 0 returned -16 16:26:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:53 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) capget(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)={0x7, 0x6, 0xff, 0x9, 0x9, 0x8000}) 16:26:53 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000005250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100), 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 743.315807][T24539] binder: 24538:24539 got new transaction with bad transaction stack, transaction 4913 has target 24538:0 [ 743.327952][T24539] binder: 24538:24539 transaction failed 29201/-71, size 0-0 line 3044 [ 743.344502][T24539] binder: BINDER_SET_CONTEXT_MGR already set [ 743.373830][T24539] binder: 24538:24539 ioctl 40046207 0 returned -16 [ 743.380922][T24545] binder_alloc_new_buf_locked: 15 callbacks suppressed [ 743.380930][T24545] binder_alloc: 24538: binder_alloc_buf, no vma [ 743.401729][ T3757] binder: release 24538:24539 transaction 4913 out, still active [ 743.406039][T24539] binder_alloc: 24538: binder_alloc_buf, no vma [ 743.416115][T24539] binder: 24538:24539 transaction failed 29189/-3, size 0-0 line 3147 [ 743.424551][T24545] binder: 24538:24545 transaction failed 29189/-3, size 0-0 line 3147 [ 743.431149][ T3757] binder_release_work: 8 callbacks suppressed [ 743.431154][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 743.451719][ T3757] binder: send failed reply for transaction 4913, target dead 16:26:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000240)={0x2, 'syz1\x00'}) r2 = socket$inet(0x10, 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000804) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r4, 0xcbe}, &(0x7f0000000500)=0x8) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'cgroup]\x00'}) setsockopt$inet_dccp_int(r2, 0x21, 0x1, &(0x7f00000001c0)=0x98, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x190, 0x1, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x919, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x7, 0x100, 0x2, 0x100000000, 0xfffffffffffffffc, 0x0, 0x3f, 0x4, 0x0, 0x2, 0x1, 0x401, 0x5, 0x2, 0x2, 0x8, 0x9, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x810, 0x0, 0x200, 0x9, 0x9, 0x1, 0x6}, r0, 0x0, 0xffffffffffffff9c, 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = semget$private(0x0, 0x3, 0x80) semctl$IPC_INFO(r5, 0x2000003, 0x3, &(0x7f0000001200)=""/4096) 16:26:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x3, 0x7f9d465b, 0x5c9a42fb, 0x2}, 'syz1\x00', 0x12}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000feff00000000000000789c45ca1832ee3e900b2dad8e54abee2284dedc20ed603ed26b6ec97c4900000000164df375e287784b60cf6307174ffc60db50087c361b1d35088b2526f224d609ca1cdb534e52ba0d7cf56601dcf78877563b7ac4e479e26b4d126348b148654957361717ffa1e98f2e3fb8ccd4190cbcc116ff03b6cab788e23b70a291"], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80400, 0x44) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x1d, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) 16:26:53 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000006250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:53 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0f000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 743.739943][T24559] binder: 24558:24559 got transaction to context manager from process owning it 16:26:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0xfffffffffffffffe) 16:26:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000240)={0x2, 'syz1\x00'}) r2 = socket$inet(0x10, 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000804) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r4, 0xcbe}, &(0x7f0000000500)=0x8) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'cgroup]\x00'}) setsockopt$inet_dccp_int(r2, 0x21, 0x1, &(0x7f00000001c0)=0x98, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x190, 0x1, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x919, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x7, 0x100, 0x2, 0x100000000, 0xfffffffffffffffc, 0x0, 0x3f, 0x4, 0x0, 0x2, 0x1, 0x401, 0x5, 0x2, 0x2, 0x8, 0x9, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x810, 0x0, 0x200, 0x9, 0x9, 0x1, 0x6}, r0, 0x0, 0xffffffffffffff9c, 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = semget$private(0x0, 0x3, 0x80) semctl$IPC_INFO(r5, 0x2000003, 0x3, &(0x7f0000001200)=""/4096) [ 743.785005][T24569] binder: 24558:24569 got transaction to context manager from process owning it [ 743.859795][T24569] binder: BINDER_SET_CONTEXT_MGR already set [ 743.865845][T24569] binder: 24558:24569 ioctl 40046207 0 returned -16 [ 743.904835][T24578] binder: 24558:24578 got transaction to context manager from process owning it 16:26:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r1, 0x6aa0}, 0x8) 16:26:54 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000007250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:54 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="10000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000240)={0x2, 'syz1\x00'}) r2 = socket$inet(0x10, 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000804) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r4, 0xcbe}, &(0x7f0000000500)=0x8) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'cgroup]\x00'}) setsockopt$inet_dccp_int(r2, 0x21, 0x1, &(0x7f00000001c0)=0x98, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x190, 0x1, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x919, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x7, 0x100, 0x2, 0x100000000, 0xfffffffffffffffc, 0x0, 0x3f, 0x4, 0x0, 0x2, 0x1, 0x401, 0x5, 0x2, 0x2, 0x8, 0x9, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x810, 0x0, 0x200, 0x9, 0x9, 0x1, 0x6}, r0, 0x0, 0xffffffffffffff9c, 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = semget$private(0x0, 0x3, 0x80) semctl$IPC_INFO(r5, 0x2000003, 0x3, &(0x7f0000001200)=""/4096) 16:26:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffeab, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 744.154218][T24589] binder: 24588:24589 got transaction to context manager from process owning it [ 744.190928][T24589] binder: 24588:24589 ioctl c0306201 20000340 returned -14 16:26:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x300000000000000) 16:26:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000100)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 744.202690][T24598] binder: 24588:24598 got transaction to context manager from process owning it [ 744.215665][T24589] binder: BINDER_SET_CONTEXT_MGR already set [ 744.222925][T24589] binder: 24588:24589 ioctl 40046207 0 returned -16 [ 744.225507][T24598] binder_alloc: 24588: binder_alloc_buf, no vma [ 744.240097][T24598] binder: 24588:24598 ioctl c0306201 20000340 returned -14 16:26:54 executing program 0: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:54 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="23000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:54 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000009250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 744.322980][T24605] binder: 24604:24605 got new transaction with bad transaction stack, transaction 4926 has target 24604:0 [ 744.359656][T24609] binder_alloc_mmap_handler: 2 callbacks suppressed [ 744.359672][T24609] binder_alloc: binder_alloc_mmap_handler: 24604 20001000-20004000 already mapped failed -16 [ 744.400308][T24605] binder: BINDER_SET_CONTEXT_MGR already set [ 744.406628][T24605] binder: 24604:24605 ioctl 40046207 0 returned -16 [ 744.413508][T24609] binder_alloc: 24604: binder_alloc_buf, no vma [ 744.420869][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 744.528532][ C0] net_ratelimit: 26 callbacks suppressed [ 744.528539][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.540012][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.608605][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.614475][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:26:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0x8000) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffff) [ 744.688538][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 744.694396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 744.768559][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.774390][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.780264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.786038][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:26:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 