9035][T26831] binder: 26816:26831 transaction failed 29201/-22, size 64-16 line 3389 01:51:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x800, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x40c2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000280)={0x3, r2}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x6, 0x8, 0x2, "6e5343bf8c19b60ce8b665b0737e471f7ef654291bed84bd4c6e2b1730256883", 0x50424752}) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x101) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000b538814cac4c556189379c1f00ff00"], 0x10}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 575.367678][T26844] binder: BINDER_SET_CONTEXT_MGR already set [ 575.381847][T26853] binder_alloc: 26842: binder_alloc_buf, no vma [ 575.408826][ T5] binder_release_work: 24 callbacks suppressed [ 575.408833][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.433274][T26844] binder: 26842:26844 ioctl 40046207 0 returned -16 01:51:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001da, 0x0) 01:51:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ec, 0x0) [ 575.468959][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.485214][T26853] binder: 26842:26853 transaction failed 29189/-3, size 64-9 line 3148 [ 575.493589][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.569279][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 575.716968][T26877] binder: 26872:26877 got transaction with invalid parent offset or type [ 575.731399][T26877] binder: 26872:26877 transaction failed 29201/-22, size 64-16 line 3389 [ 575.750803][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.762384][T26878] binder: 26872:26878 got transaction with invalid parent offset or type [ 575.774872][T26878] binder: 26872:26878 transaction failed 29201/-22, size 64-16 line 3389 [ 575.784215][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.811633][T26881] IPVS: ftp: loaded support on port[0] = 21 01:51:24 executing program 1: 01:51:24 executing program 0: 01:51:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001db, 0x0) 01:51:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) 01:51:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 575.919138][T26891] binder: 26889:26891 got transaction with invalid parent offset or type [ 575.937722][T26884] binder: BINDER_SET_CONTEXT_MGR already set [ 575.943927][T26884] binder: 26883:26884 ioctl 40046207 0 returned -16 01:51:25 executing program 0: 01:51:25 executing program 1: [ 575.975863][T26891] binder: 26889:26891 transaction failed 29201/-22, size 64-16 line 3389 [ 575.995160][T26896] binder: 26883:26896 transaction failed 29201/-22, size 64-10 line 3202 01:51:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001dc, 0x0) 01:51:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ee, 0x0) [ 576.041887][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.052866][T26891] binder: BINDER_SET_CONTEXT_MGR already set [ 576.095666][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.102146][T26896] binder: 26883:26896 transaction failed 29201/-22, size 64-10 line 3202 [ 576.112004][T26897] binder: 26889:26897 got transaction with invalid parent offset or type 01:51:25 executing program 0: 01:51:25 executing program 1: [ 576.141242][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.166751][T26891] binder: 26889:26891 ioctl 40046207 0 returned -16 01:51:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001dd, 0x0) 01:51:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ef, 0x0) [ 576.218899][T26897] binder: transaction release 4365 bad handle 1, ret = -22 [ 576.238808][T26897] binder: 26889:26897 transaction failed 29201/-22, size 64-16 line 3389 01:51:25 executing program 0: [ 576.282465][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 01:51:25 executing program 1: 01:51:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 576.369378][T26923] binder: BINDER_SET_CONTEXT_MGR already set 01:51:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001de, 0x0) 01:51:25 executing program 0: [ 576.416053][T26923] binder: 26920:26923 ioctl 40046207 0 returned -16 [ 576.427414][T26934] binder: 26933:26934 got transaction with invalid parent offset or type 01:51:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f0, 0x0) 01:51:25 executing program 1: 01:51:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 576.534064][T26941] binder: 26933:26941 got transaction with invalid parent offset or type 01:51:25 executing program 0: 01:51:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 576.597863][T26950] binder: BINDER_SET_CONTEXT_MGR already set 01:51:25 executing program 1: 01:51:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f1, 0x0) 01:51:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001df, 0x0) [ 576.654712][T26950] binder: 26947:26950 ioctl 40046207 0 returned -16 [ 576.654837][T26953] binder_alloc: 26933: binder_alloc_buf, no vma 01:51:25 executing program 1: [ 576.753619][T26962] binder: 26959:26962 got transaction with invalid parent offset or type 01:51:25 executing program 0: 01:51:25 executing program 1: [ 576.872840][T26969] binder: 26959:26969 got transaction with invalid parent offset or type 01:51:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f2, 0x0) 01:51:26 executing program 0: 01:51:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e0, 0x0) [ 576.936004][T26950] binder: BINDER_SET_CONTEXT_MGR already set [ 576.993760][T26950] binder: 26947:26950 ioctl 40046207 0 returned -16 01:51:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:26 executing program 1: 01:51:26 executing program 0: 01:51:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f3, 0x0) 01:51:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e1, 0x0) [ 577.151503][T26991] binder: 26990:26991 got transaction with invalid parent offset or type 01:51:26 executing program 1: [ 577.224478][T26994] binder: BINDER_SET_CONTEXT_MGR already set 01:51:26 executing program 0: [ 577.267129][T26994] binder: 26993:26994 ioctl 40046207 0 returned -16 [ 577.273845][T26991] binder: BINDER_SET_CONTEXT_MGR already set 01:51:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f4, 0x0) [ 577.318181][T26991] binder: 26990:26991 ioctl 40046207 0 returned -16 01:51:26 executing program 1: 01:51:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 577.366704][T27000] binder_alloc: 26990: binder_alloc_buf, no vma [ 577.374698][T27008] binder_transaction: 5 callbacks suppressed [ 577.374710][T27008] binder: 26993:27008 got transaction with invalid offsets size, 13 01:51:26 executing program 0: 01:51:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f5, 0x0) 01:51:26 executing program 0: 01:51:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e3, 0x0) 01:51:26 executing program 1: [ 577.660894][T27037] binder: BINDER_SET_CONTEXT_MGR already set [ 577.686713][T27037] binder: 27026:27037 ioctl 40046207 0 returned -16 [ 577.695980][T27034] binder: BINDER_SET_CONTEXT_MGR already set 01:51:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffff001) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb86, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 