16:26:55 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x80000001, 0xfa0, 0x1, 0x5, 0x0, 0xffffffffffff0000, 0x4, 0x8, 0x7, 0x4, 0x5, 0x7, 0x1, 0x5, 0xfff, 0x5, 0x100000001, 0x0, 0x8000, 0xffffffffffffff00, 0x0, 0x2, 0xffffffff, 0x7ff, 0x5, 0x3f, 0x17d, 0xd86a, 0x5, 0xd98b, 0xac, 0x3, 0x200000000000000, 0x5, 0x6, 0x7, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x10000, 0x7, 0x80000000, 0x9, 0x101, 0x7ff, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0x0) r2 = dup3(r0, r1, 0x1000000000080002) pipe2$9p(&(0x7f0000000200), 0x84000) getpeername$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000100)={0x0, {0xeb39, 0x400, 0x6, 0xffffffff}}) 16:26:55 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:55 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400000a250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1b5000, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x1f, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 745.002026][T24638] binder: 24635:24638 got new transaction with bad transaction stack, transaction 4933 has target 24635:0 [ 745.034049][T24644] binder_alloc: binder_alloc_mmap_handler: 24635 20001000-20004000 already mapped failed -16 16:26:55 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x11f0, 0x30, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{0x10a8, 0x1, @m_ife={0x10a4, 0x7, {{0x8, 0x1, 'ife\x00'}, {0x90, 0x2, [@TCA_IFE_DMAC={0xc, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x8e3, 0x7d795c4a61609e2, 0xa1066c8, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x10000000, 0x101, 0x4b}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9d5, 0x800, 0x10000000, 0x0, 0x81}, 0x1}}, @TCA_IFE_SMAC={0xc, 0x4, @local}, @TCA_IFE_SMAC={0xc, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xc}]}, {0x1004, 0x6, "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"}}}}, {0x134, 0x1, @m_tunnel_key={0x130, 0x0, {{0x10, 0x1, 'tunnel_key\x00'}, {0x3c, 0x2, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4ae2, 0x0, 0x9, 0x80, 0x401}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, {0xdc, 0x6, "81666f40ab3b7d5a9a3ecd0b39a2b7e595a10a58c2d80537d794b99e1fc5a7274a1a3cd5f4887b0361da5dc1a1b719c9a02f799e1c7053ecd225fb1ddaf13f0e1e8a53c22f77256c798232791166e0fb68f1ea040b16a9d4fda8b880f6b37b6f016d25955bc5d4d98c4f0231a73c18437bb05662858f78366d043df7337ba366f3535ceeb5103f9d2e6ebd7451ff63a3a5d22917db0f173ad251ad543a0a89a3e38dca122ad8c806b8e1858ac96dfcdf3576a5129f392a4245ed82afb1d246d4e3a388c16241dc9cff459986711515afcd08f718c85aec"}}}}]}, 0x11f0}}, 0x8000) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 745.051365][T24644] binder: BINDER_SET_CONTEXT_MGR already set [ 745.057853][T24644] binder: 24635:24644 ioctl 40046207 0 returned -16 [ 745.061653][T24637] __nla_parse: 18 callbacks suppressed [ 745.061677][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 745.083946][T24638] binder_alloc: 24635: binder_alloc_buf, no vma [ 745.085072][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x28000000) 16:26:55 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c00e0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:55 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400000b250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 745.162471][T24653] binder: 24652:24653 got new transaction with bad transaction stack, transaction 4937 has target 24652:0 [ 745.177863][T24656] binder_alloc: binder_alloc_mmap_handler: 24652 20001000-20004000 already mapped failed -16 [ 745.195646][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 745.215736][T24653] binder: BINDER_SET_CONTEXT_MGR already set [ 745.242315][T24653] binder: 24652:24653 ioctl 40046207 0 returned -16 16:26:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x28000000) [ 745.267932][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 745.274699][T24656] binder_alloc: 24652: binder_alloc_buf, no vma [ 745.322477][T24669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x1, 0x0, {0x7f, 0x1ff, 0x1006, 0x6, 0x6, 0xf, 0x0, 0x4}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x18}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000240)={0x80000001, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3b, 0x18080) [ 745.529639][T24679] binder_alloc: binder_alloc_mmap_handler: 24676 20001000-20004000 already mapped failed -16 [ 745.540527][T24678] binder: BINDER_SET_CONTEXT_MGR already set [ 745.550727][T24679] binder_alloc: 24676: binder_alloc_buf, no vma [ 745.557315][T24678] binder: 24676:24678 ioctl 40046207 0 returned -16 [ 745.563936][ T3757] binder: send failed reply for transaction 4941 to 24676:24678 [ 745.563981][ T3757] binder: undelivered TRANSACTION_COMPLETE 16:26:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 16:26:56 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:56 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000000f0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:56 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400000c250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 745.878998][T24694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 745.894317][T24692] binder: 24690:24692 got new transaction with bad transaction stack, transaction 4944 has target 24690:0 [ 745.907513][T24693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 745.914321][T24698] binder_alloc: binder_alloc_mmap_handler: 24690 20001000-20004000 already mapped failed -16 [ 745.927270][T24692] binder: BINDER_SET_CONTEXT_MGR already set [ 745.934777][T24692] binder: 24690:24692 ioctl 40046207 0 returned -16 [ 745.935287][T24698] binder_alloc: 24690: binder_alloc_buf, no vma [ 745.961874][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 745.968357][ T3757] binder_thread_release: 3 callbacks suppressed 16:26:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) getgroups(0x4, &(0x7f0000000280)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff]) setgroups(0x3, &(0x7f00000002c0)=[r1, r2, r3]) r4 = getpgid(0xffffffffffffffff) migrate_pages(r4, 0x2, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x85f7) r5 = socket$inet(0x10, 0x2, 0x0) pwrite64(r5, &(0x7f00000000c0)="ba36e024898a5b718981cb6742adf52cc6cd7ec67f43fc470e39b8ca42", 0x1d, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 745.968367][ T3757] binder: release 24690:24692 transaction 4944 out, still active [ 745.971312][T24692] binder_alloc: 24690: binder_alloc_buf, no vma [ 745.977686][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 745.998812][ T3757] binder_release_work: 32 callbacks suppressed [ 745.998817][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 16:26:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0xc0040, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x5eea) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x80) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 746.024480][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 746.047273][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 746.070019][T24703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:56 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400000d250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:56 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24020000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 746.073494][ T3757] binder_send_failed_reply: 3 callbacks suppressed [ 746.073500][ T3757] binder: send failed reply for transaction 4944, target dead [ 746.101941][T24705] binder: 24704:24705 got new transaction with bad transaction stack, transaction 4949 has target 24704:0 [ 746.144135][T24711] binder_alloc: binder_alloc_mmap_handler: 24704 20001000-20004000 already mapped failed -16 16:26:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) getgroups(0x4, &(0x7f0000000280)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff]) setgroups(0x3, &(0x7f00000002c0)=[r1, r2, r3]) r4 = getpgid(0xffffffffffffffff) migrate_pages(r4, 0x2, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x85f7) r5 = socket$inet(0x10, 0x2, 0x0) pwrite64(r5, &(0x7f00000000c0)="ba36e024898a5b718981cb6742adf52cc6cd7ec67f43fc470e39b8ca42", 0x1d, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 746.187929][T24711] binder: BINDER_SET_CONTEXT_MGR already set [ 746.187947][T24716] binder_alloc: 24704: binder_alloc_buf, no vma [ 746.202629][ T3757] binder: release 24704:24705 transaction 4949 out, still active [ 746.213126][T24711] binder: 24704:24711 ioctl 40046207 0 returned -16 [ 746.223345][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 746.234853][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 [ 746.239653][T24719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 746.263060][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 746.277367][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 16:26:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) getgroups(0x4, &(0x7f0000000280)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff]) setgroups(0x3, &(0x7f00000002c0)=[r1, r2, r3]) r4 = getpgid(0xffffffffffffffff) migrate_pages(r4, 0x2, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x85f7) r5 = socket$inet(0x10, 0x2, 0x0) pwrite64(r5, &(0x7f00000000c0)="ba36e024898a5b718981cb6742adf52cc6cd7ec67f43fc470e39b8ca42", 0x1d, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 746.330506][ T3757] binder: send failed reply for transaction 4949, target dead [ 746.437928][T24730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 16:26:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x400000, 0x11) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b2, &(0x7f00000001c0)={'yam0\x00', @ifru_addrs=@xdp={0x2c, 0x6, 0x0, 0x3c}}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000480)={0x1, &(0x7f0000000300)=[{0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000004c0)={r5, 0x2}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@empty, @in6=@rand_addr="1938c27a5de5028c1409315e4f5970b9", 0x4e21, 0x0, 0x4e20, 0x2, 0x2, 0x20, 0x20, 0xb7, r3, r4}, {0xff, 0x8, 0x9, 0x800, 0x1, 0x9, 0xf43a, 0x7}, {0x1f, 0x33, 0x100, 0xfffffffffffff090}, 0x7f, 0x6e6bba, 0x2, 0x1, 0x3, 0x3}, {{@in6=@rand_addr="45df92a6555f063de0db3fed20495c0c", 0x4d6, 0x33}, 0x2, @in=@multicast2, 0x3505, 0x1, 0x2, 0x7fffffff, 0x9bb7, 0x3, 0x8}}, 0xe8) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xda, 0x80080) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000100)=0x6bc3) 16:26:56 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400000e250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:56 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24030000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) [ 746.678647][T24734] binder: 24733:24734 got new transaction with bad transaction stack, transaction 4954 has target 24733:0 [ 746.724537][T24745] binder_alloc: binder_alloc_mmap_handler: 24733 20001000-20004000 already mapped failed -16 [ 746.735150][T24734] binder: BINDER_SET_CONTEXT_MGR already set [ 746.741676][T24734] binder: 24733:24734 ioctl 40046207 0 returned -16 [ 746.747555][ T3757] binder: release 24733:24734 transaction 4954 out, still active [ 746.756303][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 746.764547][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 16:26:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x1, "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", 0x9a, 0x5, 0x2, 0x4, 0x9, 0x7, 0x100000001}, r3}}, 0x128) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x80}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x7}, &(0x7f0000000200)=0x8) [ 746.771572][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 16:26:57 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400c00e250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:57 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24040000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 746.796246][ T3757] binder: send failed reply for transaction 4954, target dead [ 746.824408][T24752] binder: 24751:24752 got new transaction with bad transaction stack, transaction 4958 has target 24751:0 [ 746.852524][T24756] binder_alloc: binder_alloc_mmap_handler: 24751 20001000-20004000 already mapped failed -16 [ 746.884882][T24756] binder: BINDER_SET_CONTEXT_MGR already set [ 746.891776][T24756] binder: 24751:24756 ioctl 40046207 0 returned -16 16:26:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffff03, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x30, 0x38, 0x38, 0x0, 0x30, 0x78, 0x38]}, 0x20}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:57 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400000f250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 746.899842][ T3757] binder: release 24751:24752 transaction 4958 out, still active [ 746.908115][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 746.926677][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 [ 746.936076][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 746.942397][ T3757] binder: send failed reply for transaction 4958, target dead [ 746.993396][T24767] binder_alloc: binder_alloc_mmap_handler: 24764 20001000-20004000 already mapped failed -16 [ 747.007315][T24765] binder: BINDER_SET_CONTEXT_MGR already set [ 747.020323][ T3757] binder: release 24764:24765 transaction 4963 out, still active [ 747.028229][T24765] binder: 24764:24765 ioctl 40046207 0 returned -16 [ 747.038963][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 747.046565][ T3757] binder: send failed reply for transaction 4963, target dead 16:26:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:26:57 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24050000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) 16:26:57 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000011250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:57 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24060000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) [ 747.560635][T24788] binder: 24787:24788 got transaction with invalid offsets ptr [ 747.576336][T24788] binder_transaction: 27 callbacks suppressed [ 747.576351][T24788] binder: 24787:24788 transaction failed 29201/-14, size 0-16 line 3193 [ 747.609802][T24799] binder: 24787:24799 unknown command 4219648 [ 747.616344][T24799] binder: 24787:24799 ioctl c0306201 20000040 returned -22 [ 747.626064][T24799] binder_alloc: binder_alloc_mmap_handler: 24787 20001000-20004000 already mapped failed -16 [ 747.637377][T24800] binder: 24787:24800 transaction failed 29189/-3, size 0-16 line 3147 [ 747.637425][T24799] binder: BINDER_SET_CONTEXT_MGR already set [ 747.646744][T24788] binder: 24787:24788 unknown command 4219648 16:26:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x400000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 747.652301][T24799] binder: 24787:24799 ioctl 40046207 0 returned -16 [ 747.664688][T24788] binder: 24787:24788 ioctl c0306201 20000040 returned -22 16:26:57 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24070000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 747.713029][T24803] binder: 24802:24803 transaction failed 29189/-3, size 0-0 line 3147 [ 747.736435][T24806] binder: BINDER_SET_CONTEXT_MGR already set 16:26:57 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000012250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='cpuset\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) delete_module(&(0x7f0000000140)='!!cpuset\x00', 0x200) [ 747.757392][T24806] binder: 24802:24806 ioctl 40046207 0 returned -16 [ 747.769984][T24803] binder: 24802:24803 transaction failed 29189/-3, size 0-0 line 3147 [ 747.781894][T24806] binder: 24802:24806 transaction failed 29189/-3, size 0-0 line 3147 16:26:58 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24080000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 747.837606][T24815] binder: 24814:24815 got new transaction with bad transaction stack, transaction 4972 has target 24814:0 [ 747.853045][T24815] binder: 24814:24815 transaction failed 29201/-71, size 0-0 line 3044 [ 747.879062][T24816] binder: BINDER_SET_CONTEXT_MGR already set [ 747.888570][T24816] binder: 24814:24816 ioctl 40046207 0 returned -16 [ 747.897458][T24815] binder: 24814:24815 transaction failed 29189/-3, size 0-0 line 3147 [ 747.906938][T24816] binder: 24814:24816 transaction failed 29189/-3, size 0-0 line 3147 [ 747.917754][ T3757] binder: release 24814:24815 transaction 4972 out, still active [ 747.930673][ T3757] binder: send failed reply for transaction 4972, target dead 16:26:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:58 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000013250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r3, 0x81, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x118) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000040000000000000000000000040000000000000000008f7b623234b28e22efd00000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 16:26:58 