01:51:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f6, 0x0) [ 577.734486][T27034] binder: 27030:27034 ioctl 40046207 0 returned -16 [ 577.741644][T27043] binder: 27030:27043 got transaction with invalid offsets size, 14 01:51:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f00000000c0)="0100a4ecc662866800000010c67df617afff4543") syz_emit_ethernet(0xffffff63, &(0x7f0000000100)={@local, @empty=[0x3, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x4, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff85, 0x0, 0x0, 0x0, [0x9, 0x29, 0x81000000], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:51:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e4, 0x0) 01:51:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 577.875899][T27043] binder_alloc: 27030: binder_alloc_buf, no vma 01:51:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = timerfd_create(0x1, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x989680}, {0x0, 0x5}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ifb0\x00'}) 01:51:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f7, 0x0) [ 577.933131][T27065] binder: BINDER_SET_CONTEXT_MGR already set 01:51:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x20000000) r3 = dup3(r1, r2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4080aebf, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) request_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000180)) ioctl$FICLONE(r3, 0x40049409, r0) 01:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e5, 0x0) [ 578.010437][T27065] binder: 27064:27065 ioctl 40046207 0 returned -16 01:51:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f8, 0x0) [ 578.121227][T27087] binder: BINDER_SET_CONTEXT_MGR already set 01:51:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 578.188858][T27087] binder: 27086:27087 ioctl 40046207 0 returned -16 01:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e6, 0x0) 01:51:27 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x2}, 0xfffffffffffffee9) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) accept(r0, &(0x7f0000000080)=@ethernet={0x0, @remote}, &(0x7f0000000100)=0x80) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000580)) ioctl(r1, 0x8936, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00'}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) open(&(0x7f0000000780)='./file0\x00', 0x4000, 0x50) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x20, 0x10000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="b61e502cb4e3ab013b4c5f3f1885833437d4484e128c9bbecebda35baed72a5538f63b4b32eb8e5d8dc7bb8683b35abe913490753dd924bc78200bb0d3a9ffc8302fe9062cfd72bf97adc7515cae47c47ef96df423d5", 0x56, 0xfffffffffffffffc) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617400000000007e1d00"/120], 0x1) [ 578.244546][T27098] binder_alloc: 27086: binder_alloc_buf, no vma [ 578.262608][T27100] binder: BINDER_SET_CONTEXT_MGR already set [ 578.274113][T27100] binder: 27099:27100 ioctl 40046207 0 returned -16 01:51:27 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1, 0x10000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x3, 0x7}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00'}, 0x48) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x400, 0x0, 0x20000000000, 0x3, 0x3642}, 0x14) 01:51:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f9, 0x0) 01:51:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x12, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e7, 0x0) 01:51:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0xa, &(0x7f0000000040)={0x0, 0xfffffffffffff100}) [ 578.533465][T27118] binder: 27117:27118 got transaction with invalid offsets size, 18 [ 578.550902][T27121] binder: BINDER_SET_CONTEXT_MGR already set 01:51:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fa, 0x0) 01:51:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x80000805, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 578.580271][T27121] binder: 27119:27121 ioctl 40046207 0 returned -16 [ 578.616109][T27131] binder: BINDER_SET_CONTEXT_MGR already set 01:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e8, 0x0) [ 578.660573][T27131] binder: 27119:27131 ioctl 40046207 0 returned -16 [ 578.660815][T27134] binder: 27117:27134 got transaction with invalid offsets size, 18 01:51:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2f, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e9, 0x0) 01:51:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fb, 0x0) [ 578.917350][T27157] binder: BINDER_SET_CONTEXT_MGR already set 01:51:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ea, 0x0) 01:51:28 executing program 0: msgget(0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0x65504223) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r2, &(0x7f0000000080), 0x1c) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x1, 0x3, 0x8, 0x5, r3}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100), 0x28) close(r2) getpgid(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140), 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 578.961338][T27157] binder: 27150:27157 ioctl 40046207 0 returned -16 01:51:28 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x10010, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x20040000) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="3a772f425e7dcaf1cddc1344fe7d3c10a76a4a", 0x13, 0xfffffffffffffffb) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x41) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000500)=@isdn, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)=""/9, 0x9}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000015c0)=""/4096, 0x1000}, 0x121) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x1, 0x210802) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000000c0)=0x6, 0x4) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000002600)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) bind$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) recvfrom$rxrpc(r4, &(0x7f0000000040)=""/11, 0xb, 0x0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x9}}, 0x24) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x70, 0xffffffff, 0x7, 0x8, 0x80, 0x0, 0x180000000000000, 0x40000, 0x4, 0x2, 0x400, 0x0, 0x1b, 0x8, 0x8, 0xfffffffffffffffc, 0x36ee, 0x3, 0x3ff, 0x1, 0x10000, 0xffffffffffffd6ba, 0x5, 0xd94, 0x9, 0x6, 0x0, 0xffffffffffffff81, 0x8, 0x4, 0x100000000, 0x9, 0x1, 0x2, 0xfffffffffffffff7, 0x1ff, 0x6f22, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x3f42, 0x65fe, 0x7, 0xfffffffffffffbcc, 0x1000000, 0x7}, r4, 0x4, r2, 0xa) [ 579.028442][T27164] binder: 27150:27164 got transaction with invalid offsets size, 47 [ 579.053844][T27168] binder: BINDER_SET_CONTEXT_MGR already set 01:51:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fc, 0x0) [ 579.136463][T27168] binder: 27167:27168 ioctl 40046207 0 returned -16 01:51:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001eb, 0x0) 01:51:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x63, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 579.313710][T27190] binder: BINDER_SET_CONTEXT_MGR already set 01:51:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:28 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) mmap(&(0x7f0000c62000/0x1000)=nil, 0x1000, 0xb, 0x1030, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x409c800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6c91}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc040) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) read(r2, &(0x7f00000003c0)=""/168, 0xa8) [ 579.385694][T27190] binder: 27189:27190 ioctl 40046207 0 returned -16 01:51:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ec, 0x0) 01:51:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fd, 0x0) [ 579.456915][T27196] binder_alloc: 27189: binder_alloc_buf, no vma 01:51:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x40045566, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x200000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) [ 579.517109][T27201] binder: BINDER_SET_CONTEXT_MGR already set [ 579.523147][T27201] binder: 27200:27201 ioctl 40046207 0 returned -16 01:51:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x800098f905, 0xdffdfffffffffffe, [], @p_u32=&(0x7f0000000000)=0xf4c}}) 01:51:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000102090100"/20], 0x14}}, 0x0) 01:51:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fe, 0x0) 01:51:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x223, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) 01:51:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 579.793450][T27230] binder: 27229:27230 got transaction with invalid offsets size, 547 01:51:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ee, 0x0) 01:51:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x400000000008000, 0xff4b) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/138) 01:51:28 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000340)={@my=0x1}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000380)=""/56) getpgid(r2) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000000040), 0x6de, 0x60, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_VL_CLR(r0, 0x7014) write$P9_RSTATu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="850000007d020000006e0001000100200010b8bc13e6060000000000000000002100ff7f000000000000040000000000000012002f6465762f696e7075742f6576656e74230012002f6465762f696e7075742f6576656e74230012002f6465762f696e7075742f6576656e742300050070726f632302006c6f", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r5], 0x85) socket$caif_stream(0x25, 0x1, 0x2) r6 = perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) dup2(r7, r6) 01:51:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000201, 0x0) [ 579.869880][T27238] binder: BINDER_SET_CONTEXT_MGR already set [ 579.882401][T27238] binder: 27237:27238 ioctl 40046207 0 returned -16 [ 579.902359][T27240] binder: 27229:27240 got transaction with invalid offsets size, 547 01:51:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x86, 0x301000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7, 0x0, 0x1, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f00000002c0)="2400000021002551075c0165ff0ffc020200000300100f0000e1000c08000e028000a000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464000000000000000085ea2b85d32b3583d87124da3b0861e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801f1cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1ac968ce510c7a70723741b34981d1b182deb7904", 0xe0) 01:51:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5f5e0ff, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 579.976186][T27238] binder: BINDER_SET_CONTEXT_MGR already set [ 580.004988][T27238] binder: 27237:27238 ioctl 40046207 0 returned -16 01:51:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ef, 0x0) 01:51:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000202, 0x0) 01:51:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x1}, 0x8) 01:51:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 580.111524][T27262] binder_alloc: 27261: binder_alloc_buf size 100000064 failed, no address space 01:51:29 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x746f, 0x80000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) mq_notify(r2, &(0x7f0000000080)={0x0, 0x6, 0x1, @tid=r3}) ioctl$FS_IOC_FSGETXATTR(r2, 0x8008551c, &(0x7f0000000000)={0xa1, 0x2}) [ 580.179436][T27262] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 580.245103][T27277] binder: BINDER_SET_CONTEXT_MGR already set [ 580.268500][T27262] binder_transaction: 40 callbacks suppressed [ 580.268518][T27262] binder: 27261:27262 transaction failed 29201/-28, size 64-99999999 line 3148 01:51:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f0, 0x0) 01:51:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000203, 0x0) [ 580.291313][T27277] binder: 27276:27277 ioctl 40046207 0 returned -16 [ 580.314974][T27282] binder_fixup_parent: 12 callbacks suppressed [ 580.314986][T27282] binder: 27276:27282 got transaction with invalid parent offset or type 01:51:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r3 = getuid() setresuid(r1, r2, r3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0xfffffffffffffffd, 0x1000) connect$inet6(r4, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x300) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x2) [ 580.350693][T27284] binder: BINDER_SET_CONTEXT_MGR already set [ 580.369823][T27286] binder_alloc: 27261: binder_alloc_buf size 100000064 failed, no address space 01:51:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x6, 0xfffffffffffffff7, 0x5, 0x1}, {0x10001, 0x7fff, 0x50fc, 0x2}, {0x2, 0x8, 0x7ff, 0x400}, {0x6, 0x9, 0x400, 0x8}, {0x3, 0xfffffffffffffffc, 0x401, 0x2}, {0x4, 0x7, 0x3393, 0x6}, {0x1, 0xffffffff, 0xffff}, {0x8, 0xffffffff, 0x7, 0x49}]}, 0x10) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/1, 0x1) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'nq\x00', 0x4}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x50000420}, 0x2c) [ 580.411556][T27284] binder: 27261:27284 ioctl 40046207 0 returned -16 [ 580.451600][T27286] binder_alloc: allocated: 80 (num: 1 largest: 80), free: 12208 (num: 1 largest: 12208) 01:51:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f1, 0x0) 01:51:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000204, 0x0) [ 580.498743][T27286] binder: 27261:27286 transaction failed 29201/-28, size 64-99999999 line 3148 [ 580.498846][T27282] binder: 27276:27282 transaction failed 29201/-22, size 64-16 line 3389 [ 580.602140][T27155] binder_release_work: 41 callbacks suppressed [ 580.602148][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.622621][T27277] binder: BINDER_SET_CONTEXT_MGR already set 01:51:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x2}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:29 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) utimensat(r0, 0x0, &(0x7f0000f84fe0)={{0x0, 0x3ffffffe}}, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 