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24090000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:58 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000014250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) [ 748.420450][T24840] binder: BINDER_SET_CONTEXT_MGR already set [ 748.443061][T24840] binder: 24834:24840 ioctl 40046207 0 returned -16 [ 748.459351][T24840] binder: 24834:24840 got new transaction with bad transaction stack, transaction 4977 has target 24834:0 16:26:58 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000015250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:58 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240a0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 748.476220][T24840] binder: 24834:24840 transaction failed 29201/-71, size 229725495538228-0 line 3044 [ 748.492846][T24840] binder: BINDER_SET_CONTEXT_MGR already set [ 748.510051][T24850] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 748.510059][T24850] binder_alloc: 24834: binder_alloc_buf, no vma [ 748.543841][T24840] binder: 24834:24840 ioctl 40046207 0 returned -16 [ 748.566820][T24859] binder: BINDER_SET_CONTEXT_MGR already set 16:26:58 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24001c15250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 748.603185][ T3757] binder: release 24834:24840 transaction 4977 out, still active [ 748.611248][T24859] binder: 24834:24859 ioctl 40046207 0 returned -16 [ 748.629357][ T3757] binder_release_work: 1 callbacks suppressed [ 748.629363][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 748.669667][T24850] binder: 24834:24850 transaction failed 29189/-3, size 0-0 line 3147 16:26:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:getty_etc_t:s0\x00', 0x21) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000c0000000000000000000000000000000000000000e4ffffffffffffff000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000450df2ed00000000000000000000000000f9ab3e41fd00000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 748.729025][ T3757] binder: send failed reply for transaction 4977, target dead [ 748.807784][T24869] binder_alloc: 24868: binder_alloc_buf size -120259084288 failed, no address space [ 748.836428][T24869] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 16:26:59 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000016250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 748.852611][T24869] binder: BINDER_SET_CONTEXT_MGR already set [ 748.886369][T24870] binder_alloc: 24868: binder_alloc_buf, no vma [ 748.898527][T24869] binder: 24868:24869 ioctl 40046207 0 returned -16 16:26:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="01964f4a92f43a13", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x3f, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:26:59 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240b0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6aa0}, 0x8) 16:26:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:59 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000017250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:59 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240c0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 749.279308][T24897] binder: 24890:24897 got transaction to context manager from process owning it [ 749.316402][T24897] binder: BINDER_SET_CONTEXT_MGR already set [ 749.323290][T24904] binder_alloc: 24890: binder_alloc_buf, no vma 16:26:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x400000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x2, 0x100000001}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 749.328627][T24897] binder: 24890:24897 ioctl 40046207 0 returned -16 16:26:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x20) 16:26:59 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000018250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:59 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240d0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:26:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@enter_looper, @exit_looper], 0xba, 0x0, &(0x7f00000001c0)="be6d613fd01c4cf4372f94d9d2a32c0ee4f1d17468f065f748f809dd6de3887d3be34f1ee6874f1a99af317e7cb8b909f4f78b4bab7541c082104e293474c737ed4a38ec46172fe19002e2dce1a3397d3bcf1c72c560a655bb9253e530abdc6d03debd7946d1699d7e7ee3b5afb982725d7c5380e61761602f28935680f3e81a7fef95da4c4575cc0ba7724af8f4466b846bec5e92dbd5c0d1fc0bdea3076e48e1fa89953f2533441f5a48be640fc677a2dec125df749442b60e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 749.500850][T24925] binder: 24925 RLIMIT_NICE not set [ 749.506856][T24925] binder: 24924:24925 got new transaction with bad transaction stack, transaction 4992 has target 24924:0 [ 749.534051][T24926] binder_alloc_mmap_handler: 4 callbacks suppressed [ 749.534067][T24926] binder_alloc: binder_alloc_mmap_handler: 24924 20001000-20004000 already mapped failed -16 [ 749.541857][T24926] binder: BINDER_SET_CONTEXT_MGR already set [ 749.566639][T24927] binder: 24927 RLIMIT_NICE not set [ 749.579671][T24925] binder_alloc: 24924: binder_alloc_buf, no vma [ 749.586438][T24926] binder: 24924:24926 ioctl 40046207 0 returned -16 [ 749.594469][T24927] binder_alloc: 24924: binder_alloc_buf, no vma [ 749.601587][ T3757] binder: release 24924:24925 transaction 4992 out, still active [ 749.613997][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 749.627913][ T3757] binder: send failed reply for transaction 4992, target dead 16:26:59 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x7ff}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0xe20, &(0x7f00000000c0)='lapb0\x00', 0x383c, 0x0, 0x3f}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0x80000000}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000018e5aa1a9c7c541c6135452e8eba07", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x1000, @local, 0x7fff}}, [0x9, 0x7ff, 0xfffffffffffffffd, 0x3, 0xff, 0x1, 0x7, 0x4, 0x0, 0x0, 0x7, 0x0, 0x4, 0x5, 0x7]}, &(0x7f0000000000)=0x100) 16:26:59 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000019250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1}, 0x8) 16:27:00 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240e0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x300b22, &(0x7f0000000080)={@local, @empty, [], {@arp={0x806, @ether_ipv4={0xf000, 0x500, 0x2, 0x4, 0x0, @local, @dev, @dev}}}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000100)={0x10000, 0x7000, 0xfffffffffffffffa, 0x10000, 0x10001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) delete_module(&(0x7f0000000000)='\x00', 0xa00) 16:27:00 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400001a250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 750.174280][T24953] binder: 24952:24953 got new transaction with bad transaction stack, transaction 4997 has target 24952:0 [ 750.199712][T24960] binder_alloc: binder_alloc_mmap_handler: 24952 20001000-20004000 already mapped failed -16 [ 750.211567][T24953] binder: BINDER_SET_CONTEXT_MGR already set [ 750.218027][T24953] binder: 24952:24953 ioctl 40046207 0 returned -16 16:27:00 executing program 5: socketpair(0x9, 0x1, 0xfffffffffffffffa, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f00000001c0)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)="710c64141193325c6d0c9503c1f3135c1b3c79e5fa1eac1e72cc8f42c017418256829e7d00489fc2643617d6680809b6937e08ebfbf9fd65ff502d5c1c0ff39df43cfabdc1e2c63a526dad4d935a2f095708b6e2689b08b2aad51b2572ab2ab67f590826159178b6a72dd2f025701368fa2ae6bfb9bcb20bedcbe4c0bc41cb1ee7a5d4da4bc4a66f53ffa189f36de1", 0x8f}, {&(0x7f0000000440)="0da4d979c7dd57fe04c08950a50273c14012767a02a081456db3459144fbf7eca66125055a87b532a3f1ff40fae58d3f560c311a46ca32b10bf96dd1015b4b2061e5a9f4a508955f576c0196bf05177316c115e154639541e431475ad6794902042a83ab6c0e53496dbbbf1c23f67f0da9a229dace24", 0x76}, {&(0x7f00000004c0)="696f2c8548be06e637b73da2174d3e80fef326ea5b552419e6c9829ce701c2eb75ca0f32da3188011b36ba5193b9f081c24ca9c88bc6e1a83d5fc230ebaf383c74734bf084a0d618db61fb6002096fdf73ae3ab0ea9babeee78e45090b90684e61f7db49a934620fb7df9803d633faadb80887d143918e8067b2a1d631fb82a63105320ed6c65af0cdcf912f2adb3f5d3365c92eb3936755b1ac48c2a9d8e19443e5bc95c45dbc80a4223df1a57f426b4c28dad4fa0a77b168582d6941663b61e387", 0xc2}, {&(0x7f0000000140)="903fbefd496c39a0f2", 