01:51:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sysfs$1(0x1, &(0x7f0000000000)='\x00') write(r0, &(0x7f00000000c0)="260000005e0017000000eaf83a00000000000002000000000d4435eade", 0x3ea) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100000, 0x20002) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x1, &(0x7f0000000080), 0x1, r2, 0x4}) 01:51:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000205, 0x0) [ 580.650440][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.657702][T27282] binder: 27276:27282 got transaction with invalid parent offset or type [ 580.690970][T27277] binder: 27276:27277 ioctl 40046207 0 returned -16 [ 580.729367][T27282] binder: transaction release 4471 bad handle 1, ret = -22 [ 580.757313][T27282] binder: 27276:27282 transaction failed 29201/-22, size 64-16 line 3389 [ 580.769874][T27319] binder: 27317:27319 got transaction with invalid parent offset or type [ 580.788832][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.815104][T27319] binder: 27317:27319 transaction failed 29201/-22, size 64-16 line 3389 01:51:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f2, 0x0) 01:51:29 executing program 0: r0 = open(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x81, 0x4) shmat(r2, &(0x7f0000001000/0x1000)=nil, 0x6000) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000000f000/0x3000)=nil) madvise(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x9) 01:51:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x3c}, 0x0, @in6, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 580.870200][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.878590][T27319] binder: BINDER_SET_CONTEXT_MGR already set 01:51:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000206, 0x0) [ 580.921310][T27326] binder: 27317:27326 transaction failed 29189/-22, size 64-16 line 2995 01:51:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000018008102e00f80ecdb4cb92e0a06022c000cd300e8bd6efb120009000e003fa00200000006000500fec0", 0x2e}], 0x1, 0x0, 0x0, 0x1300}, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x21) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) [ 580.975844][T27319] binder: 27317:27319 ioctl 40046207 0 returned -16 [ 580.980102][T27341] binder: 27338:27341 got transaction with invalid parent offset or type [ 580.994740][ T5] binder: undelivered TRANSACTION_ERROR: 29189 01:51:30 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200800, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x3ff, 0x8000, 0xfff, 0x6, 0x1, 0x0, 0x4, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x401, 0x30}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x2, 0x8, 0x1, 'queue1\x00', 0x7f}) setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x100000001, 0x7fffffff, 0xae, 0x6, 0x0, 0x3, 0x6, 0x4, 0x190, 0x40, 0x3e2, 0x0, 0x616, 0x38, 0x200, 0x81, 0x6, 0x1}, [{0x2, 0x5, 0x7, 0x401, 0xffff, 0x3, 0x5, 0xbe}], "df873db4adf31a6915742d987e47a9127f26f343462fe682d5251f8835f59d", [[], [], [], [], [], [], [], [], [], []]}, 0xa97) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000d80)={0x3, 0x1, 0x7, 0x5, r1}, 0x10) r2 = accept4(r0, 0x0, &(0x7f0000000dc0), 0x800) r3 = syz_open_dev$mice(&(0x7f0000000e00)='/dev/input/mice\x00', 0x0, 0x1d1400) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000e40)={r1, 0x7}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000e80)='/dev/snd/timer\x00', 0x0, 0x501000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, r4, 0x308, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0x48}}, 0x80) fcntl$setflags(r2, 0x2, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000001040)={0x1, 0x7, 0x0, 0x9, 0x8, 0x1000}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001080)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000010c0)={{0x98c8aa89e6235111, 0x3, 0x6, 0x2, 0x5}, 0x7ff, 0xd4f}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001140)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000001180)=r6) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$nl_xfrm(r3, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)=@flushpolicy={0xb0, 0x1d, 0x822, 0x70bd2c, 0x25dfdbfc, "", [@algo_auth={0x58, 0x1, {{'streebog512-generic\x00'}, 0x78, "bc3450877b1e2fd3024319fb320ff8"}}, @replay_thresh={0x8, 0xb, 0x200}, @sec_ctx={0x40, 0x8, {0x3c, 0x8, 0x1, 0x0, 0x34, "75fc5e4f252c0cf05d477b1b305b29cac6520081893119a5ab367f30a622ecdbb7f1c0ebd55afb02cdb47912233f1f91520b6a63"}}]}, 0xb0}}, 0x4000094) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000001340)={0xcf, 0xfff}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001380)) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000013c0)={0x1, 0x0, 0x3, 0x0, 0xb0ba, 0x200}) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000001400)=""/178) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000014c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001500)=0x10) r7 = dup2(r2, r0) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000001540)={'bcsf0\x00', {0x2, 0x4e24, @loopback}}) fcntl$notify(r3, 0x402, 0x6) 01:51:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000207, 0x0) [ 581.058062][T27341] binder: 27338:27341 transaction failed 29201/-22, size 64-16 line 3389 01:51:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x3}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 581.103037][T27348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.110363][T27348] IPv6: NLM_F_CREATE should be set when creating new route [ 581.117657][T27348] IPv6: NLM_F_CREATE should be set when creating new route [ 581.124877][T27348] IPv6: NLM_F_CREATE should be set when creating new route 01:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f3, 0x0) 01:51:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000208, 0x0) [ 581.164758][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.173761][T27346] binder: BINDER_SET_CONTEXT_MGR already set 01:51:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') sendfile(r0, r2, 0x0, 0x800000bf) read$eventfd(r2, 0x0, 0x0) [ 581.225531][T27346] binder: 27338:27346 ioctl 40046207 0 returned -16 [ 581.236321][T27363] binder: 27357:27363 got transaction with invalid parent offset or type [ 581.295956][T27363] binder: 27357:27363 transaction failed 29201/-22, size 64-16 line 3389 01:51:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000209, 0x0) [ 581.341546][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.343320][T27363] binder: 27357:27363 got transaction with invalid parent offset or type 01:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f4, 0x0) 01:51:30 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000140)={0x1, 0x1, 0x7f}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) rt_sigtimedwait(&(0x7f0000000000)={0x4d9}, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0xfeaa) sendfile(r2, r4, 0x0, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) [ 581.417700][T27376] binder: BINDER_SET_CONTEXT_MGR already set [ 581.423767][T27376] binder: 27374:27376 ioctl 40046207 0 returned -16 [ 581.452175][T27363] binder: 27357:27363 transaction failed 29201/-22, size 64-16 line 3389 [ 581.503830][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.532216][T27376] binder: 27374:27376 got transaction with invalid parent offset or type 01:51:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000030000500000000000020000004000000cbcbb40a14000100ffffffff00000000f6ff000000000300"], 0x2c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='a\x0e\xd7_\xf1\x88(\x1cZMn\x87oc\xbc8\xe0\xf8\xfbbX!\xda\x9b\xfek\xcbxV\xf8_\x8fZvk\xb7\x02v\xa8\x8f\x89\x99N\xa1\x10\xa0fh\xc2]C\xf1Ic\xab\x85\xe4\x99\xaf\xfax\xd0]\x86\xb5\xc9m-\v\x8bf\a\xd8H[B\xf5y]\x04/\xf1=(\xe8S\xf6\xcf\xa1\x97\x9cYo~\xd1\x00S\xee[\xbfM\x0f\xb9\xe2\xe9\xa0\xcczs\xc4:PF\xf4S>\x0e\xf6\xb2\x1d\xb9\x018x5\xb5\xbbX\x849a\x1eQ5\xf8\x11\xecx\x10\x0f\xba d4\xa9l\xbc}\xcdxZ\x8a{\xcf\xe9X\xc6,\x9c\xd5\x03\xf8\x97\x9dm{\xfc7\xc1O\x9e\xe9\xa1\xba\x7fQ!\xd0\x82S\x1d\xceCa\xad\x1cM!\x12^9ajvP\xf967\x19\xb8e4\x18\x8c\x8c\xbcVr\x85\x84\xd2\xa5\xd8\xe1H8~;\xb8\x83\xa0\x04/o\xfb\x85\x0e\xb2X\xb8\xe0\x98\xe0\xea\xab\x8a5\x16\xdf8\vD>T#\xbc\xbektd\xe52\xf3\x1f3\xfb\x04\xa4>\x91Z\x16g\\I\xa4\xa8[:\xc0\x18\xde\xe4y\x16L\x94\xadv\x99\x99S6sl\xbc\xdd vEF\xd5\xb4\xe5\xe0\xa5T\xc1\x16\x1ea \xcb\x06\xdc\xf5\x8d\xccn\xeax\x02;`ZX\x1e\x958{W\xaa\x92Z\xcb*\x8c\x15r\xa9%\x1c\x82K\xadT\xf0\xd0\x13\xacjDn\xdf\x8b\v\x81\xcb\xc8\xcaTj\x97;\xc3C\x0f\xe7\xe4X\x97\xc4\x8c') sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f4, 0x14, 0xc, 0x70bd25, 0x25dfdbfd, {0x1}, [@typed={0x170, 0x67, @str='a\x0e\xd7_\xf1\x88(\x1cZMn\x87oc\xbc8\xe0\xf8\xfbbX!\xda\x9b\xfek\xcbxV\xf8_\x8fZvk\xb7\x02v\xa8\x8f\x89\x99N\xa1\x10\xa0fh\xc2]C\xf1Ic\xab\x85\xe4\x99\xaf\xfax\xd0]\x86\xb5\xc9m-\v\x8bf\a\xd8H[B\xf5y]\x04/\xf1=(\xe8S\xf6\xcf\xa1\x97\x9cYo~\xd1\x00S\xee[\xbfM\x0f\xb9\xe2\xe9\xa0\xcczs\xc4:PF\xf4S>\x0e\xf6\xb2\x1d\xb9\x018x5\xb5\xbbX\x849a\x1eQ5\xf8\x11\xecx\x10\x0f\xba d4\xa9l\xbc}\xcdxZ\x8a{\xcf\xe9X\xc6,\x9c\xd5\x03\xf8\x97\x9dm{\xfc7\xc1O\x9e\xe9\xa1\xba\x7fQ!\xd0\x82S\x1d\xceCa\xad\x1cM!\x12^9ajvP\xf967\x19\xb8e4\x18\x8c\x8c\xbcVr\x85\x84\xd2\xa5\xd8\xe1H8~;\xb8\x83\xa0\x04/o\xfb\x85\x0e\xb2X\xb8\xe0\x98\xe0\xea\xab\x8a5\x16\xdf8\vD>T#\xbc\xbektd\xe52\xf3\x1f3\xfb\x04\xa4>\x91Z\x16g\\I\xa4\xa8[:\xc0\x18\xde\xe4y\x16L\x94\xadv\x99\x99S6sl\xbc\xdd vEF\xd5\xb4\xe5\xe0\xa5T\xc1\x16\x1ea \xcb\x06\xdc\xf5\x8d\xccn\xeax\x02;`ZX\x1e\x958{W\xaa\x92Z\xcb*\x8c\x15r\xa9%\x1c\x82K\xadT\xf0\xd0\x13\xacjDn\xdf\x8b\v\x81\xcb\xc8\xcaTj\x97;\xc3C\x0f\xe7\xe4X\x97\xc4\x8c'}, @generic="278ca446ff211a2040331f1bdf", @generic="0d32cfb49d6b8b857f6e9c9cb0fcb2fa1b8251817a393aa5b673c4ecaf50f96c81409ca449e9cb5cd2ac604d237b5dc6caf73f13e34780f51467006e817d76190035d10db9a897729a23399b739822a0a5837d35f7afabe29eeefc8b5400c58c91"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 01:51:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020a, 0x0) 01:51:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 581.592476][T27376] binder: transaction release 4490 bad handle 1, ret = -22 01:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f5, 0x0) [ 581.635605][T27376] binder: 27374:27376 transaction failed 29201/-22, size 64-16 line 3389 01:51:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") getsockopt$inet_opts(r0, 0x0, 0x400000000000016, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1800000000, 0x40) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) [ 581.704015][T27397] binder: 27396:27397 got transaction with invalid parent offset or type 01:51:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3a98, 0x4000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7) writev(r0, &(0x7f0000000040), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) [ 581.758363][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.774467][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.781484][T27376] binder: BINDER_SET_CONTEXT_MGR already set 01:51:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020b, 0x0) [ 581.808181][T27376] binder: 27374:27376 ioctl 40046207 0 returned -16 [ 581.808959][T27410] binder_alloc: 27396: binder_alloc_buf, no vma [ 581.845813][T27389] binder: 27374:27389 got transaction with invalid parent offset or type 01:51:31 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x40000) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', 'GPL*$%[-_(\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x3, 0x8, 0xff, 0x7, r1}, &(0x7f00000001c0)=0x10) futex(&(0x7f000000cffc)=0x4, 0x4, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000219ff0)={0x77359400}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) exit(0x0) 01:51:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f6, 0x0) 01:51:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x5}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020c, 0x0) 01:51:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e1f, @loopback}, 0xffffffffffffff80) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x227a, 0x715000) writev(r1, &(0x7f00000023c0)=[{&(0x7f00000003c0)="c0", 0x1}], 0x1) [ 582.055780][T27429] binder: 27428:27429 got transaction with invalid parent offset or type [ 582.128763][T27434] binder: BINDER_SET_CONTEXT_MGR already set [ 582.138817][T27439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 582.148810][T27434] binder: 27431:27434 ioctl 40046207 0 returned -16 [ 582.161319][T27437] binder: BINDER_SET_CONTEXT_MGR already set 01:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f7, 0x0) 01:51:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020d, 0x0) [ 582.201298][T27437] binder: 27433:27437 ioctl 40046207 0 returned -16 [ 582.238173][T27444] binder: BINDER_SET_CONTEXT_MGR already set 01:51:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x40000000000000a, 0x0, 0x0, 0x2, 0x2000000}, 0x10}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xd7, &(0x7f00000000c0)=""/200, &(0x7f0000000040)=0xc8) 01:51:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 582.294139][T27444] binder: 27433:27444 ioctl 40046207 0 returned -16 01:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f8, 0x0) [ 582.363460][T27446] binder_alloc: 27428: binder_alloc_buf, no vma 01:51:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020e, 0x0) [ 582.411511][T27463] binder: BINDER_SET_CONTEXT_MGR already set 01:51:31 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x7, 0x2, 'client1\x00', 0x0, "fd281db908b49936", "9ec9db8a693405c54febf8e10bf9f9f0748e2995fedc4c67634d84d012a77da5", 0x200, 0x2}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xb703, 0x0) 01:51:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 582.455584][T27463] binder: 27461:27463 ioctl 40046207 0 returned -16 01:51:31 executing program 1: r0 = socket$unix(0x1, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0xe) [ 582.542938][T27475] binder: BINDER_SET_CONTEXT_MGR already set 01:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f9, 0x0) 01:51:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000000c0)={0xffffffff, 0x5, 0x6}) r1 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 582.591889][T27475] binder: 27474:27475 ioctl 40046207 0 returned -16 01:51:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020f, 0x0) [ 582.709397][T27492] binder: BINDER_SET_CONTEXT_MGR already set 01:51:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x24) r2 = socket$inet(0x2, 0x2, 0x0) r3 = dup3(r2, r0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000eefffc)=0x7fd, 0x4) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000059000)=0x89a, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), 0x4) 01:51:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fa, 0x0) [ 582.762693][T27492] binder: 27491:27492 ioctl 40046207 0 returned -16 [ 582.847312][T27507] binder: BINDER_SET_CONTEXT_MGR already set [ 582.866520][T27507] binder: 27505:27507 ioctl 40046207 0 returned -16 01:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fb, 0x0) 01:51:31 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x14}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000004c0)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001200)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000000000000800200000000000098030000980300009803000004000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005210ee169677d665000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff7f0000010c000000ffffffffac1e00017f000001ff000000ffffffff1d0aae517b8a000000000000000000000000000000000000ff00ff000000000000000000000000000180c2000003000000000000000000000000000000000000ffffffffff0000000000000000000000000700030002080000040080736974300000000000000000000000006e6c6d6f6e300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000f0004001000000000000000000000000000000000000ff0300000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000ffffffffac1414bb00000002ffffffff00000000aaaaaaaaaa0f000000000000000000000000000000000000ffffffff00ff00000000000000000000000000000000000000000000000000000000000000ff00ff00ff000000000000000000000001000053ec00080fdaffff726f73653000000000000000000000006e6c6d6f6e300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000090000000000000000000000f000180100000000000000000000000000000000000000000000000000002800434c415353494659000000000000000000000000000000000000000000007c0d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000fc89c2f0631a23ee0000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000054df8db3748426b186685e91de50fbb93107ac9abc36989a9bd7f7eda63d798e9d580ef9d90c7ab5433f06359eba18ef0718d641fbea9134e6aca4dde0cb47c8b8905362c72eec1f4a263f95b335bd04989aaf945144b959e9601128dae05899af"], 0x4d0) ioctl$EVIOCSFF(r2, 0x402c4580, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000580)='./file0\x00', &(0x7f0000000900)='trusted.overlay.nlink\x00', &(0x7f00000008c0)={'L-', 0xfffffffffffff000}, 0x28, 0x2) sendmsg$kcm(r2, 0x0, 0x80) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[]}}, 0x24000800) poll(&(0x7f0000000440)=[{r3}, {0xffffffffffffffff, 0x40000}], 0x2, 0x3ff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=@v1={0x1000000, [{0x1851e26e}]}, 0xc, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) mkdirat(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x7, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) syz_open_dev$adsp(0x0, 0x401, 0x8853ebd796b63f81) r4 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x82f, 0x0, @dev={0xac, 0x4}, @remote}, @icmp=@timestamp_reply}}}}, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000a00)) 01:51:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 582.898761][T27507] binder: BINDER_SET_CONTEXT_MGR already set 01:51:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pwrite64(r0, &(0x7f0000000100)="fae8ba700fe050a6b5b9779a3504b24674876ab8a88930bc5e7dc10b2c529f59e7ac501e56557ccf608d18f8d28f3230af521038e5de1cfb9b17fde6c45bc61dbcca16e7e0619d65a77f471108c12e320751c8db7bf14e85a74babcbea85855fa65ffc1453b2088d5b74088cfb614b7d7410d33d0b0b9a6ca9207847cc4e4b5c5357ab3de0dd0ddce8a56c", 0x8b, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="8408434b00000000ebc17100d070") socket$inet_dccp(0x2, 0x6, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000350ffc)=0xfffffffffffffead) 01:51:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000210, 0x0) [ 582.978268][T27507] binder: 27505:27507 ioctl 40046207 0 returned -16 01:51:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fc, 0x0) 01:51:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x48}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 583.041256][T27524] binder: 27523:27524 ioctl 6685 0 returned -22 01:51:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000211, 0x0) 01:51:32 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) flock(r0, 0x2) r1 = getpgid(0x0) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xffffffffffffffff}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f00000017c0), 0x1be, 0x0) 01:51:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fd, 0x0) [ 583.195714][T27524] binder: 27523:27524 ioctl 6685 0 returned -22 [ 583.219984][T27545] binder: BINDER_SET_CONTEXT_MGR already set 01:51:32 executing program 0: r0 = request_key(0x0, 0x0, &(0x7f0000000100)='trusted\x00', 0xfffffffffffffffd) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', 0x2}, 0x18) r2 = socket(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) bind$isdn(0xffffffffffffffff, 0x0, 0x1fe) keyctl$link(0x8, r0, r0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000002c0)='trusted\x00', 0x0, &(0x7f00000006c0), 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0x0) [ 583.251851][T27545] binder: 27544:27545 ioctl 40046207 0 returned -16 01:51:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000212, 0x0) 01:51:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fe, 0x0) 01:51:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000066e60040050000a90000000000fa00000000e2060000000001000000000000202560b700ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x482}]}) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1800}], 0x1) 01:51:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000201, 0x0) 01:51:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000213, 0x0) [ 583.540268][T27585] binder: BINDER_SET_CONTEXT_MGR already set [ 583.555759][T27585] binder: 27572:27585 ioctl 40046207 0 returned -16 01:51:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000202, 0x0) 01:51:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4eb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)) 01:51:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x68}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:51:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000203, 0x0) [ 583.870991][T27609] binder: BINDER_SET_CONTEXT_MGR already set [ 583.891475][T27609] binder: 27597:27609 ioctl 40046207 0 returned -16 [ 583.908261][T27611] binder: BINDER_SET_CONTEXT_MGR already set 01:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000204, 0x0) [ 583.932310][T27611] binder: 27606:27611 ioctl 40046207 0 returned -16 [ 583.941184][T27616] binder_alloc: 27566: binder_alloc_buf, no vma [ 583.959018][T27618] binder_alloc: 27566: binder_alloc_buf, no vma 01:51:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000215, 0x0) 