0x9}, {&(0x7f00000005c0)="d253c6cf7f610584b3db0d63106e416bae1bc473533b7e6e732a4752c91e17a2dc345d394a98dec990aad5ae5c077cc1ea106c7ecf74a217354a20312a2b0097f42cb9cac01337484515c320e6432042faf418e0fbf83bbabb3e0fabab25fddcdf9596be5fb55d5b9914b4e26ae1c26a8114abb8be6a39f950c5df9e6d488a1c0484db629005ea296e9357cd0f9f73a066c196cc261490e8063a637cd81fab0f79385ea02cd3e00f007e5a680c4ad116c0113d65c19a797b60b007d58228dfc2", 0xc0}], 0x5, &(0x7f0000000700)=[{0x98, 0x112, 0x8, "97898df08e94d286bc4a49bd4cb4fa6d7ff40706ef1073151d65e296369af399d2513390bd3c43ce24f1366a240a38560c4bfb1e2553ba4cae651909c1f0db8c9f93fe622eb4ea22468d06dffe7bb96562142ecabc541d3735944df4e976cac89836d25d34202f5425f1fa04ceeb328ae000f97c02e5f6fabe2680d4317b1452e235"}, {0xe8, 0x19f, 0x5, "b9f9305412b9519b0fa1a4ed8f574437b50fe0c064dfe0070522072bd79c8287a40a2bc5680d63d41ee96a6e30b1f94889cc9968763da26710aaa50c8f9e66c7511decf040fb596ba222643ec495751fac1390282dee16ca521214598e0d1dbf899d04476ad7d93e919cb60dbf9d520d317d70d82b9b78ad0f98d5f177fd3b2a3f7e6e31aa31d70256c08bd5ce56fee238b9a7772c1cc12e3a71279480093b188f7fd45da558e90cfa3c34d9b37c0150332981a69e32e89bf11bb7ccfcc7632c5d687e899b3eb327c0249247f658138752197af4b6397031"}, {0x68, 0x11f, 0x6, "31382d98c642e3811867ef87397c24ca406a1c06c752f6f7c130c50767f0a6acbc4b4e2ec7c1a95f3d9c2d4d6bd3802d7be2626ac30531337894ee5a799f2e708bdcb47e0fa8988692f422daa0687f42adf550"}, {0xb0, 0x103, 0x100000001, "bf82b72a3191e92dd2985ae03218e42cfab6977a4ecd8a3ca0740bb66a72458589882b7e357cf51bf98e316b425b6e8064289e1e2f0aff98dca1d7e8930e76c3550a0c04dda775641764fdc10ba583c193371265d298ab81ddd03640d8e67b573c1d4088a27d716596ca4d55f4416ed721b99913d0bf5cb875bdfa21353c41be50e27e6874b34159ed55f7fee324c8d3588b67212da3864efd4823fa6736e0"}, {0x1010, 0x0, 0x0, "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"}], 0x12a8}, 0x6}, {{&(0x7f00000019c0)=@ethernet={0x7, @random="e18c948784b1"}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a40)="9dd030c8336d548030f5dcb7302dfa685c4a108ab19851c50a0ece97cf031e7f2adfeae9f2fadc442f03bc0c834ed0959291c9666f23ab2e4636bf717fff19886152dcd58fa071a5c69f5f92baadad262deb965f9255de2ba52078b5f2523c310340050ec4bc949c295b95613b29cb2d875a346675d6cbf924f93d0b1e0f5d6df30cfc1481def5ce22627276b4deeee05280189515", 0x95}, {&(0x7f0000000240)="d1cee0e5305e4cb3969dd8c73ec6ef378eb60b4ab1d6c7397fb084798cd93fb49877310f228cae0444ac3e", 0x2b}, {&(0x7f0000001b00)="eaf37ea959ae265c515bd6b86ea63a15edfbd7f1b356db2948ddb24faddce60b33f628d63fecf10d05e3ade599d00df8342e1240364168e6620c18b84e3b0a905cd777ac252bbcbdd6ecbc680a789b29c5b85d90a389304bd3c08d0580951b14a1177f282df165ef8f7a5cb7615f890b6f3ef4f54fe111eee5411ca2e5afd459794e237bfe0b754ba9c3f0928f28e9fe4e8953b8a25d1f8dade3244a7891d619ac42325f59edea7c6910c114016a798522ed1ceae5165d7b55912592dad210", 0xbf}, {&(0x7f0000001bc0)="07714a7caa4d4fe93337e5bf2b55f10b1acc293924741402e2ce5aa9f8f7526d3808e838baa57ec514f323be2429a81c154a1ec705bebecd11a55681309f927f2310d0fcfa04d79649ace92f57ccd106fdd0acb0be5bc55b46064a23e0e144d812cfb69c6b70a32aecd9298408845d0a9cad9aeefc74cc6c0c25db180f79aa540b554ace83049edd214c5e59ce43c3738e074d84834355a7c1823ba7a1fcdfcf2d58b619a542c583d807926350053a22d14e9f5f866ff53f2b71d3f5fa5a3bcd85c0aa301b045f7c994254389161", 0xce}, {&(0x7f0000001cc0)="d4500ffaf0e14794215bc3953e7e7e7f2f70d28b19f6092d35d5292927dfb75000f729f009fb94f0acfef36555c952f1d8f669652d11e822eff949f6bb549f04c6e2ca7cc3d5b13b100d755f9dfab7ab795fe4e6d29b41ee792eedffd622f78eb1beda8af7d782061901e87bb9c6d178aaac5af1d1eb4527450bcc57fb98b778611cef0c5771cba346c06a0d4c9af4686f47608eac3c18dc5f9b6094b90c16a7f2b5e7fab8233ac8c4a1674bf8bcecc1a8f74cc4c3ad4b1d909e67f24f2d42cb3d646c5b3209e2895f61b318b836411de7b674", 0xd3}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000000300)="e998", 0x2}, {&(0x7f0000002dc0)="6a12cbf98886a88e27fad7df37272f3c4ecebe4b91a4756b8877ff0ab69983413d329a3fa0f00e5e58f0a7f3242414c6c71fb1e6c6e52bf26e0b5e3e36a29a05666a1f14998dd0fc2c6455be2d7bc4d06e870128f8f04a0857f9", 0x5a}, {&(0x7f0000002e40)="8cdec4e590f189f075dfcfaccaee2589c3db772dfb7a1eb7216c43c9f17004343176f1535ea5b053a4aa0f07f2cc64c2e3e5f8257c8f5c1716f2b3217b5ff446e620778ca1b8675e0de953e14ae34f7163dc68b573ec8489005440536d3e53671d2b15cc9e13acc6241dbe118c33fc1381006c114cfdfab477ceafa45a1357c12af2170c0d47932861bfb78295d8ecc676ce9bb726725b76", 0x98}], 0x9}, 0x7}], 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 750.218045][T24962] binder_alloc: 24952: binder_alloc_buf, no vma [ 750.231728][T24960] binder_alloc: 24952: binder_alloc_buf, no vma [ 750.238184][ T3757] binder: release 24952:24953 transaction 4997 out, still active [ 750.258561][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 750.264930][ T3757] binder: send failed reply for transaction 4997, target dead 16:27:00 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240f0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:00 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400151c250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 750.350160][T24967] binder: 24966:24967 got new transaction with bad transaction stack, transaction 5002 has target 24966:0 [ 750.370265][T24972] binder_alloc: binder_alloc_mmap_handler: 24966 20001000-20004000 already mapped failed -16 [ 750.385491][T24967] binder: BINDER_SET_CONTEXT_MGR already set 16:27:00 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24100000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x0, 0x1, 0x9) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00000000c0)=""/106, &(0x7f0000000000)=0x6a) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 750.400664][T24967] binder: 24966:24967 ioctl 40046207 0 returned -16 [ 750.404486][T24972] binder_alloc: 24966: binder_alloc_buf, no vma [ 750.414370][T24976] binder_alloc: 24966: binder_alloc_buf, no vma [ 750.421412][ T5] binder: release 24966:24967 transaction 5002 out, still active [ 750.429954][ T5] binder: undelivered TRANSACTION_COMPLETE [ 750.436018][ T5] binder: send failed reply for transaction 5002, target dead 16:27:00 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000028250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 750.533055][T24982] binder: 24980:24982 got new transaction with bad transaction stack, transaction 5007 has target 24980:0 [ 750.587114][T24982] binder: BINDER_SET_CONTEXT_MGR already set [ 750.593794][T24982] binder: 24980:24982 ioctl 40046207 0 returned -16 [ 750.593838][T24989] binder_alloc: 24980: binder_alloc_buf, no vma [ 750.613812][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 750.768629][ C0] net_ratelimit: 26 callbacks suppressed [ 750.768637][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.780353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 750.848613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.854514][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 750.928632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 750.935616][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:27:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xfffffd99) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = syz_open_pts(r2, 0x5) ioctl$TCSETS(r2, 0x5402, &(0x7f00000002c0)={0x0, 0xfffffffffffffffd}) dup3(r4, r2, 0x0) write$UHID_INPUT(r3, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:27:01 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24110000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40800, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @loopback, 0x6}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}}, 0x1, 0x3, 0xd4c, 0x3, 0x98}, &(0x7f0000000140)=0x98) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000300), &(0x7f0000000440)=0x2) 16:27:01 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000040250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 751.008525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 751.014473][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 751.020595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 751.026469][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 751.065344][ T3757] binder_release_work: 32 callbacks suppressed [ 751.065351][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 751.075740][T25010] binder: 25007:25010 got transaction to context manager from process owning it [ 751.083181][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 