01:51:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000066e60040050000a90000000000fa00000000e2060000000001000000000000202560b700ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x482}]}) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1800}], 0x1) 01:51:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000205, 0x0) 01:51:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000213, 0x0) 01:51:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x668, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x200, 0xffffffff, 0x4e, r4}, 0x10) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) [ 584.276099][T27639] binder: BINDER_SET_CONTEXT_MGR already set [ 584.295623][T27639] binder: 27638:27639 ioctl 40046207 0 returned -16 01:51:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000216, 0x0) 01:51:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x74}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000206, 0x0) [ 584.444737][T27654] binder: BINDER_SET_CONTEXT_MGR already set [ 584.513855][T27654] binder: 27653:27654 ioctl 40046207 0 returned -16 [ 584.513931][T27664] binder_alloc: 27638: binder_alloc_buf, no vma 01:51:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000215, 0x0) 01:51:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0xfff, 0x8000) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000400)={0x8, 0x20}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000500)='ip6_vti0\x00', 0xfdfa) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000074f73cc580d76ba100000000"], 0x8) fcntl$setstatus(r3, 0x4, 0x2000) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f00000004c0)='/d}v/seque\x87cer\x00', 0xd0e3f10deee7d5f7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0xfffffffffffffffc, 0x4) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r1, r5, 0x0, 0x102000002) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x2000, 0x0) r9 = getuid() getgroups(0x6, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0xee00]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303030b03030302c757365725f69643d", @ANYRESDEC=r9, @ANYBLOB=',groupWid=', @ANYRESDEC=r10, @ANYBLOB=',max_read=0x000000000000ffff,default_permissions,fscontext=system_u,subj_type=[md5sumvmnet1,\x00']) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f00000002c0)=0x0) migrate_pages(r11, 0x8, &(0x7f0000000300)=0x80000001, &(0x7f0000000340)=0x3c8) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x80002, 0x0) write$sndseq(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x80ffffff, 0xb}, {}, @quote}], 0xff33) 01:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000207, 0x0) 01:51:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 584.693682][T27654] binder: BINDER_SET_CONTEXT_MGR already set 01:51:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000217, 0x0) [ 584.742036][T27654] binder: 27653:27654 ioctl 40046207 0 returned -16 01:51:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa029cce98941b86dd6076605100303afffe809c000000000000000000000000ffff020000000000000000000000000001860090780014000060c5961e00000000ff01000000000000180300f000000001ff020000000000000000000000000001a31f4edc840042fd623fa1ab1f3c7b463b6800bcd69b02b443b94d0201008efbabebad313978a7e84dd99eace56c2ceae28f387272f3e1df2ed72a6964c263a63a4606193857"], 0x0) 01:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000208, 0x0) 01:51:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$int_in(r0, 0x5452, &(0x7f0000000400)=0x8) sendto$inet(r0, &(0x7f0000000080)="f9", 0xfffffffffffffea1, 0x0, 0x0, 0x0) 01:51:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x300}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 585.064829][T27702] binder: BINDER_SET_CONTEXT_MGR already set 01:51:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x500}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000209, 0x0) [ 585.127574][T27702] binder: 27701:27702 ioctl 40046207 0 returned -16 01:51:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000218, 0x0) [ 585.291715][T27716] binder: BINDER_SET_CONTEXT_MGR already set [ 585.315247][T27716] binder: 27715:27716 ioctl 40046207 0 returned -16 [ 585.388363][T27720] binder_fixup_parent: 30 callbacks suppressed [ 585.388374][T27720] binder: 27715:27720 got transaction with invalid parent offset or type 01:51:34 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 01:51:34 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = socket$inet6(0xa, 0x4, 0x9) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x12) getsockopt$inet6_buf(r0, 0x29, 0x1e, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 01:51:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020a, 0x0) 01:51:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 585.455460][T27720] binder: transaction release 4627 bad handle 1, ret = -22 01:51:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000219, 0x0) [ 585.549099][T27720] binder_transaction: 44 callbacks suppressed [ 585.549118][T27720] binder: 27715:27720 transaction failed 29201/-22, size 64-16 line 3389 [ 585.560446][T27734] binder: 27731:27734 got transaction with invalid parent offset or type 01:51:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020b, 0x0) [ 585.602849][T27716] binder: BINDER_SET_CONTEXT_MGR already set [ 585.625735][T27716] binder: 27715:27716 ioctl 40046207 0 returned -16 01:51:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x10000fffff000, 0x10000}) r2 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) ioctl(r2, 0x7f, &(0x7f0000000100)="41823cdd1accc7bad22567cd20aee79abe729d4c891856307f38abc5c7e52453e91b985bdc8609ea452de1345ef99928f86f12b53e5fb1ffcf044656fb01e5ff6dae2cccbe381d1ad9e75f2a2f9ef638f63379826ddf7ca351a7bdc524686c20ac040aa104b69f06c096fcbf4839cca00e9d90bb38d0c6115858ac2c04af4e5127999a74c4a87415b2c229341f29c93644bbce2b3439e118231ef090f49e32ec56ca4e96df745e56ed11b180bb3ac09b926017e632028616e9390bacdda56e58df6302d738735fba3610e826bb233980b910a95e2fbf0ebfe1d6162050d3da1015de06b1469534135286bc17fda81f7dc9f8c051") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10014, r2, 0xfffffffffffffffd) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) [ 585.665492][T27720] binder: 27715:27720 got transaction with invalid parent offset or type 01:51:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bbd70") syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7ff, 0x2001) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x125e, 0x72f07d) [ 585.713399][T27734] binder: 27731:27734 transaction failed 29201/-22, size 64-16 line 3389 [ 585.763419][T27720] binder: 27715:27720 transaction failed 29201/-22, size 64-16 line 3389 01:51:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020c, 0x0) [ 585.808365][ T2825] binder_release_work: 44 callbacks suppressed [ 585.808372][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.824866][T27757] binder: 27731:27757 got transaction with invalid parent offset or type [ 585.846751][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:51:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x600}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021a, 0x0) 01:51:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0x80089203, 0x20000ffb) wait4(0x0, 