16:27:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000200)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000010ab972e000000000000000000000000000000000000000000000000001f4862a92348ab232d9da4943241fbc136de48f9826ff1dd076311b40a4d5815992afb9b71cf91743f22bc8ba47652f3832107a5e4041820a19ae2c23321f50c9766164890c58f0373c4aa6ed7d8fe0e1aabcac86b0fafe810654e6f2411cbfbf5fd5103fb763bcb81bc14d37c465302f2e0bfd1105dc5ed4af2a8361e60cdb1309306cb21dca393d25473f07c4c4b0cad5ece17d85dec549f30e88a2ea4f6f176bef25d87940464d02cfe2dfdf740eb3206f560de64405646317a905f674498f8a2f399cb51195cf7dd46c4880050d5f5b89a26547e5a00a8a8055a6afcfe8f142d5399bc161998a1f592b20acf59d2910329cc7dc4797660c27d2231b067755b5309f66aff2ab1d4aa2b4844984a279f003e63f61ddf68e292cc92302e09368974b12f4ff66ff9bd7384281e1cddcdaa3f"], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r4 = getegid() setregid(r3, r4) signalfd(r0, &(0x7f0000000240)={0x9}, 0x8) syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x3ff, 0x2) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x8bcf5e42f6050395) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0x0) r1 = msgget$private(0x0, 0x10) msgctl$IPC_RMID(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'nlmon0\x00', 0xfff}) [ 751.115057][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 [ 751.158747][T25019] binder: 25017:25019 ioctl 40046205 5 returned -22 [ 751.178704][T25019] binder_alloc: 25017: binder_alloc_buf size 51228944891904 failed, no address space [ 751.195874][T25019] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 16:27:01 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24120000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 751.197837][T25021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.239527][T25022] binder: 25017:25022 ioctl 40046205 5 returned -22 16:27:01 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24006558250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 751.259659][T25023] binder: BINDER_SET_CONTEXT_MGR already set [ 751.280163][T25023] binder: 25017:25023 ioctl 40046207 0 returned -16 [ 751.302899][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 16:27:01 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1}, 0x8) 16:27:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000100)}, 0x1ff}}, @enter_looper, @dead_binder_done={0x40086310, 0x2}], 0xfd, 0x0, &(0x7f0000000380)="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"}) [ 751.331859][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 751.391465][T25039] binder: 25038:25039 got new transaction with bad transaction stack, transaction 5019 has target 25038:0 [ 751.405268][T25040] binder_alloc: binder_alloc_mmap_handler: 25038 20001000-20004000 already mapped failed -16 [ 751.430290][T25039] binder: BINDER_SET_CONTEXT_MGR already set [ 751.436551][T25039] binder: 25038:25039 ioctl 40046207 0 returned -16 [ 751.448037][T25042] binder: 25038:25042 got reply transaction with no transaction stack [ 751.458810][ T3757] binder_thread_release: 1 callbacks suppressed [ 751.458819][ T3757] binder: release 25038:25039 transaction 5019 out, still active [ 751.467160][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 751.494608][ T3757] binder_send_failed_reply: 1 callbacks suppressed [ 751.494614][ T3757] binder: send failed reply for transaction 5019, target dead 16:27:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="0100800030259d35ec131734b697e0919be42695672bc1bc33c62b64d12d65e3e8dad6723d478ed7e669d4efeba53e95848808f7eb6663d3f2bcd62eda842f03", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) fdatasync(r0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x880) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x408, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", "", "", "", ""]}, 0x24}}, 0x0) 16:27:02 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24130000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:02 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000060250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x82000, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400301}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x304, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x404883d) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xca}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 751.932183][T25056] binder: 25050:25056 got new transaction with bad transaction stack, transaction 5024 has target 25050:0 [ 751.957156][T25063] binder_alloc: binder_alloc_mmap_handler: 25050 20002000-20005000 already mapped failed -16 [ 751.967987][T25056] binder: BINDER_SET_CONTEXT_MGR already set [ 751.974614][T25056] binder: 25050:25056 ioctl 40046207 0 returned -16 16:27:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x1a300) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000100)=0x8e5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 751.975839][ T3757] binder: release 25050:25056 transaction 5024 out, still active [ 751.995681][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 752.014262][ T3757] binder: undelivered TRANSACTION_ERROR: 29201 16:27:02 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24140000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 752.027644][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 16:27:02 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24005865250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 752.060180][ T3757] binder: undelivered TRANSACTION_ERROR: 29189 [ 752.070119][ T3757] binder: send failed reply for transaction 5024, target dead [ 752.096068][T25069] binder: 25067:25069 got new transaction with bad transaction stack, transaction 5029 has target 25067:0 16:27:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb49, 0x400100) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x19, 0x7, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 752.117456][T25075] binder_alloc: binder_alloc_mmap_handler: 25067 20001000-20004000 already mapped failed -16 [ 752.129916][T25075] binder: BINDER_SET_CONTEXT_MGR already set [ 752.136500][T25075] binder: 25067:25075 ioctl 40046207 0 returned -16 [ 752.136737][ T5] binder: release 25067:25069 transaction 5029 out, still active [ 752.158855][ T5] binder: undelivered TRANSACTION_COMPLETE 16:27:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1}, 0x8) [ 752.165125][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 752.173408][ T5] binder: send failed reply for transaction 5029, target dead 16:27:02 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24150000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:02 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000081250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 752.222500][T25082] binder: 25080:25082 got new transaction with bad transaction stack, transaction 5034 has target 25080:0 [ 752.302166][T25093] binder_alloc: binder_alloc_mmap_handler: 25080 20001000-20004000 already mapped failed -16 [ 752.312783][T25082] binder: BINDER_SET_CONTEXT_MGR already set [ 752.319268][T25082] binder: 25080:25082 ioctl 40046207 0 returned -16 [ 752.326466][ T3757] binder: release 25080:25082 transaction 5034 out, still active [ 752.336605][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 752.347898][ T3757] binder: send failed reply for transaction 5034, target dead 16:27:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r3 = accept$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000440)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) 16:27:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffc) r2 = getpgid(0x0) ptrace$peekuser(0x3, r2, 0x18000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000051b72e71bcac3e1262264b4a1e6e605f6c250f5a778df800000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffe5f, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0xfffffffffffffe02, 0x0, 0x0}) 16:27:03 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24160000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:03 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000ec0250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 752.899857][T25105] binder_transaction: 37 callbacks suppressed [ 752.899875][T25105] binder: 25104:25105 transaction failed 29189/-22, size 6872614107741890146-69961337975809388 line 2994 [ 752.938150][T25105] binder: 25104:25105 ioctl c0306201 200001c0 returned -14 16:27:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0x3) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 752.953352][T25114] binder: 25104:25114 transaction failed 29189/-22, size 6872614107741890146-69961337975809388 line 2994 [ 752.975926][T25105] binder: 25104:25105 ioctl c0306201 200001c0 returned -14 16:27:03 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000f0250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 753.026685][T25121] binder: 25119:25121 transaction failed 29189/-22, size 0-0 line 2994 16:27:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x2, &(0x7f0000000000)={r1}, 0x8) 16:27:03 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24170000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 753.104360][T25128] binder: 25119:25128 transaction failed 29189/-22, size 0-0 line 2994 16:27:03 executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r0, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 753.154820][T25128] binder: 25119:25128 transaction failed 29189/-22, size 0-0 line 2994 [ 753.167302][T25121] binder: 25119:25121 transaction failed 29189/-22, size 0-0 line 2994 16:27:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="243e273511f63a305ca6e0b6f33b6067152ebd343749255f64e30686962e9dc9b4a1df7d17e65ca92b6e3baef571212d7476", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e20, @remote}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) 16:27:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80480, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000001000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f00000001c0)={r3, r4/1000+30000}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:03 executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r0, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:03 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24180000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:03 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000000f0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:04 executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r0, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 753.782789][T25149] binder: 25147:25149 got transaction to context manager from process owning it [ 753.793579][T25153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.803215][T25149] binder: 25147:25149 transaction failed 29201/-22, size 0-0 line 2985 [ 753.818112][T25149] binder: BINDER_SET_CONTEXT_MGR already set [ 753.827558][T25157] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 753.827566][T25157] binder_alloc: 25147: binder_alloc_buf, no vma [ 753.855582][T25149] binder: 25147:25149 ioctl 40046207 0 returned -16 16:27:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:04 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24190000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 753.884275][T25157] binder: 25147:25157 transaction failed 29189/-3, size 0-0 line 3147 16:27:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x3, &(0x7f0000000000)={r1}, 0x8) 16:27:04 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000002250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1000000}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000280)=""/138) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4110, r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7b, &(0x7f0000000200)=0x3, 0x4) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x5, 0x2, &(0x7f0000000100)=0x9}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x10000, 0x4000}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 754.062950][T25190] binder_alloc: binder_alloc_mmap_handler: 25184 20001000-20004000 already mapped failed -16 16:27:04 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="241a0000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 754.105827][T25185] binder: BINDER_SET_CONTEXT_MGR already set [ 754.127388][T25185] binder: 25184:25185 ioctl 40046207 0 returned -16 [ 754.145656][T25200] sctp: [Deprecated]: syz-executor.3 (pid 25200) Use of int in max_burst socket option. 16:27:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 754.145656][T25200] Use struct sctp_assoc_value instead [ 754.171380][T25198] binder_alloc: 25184: binder_alloc_buf, no vma [ 754.192071][ T5] binder: release 25184:25185 transaction 5047 out, still active 16:27:04 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000003250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:04 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xb325f669536ab0c1, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa4, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x3}, @increfs={0x40046304, 0x4}, @acquire={0x40046305, 0x1}, @clear_death={0x400c630f, 0x0, 0x3}, @clear_death={0x400c630f, 0x4, 0x2}, @reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000180)=[@fda={0x66646185, 0xa, 0x4, 0x40}, @fda={0x66646185, 0x9, 0x4, 0x36}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000000200)=[0x30, 0x20]}, 0xfffffffffffff2cc}}, @dead_binder_done={0x40086310, 0x2}, @increfs_done={0x40106308, r2, 0x1}], 0xe, 0x0, &(0x7f0000000240)="01ff3e2f0642c32e362d8072f54c"}) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 754.202110][T25198] binder: 25184:25198 transaction failed 29189/-3, size 0-0 line 3147 [ 754.214674][ T5] binder: undelivered TRANSACTION_COMPLETE [ 754.236855][ T5] binder: send failed reply for transaction 5047, target dead 16:27:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:04 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24280000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 754.274565][T25214] binder_alloc: binder_alloc_mmap_handler: 25212 20001000-20004000 already mapped failed -16 16:27:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x7ff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0xb6) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0x110}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0xa000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={r3, 0x80000, r4}) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x12000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x80004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffce8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10630840c7f74f4fcb5d8555"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000001000000000000000000000000000000050000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) umount2(&(0x7f0000000300)='./file0\x00', 0x3) 16:27:04 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000004250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 754.452974][T25234] binder: 25233:25234 got transaction to context manager from process owning it [ 754.496390][T25234] binder: 25233:25234 transaction failed 29201/-22, size 5497558138880-0 line 2985 [ 754.513532][T25239] binder_alloc: binder_alloc_mmap_handler: 25233 20001000-20004000 already mapped failed -16 [ 754.530903][T25239] binder: BINDER_SET_CONTEXT_MGR already set [ 754.543721][T25239] binder: 25233:25239 ioctl 40046207 0 returned -16 [ 754.550793][T25234] binder_alloc: 25233: binder_alloc_buf, no vma 16:27:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x4, &(0x7f0000000000)={r1}, 0x8) 16:27:05 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24600000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0xfffffffffffffd42) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0xfffffffffffffffd}, &(0x7f0000000140)=0x8) 16:27:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:05 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000005250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 754.889509][T25246] sctp: [Deprecated]: syz-executor.3 (pid 25246) Use of int in max_burst socket option. [ 754.889509][T25246] Use struct sctp_assoc_value instead 16:27:05 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24f00000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 754.970968][T25256] binder: 25254:25256 got new transaction with bad transaction stack, transaction 5054 has target 25254:0 16:27:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 755.037265][T25266] binder_alloc: binder_alloc_mmap_handler: 25254 20001000-20004000 already mapped failed -16 [ 755.053738][T25266] binder_alloc: 25254: binder_alloc_buf, no vma [ 755.075442][T25256] binder: BINDER_SET_CONTEXT_MGR already set 16:27:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 755.083289][ T5] binder: release 25254:25256 transaction 5054 out, still active [ 755.097030][T25256] binder: 25254:25256 ioctl 40046207 0 returned -16 [ 755.104188][ T5] binder: undelivered TRANSACTION_COMPLETE 16:27:05 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000006250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10d41866036e6655, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:05 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000300250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 755.133364][ T5] binder: send failed reply for transaction 5054, target dead [ 755.210410][T25281] binder: 25280:25281 got new transaction with bad transaction stack, transaction 5058 has target 25280:0 [ 755.243805][T25287] binder_alloc: binder_alloc_mmap_handler: 25280 20001000-20004000 already mapped failed -16 [ 755.266452][T25281] binder: BINDER_SET_CONTEXT_MGR already set [ 755.285118][T25281] binder: 25280:25281 ioctl 40046207 0 returned -16 [ 755.285823][T25289] binder_alloc: 25280: binder_alloc_buf, no vma [ 755.299279][ T3757] binder: release 25280:25281 transaction 5058 out, still active [ 755.307174][ T3757] binder: undelivered TRANSACTION_COMPLETE [ 755.308838][ T3757] binder: send failed reply for transaction 5058, target dead 16:27:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x5, &(0x7f0000000000)={r1}, 0x8) 16:27:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0x6, 0x1000000, 0x2}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 16:27:05 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x4e24, @dev}], 0x2c) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000007250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:05 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000500250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:27:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f00000001c0)=[0x48, 0x38, 0x18, 0x0, 0x48, 0x78, 0x70, 0x78]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000002fe541df294b0000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 16:27:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 755.819821][T25306] ------------[ cut here ]------------ [ 755.825338][T25306] kernel BUG at drivers/android/binder_alloc.c:1141! [ 755.851013][T25306] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 755.857241][T25306] CPU: 0 PID: 25306 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #39 [ 755.865219][T25306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.871301][ T3877] kobject: 'loop0' (0000000052ecaa18): kobject_uevent_env [ 755.875395][T25306] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 755.875416][T25306] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 1f f8 23 fc 4c 89 e6 4c 89 ef e8 34 f9 23 fc 4d 39 e5 76 07 e8 0a f8 23 fc <0f> 0b e8 03 f8 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 11 16:27:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) 16:27:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 755.890076][ T3877] kobject: 'loop0' (0000000052ecaa18): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 755.891011][T25306] RSP: 0018:ffff888057fa7550 EFLAGS: 00010212 [ 755.891024][T25306] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc90010894000 [ 755.891032][T25306] RDX: 00000000000003c2 RSI: ffffffff854c7976 RDI: 0000000000000006 [ 755.891046][T25306] RBP: ffff888057fa75d0 R08: ffff88808c95c4c0 R09: 0000000000000028 [ 755.950898][T25306] R10: ffffed100aff4f01 R11: ffff888057fa780f R12: 0000000000000030 [ 755.958884][T25306] R13: 0000000000000028 R14: 0000000000000048 R15: 0000000000000000 [ 755.966861][T25306] FS: 00007f2f4ce3b700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 755.970625][ T3877] kobject: 'loop0' (0000000052ecaa18): kobject_uevent_env [ 755.975890][T25306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.989595][ T3877] kobject: 'loop0' (0000000052ecaa18): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 755.990249][T25306] CR2: 0000000001ffafd0 CR3: 0000000090fcd000 CR4: 00000000001406f0 [ 756.008439][T25306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 16:27:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="63065f83", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r1, 0x15, "b96c0164b7cb7f69c0164dd2a76c9bd4d351a59f08"}, &(0x7f0000000080)=0x1d) [ 756.016427][T25306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 756.024490][T25306] Call Trace: [ 756.027792][T25306] ? memcpy+0x46/0x50 [ 756.031784][T25306] binder_alloc_copy_from_buffer+0x37/0x42 [ 756.037700][T25306] binder_get_object+0xc3/0x200 [ 756.038486][ T3877] kobject: 'loop0' (0000000052ecaa18): kobject_uevent_env [ 756.042561][T25306] binder_transaction+0x2b4a/0x6690 [ 756.042585][T25306] ? binder_thread_read+0x3d50/0x3d50 16:27:06 executing program 3: r0 = inotify_init1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) ptrace$setopts(0x4206, r5, 0x3, 0x0) [ 756.060007][ T3877] kobject: 'loop0' (0000000052ecaa18): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 756.063747][T25306] ? __lock_acquire+0x548/0x3fb0 [ 756.063832][T25306] ? __might_fault+0x12b/0x1e0 [ 756.063850][T25306] ? lock_downgrade+0x880/0x880 [ 756.088686][T25306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 756.094944][T25306] ? _copy_from_user+0xdd/0x150 [ 756.099809][T25306] binder_thread_write+0x64a/0x2820 [ 756.105058][T25306] ? binder_transaction+0x6690/0x6690 [ 756.110445][T25306] ? __might_fault+0x12b/0x1e0 [ 756.110530][ T3877] kobject: 'loop3' (000000003decc0d0): kobject_uevent_env [ 756.115404][T25306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 756.115419][T25306] ? _copy_from_user+0xdd/0x150 [ 756.115436][T25306] binder_ioctl+0x1033/0x183b [ 756.115454][T25306] ? binder_thread_write+0x2820/0x2820 [ 756.139765][ T3877] kobject: 'loop3' (000000003decc0d0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 756.143811][T25306] ? tomoyo_path_number_perm+0x263/0x520 [ 756.143827][T25306] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 756.143858][T25306] ? binder_thread_write+0x2820/0x2820 [ 756.170853][T25306] do_vfs_ioctl+0xd6e/0x1390 [ 756.175472][T25306] ? ioctl_preallocate+0x210/0x210 [ 756.180680][T25306] ? __fget+0x381/0x550 [ 756.184921][T25306] ? ksys_dup3+0x3e0/0x3e0 [ 756.189423][T25306] ? nsecs_to_jiffies+0x30/0x30 [ 756.194287][T25306] ? tomoyo_file_ioctl+0x23/0x30 [ 756.199225][T25306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 756.205452][T25306] ? security_file_ioctl+0x93/0xc0 [ 756.210553][T25306] ksys_ioctl+0xab/0xd0 [ 756.214701][T25306] __x64_sys_ioctl+0x73/0xb0 [ 756.219276][T25306] do_syscall_64+0x103/0x610 [ 756.223865][T25306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 756.229857][T25306] RIP: 0033:0x458209 [ 756.233754][T25306] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 756.253364][T25306] RSP: 002b:00007f2f4ce3ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.261789][T25306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 756.269751][T25306] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 756.278319][T25306] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 756.286287][T25306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2f4ce3b6d4 [ 756.294350][T25306] R13: 00000000004bf49a R14: 00000000004d0e80 R15: 00000000ffffffff [ 756.302314][T25306] Modules linked in: [ 756.307328][T25306] ---[ end trace c1c007dbaca49498 ]--- [ 756.313370][T25333] binder_alloc: 25305: binder_alloc_buf size 21156662113283840 failed, no address space [ 756.323614][T25306] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 756.330418][T25306] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 1f f8 23 fc 4c 89 e6 4c 89 ef e8 34 f9 23 fc 4d 39 e5 76 07 e8 0a f8 23 fc <0f> 0b e8 03 f8 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 11 [ 756.350563][T25333] binder_alloc: allocated: 88 (num: 1 largest: 88), free: 12200 (num: 1 largest: 12200) [ 756.360438][T25306] RSP: 0018:ffff888057fa7550 EFLAGS: 00010212 [ 756.367329][T25306] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc90010894000 [ 756.375493][T25306] RDX: 00000000000003c2 RSI: ffffffff854c7976 RDI: 0000000000000006 [ 756.383720][T25306] RBP: ffff888057fa75d0 R08: ffff88808c95c4c0 R09: 0000000000000028 [ 756.391814][T25306] R10: ffffed100aff4f01 R11: ffff888057fa780f R12: 0000000000000030 [ 756.396649][ T3877] kobject: 'loop3' (000000003decc0d0): kobject_uevent_env [ 756.399864][T25306] R13: 0000000000000028 R14: 0000000000000048 R15: 0000000000000000 [ 756.399876][T25306] FS: 00007f2f4ce3b700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 756.399884][T25306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 756.399892][T25306] CR2: 0000001b32f23000 CR3: 0000000090fcd000 CR4: 00000000001406f0 [ 756.399904][T25306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 756.399910][T25306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 756.399918][T25306] Kernel panic - not syncing: Fatal exception [ 756.401122][T25306] Kernel Offset: disabled [ 756.466115][T25306] Rebooting in 86400 seconds..