0x0, 0x80000008, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) dup2(r0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000002000000000001e000000100000000000000000000000000000000000000000a003d0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d5635a72c447c8d00000000000000000000000000000000000000000000000000000000000000000000f6ed5ae31b6a709a601ebf2a4d1ef07953c4d9dc5ea756345df18d4eb3164787b22e535aefe8447313b855074e026a251cc4d24686760e9c37fdd624304e4ccc3fc0b8be675fd9b89374602912a39c09329641f0dc767fcfa4aacfac49"], 0xb8}}, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) gettid() [ 585.905477][T27757] binder: 27731:27757 transaction failed 29201/-22, size 64-16 line 3389 01:51:35 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) mkdir(0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x273) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 585.956080][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.006346][T27765] binder: BINDER_SET_CONTEXT_MGR already set 01:51:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020d, 0x0) [ 586.120106][T27765] binder: 27764:27765 ioctl 40046207 0 returned -16 [ 586.120168][T27770] binder_alloc: 27731: binder_alloc_buf, no vma 01:51:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) close(r1) [ 586.181236][T27782] binder: 27781:27782 got transaction with invalid parent offset or type [ 586.190074][T27770] binder: 27764:27770 transaction failed 29189/-3, size 64-16 line 3148 01:51:35 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0xb, &(0x7f0000000280)={0x9}, 0xc) 01:51:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021b, 0x0) [ 586.245649][T27782] binder: 27781:27782 transaction failed 29201/-22, size 64-16 line 3389 [ 586.266357][T27765] binder: BINDER_SET_CONTEXT_MGR already set [ 586.272533][T27765] binder: 27764:27765 ioctl 40046207 0 returned -16 [ 586.272722][T27770] binder: 27764:27770 got transaction with invalid parent offset or type [ 586.279732][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 01:51:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020e, 0x0) [ 586.337598][T27782] binder: BINDER_SET_CONTEXT_MGR already set [ 586.370299][T27782] binder: 27781:27782 ioctl 40046207 0 returned -16 [ 586.371242][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.425527][T27787] binder: 27781:27787 transaction failed 29189/-22, size 64-16 line 2995 [ 586.442757][T27770] binder: transaction release 4645 bad handle 1, ret = -22 01:51:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x4b564d04, 0x5], [0xc2]}) 01:51:35 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000400)={0xae0, 0x6, 0x4, {0x5, @vbi={0x0, 0x0, 0x1, 0x0, [], [0x80]}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x8, 0x4, {0x200000005, @pix={0x0, 0x0, 0x30364d54, 0x0, 0x0, 0x0, 0x6}}}) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x4, 0x8000}, 0x4) [ 586.492134][ T2825] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.508606][T27770] binder: 27764:27770 transaction failed 29201/-22, size 64-16 line 3389 01:51:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x700}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020f, 0x0) 01:51:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021c, 0x0) 01:51:35 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0xa802) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0x8000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) fstat(0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x5, 0x100) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) set_tid_address(&(0x7f0000000200)) [ 586.647256][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.716253][T27819] binder: 27818:27819 got transaction with invalid parent offset or type [ 586.739444][T27824] binder: BINDER_SET_CONTEXT_MGR already set 01:51:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000210, 0x0) 01:51:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "3d6445bc0eb5446ff9c5d6c67123ea71b73883de5ef19cc8ee9d0da5a89db062", 0x3, 0x802, 0x1, 0x3f, 0x4, 0x0, 0x3}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x1f, "7eb5518a6bf1b9602a7c52d7a8cc93be55664a0f5500bd982846dce13b5805e9", 0x0, 0x8, 0x2, 0x6, 0xe, 0x1, 0x4828, 0x6}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") dup3(r1, r0, 0x0) [ 586.795556][T27819] binder: 27818:27819 transaction failed 29201/-22, size 64-16 line 3389 [ 586.815592][T27824] binder: 27822:27824 ioctl 40046207 0 returned -16 [ 586.818976][T27830] binder: 27822:27830 got transaction with invalid parent offset or type [ 586.856337][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.863703][T27828] binder: 27818:27828 got transaction with invalid parent offset or type 01:51:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021d, 0x0) [ 586.900127][T27830] binder: 27822:27830 transaction failed 29201/-22, size 64-16 line 3389 [ 586.939897][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:51:36 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x8, 0x10}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) 01:51:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 586.962044][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.970192][T27824] binder: BINDER_SET_CONTEXT_MGR already set [ 587.001401][T27830] binder: 27822:27830 got transaction with invalid parent offset or type 01:51:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x505400, 0x0) sendto(r0, &(0x7f0000000080)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/23, 0x17}], 0x2}}], 0x1, 0x0, 0x0) 01:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000211, 0x0) [ 587.036630][T27824] binder: 27822:27824 ioctl 40046207 0 returned -16 [ 587.073695][T27830] binder: transaction release 4659 bad handle 1, ret = -22 [ 587.134640][T27852] binder: BINDER_SET_CONTEXT_MGR already set [ 587.164932][T27852] binder: 27850:27852 ioctl 40046207 0 returned -16 01:51:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:36 executing program 1: r0 = memfd_create(&(0x7f0000002600)='/dev/cachefiles\x00', 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000002640)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000002840)={0x1, &(0x7f0000002800)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000002880)={r3, 0xa}) sendmsg$nl_netfilter(r2, &(0x7f00000025c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002580)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2430}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) keyctl$session_to_parent(0x12) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000080)={0x78, 0x0, [0x0, 0x0, 0xc0010141, 0x3]}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000026c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x7c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x89}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="81772754945899f30f65804f3df1fc20"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) prctl$PR_SET_NAME(0xf, &(0x7f00000028c0)='keyringself\x00') 01:51:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)="8aef6828bc4904bf93e7a8cc1f86ddef44b3405ca62b4a50dbae9651e2e898bb3bd82e6079b5d5ce8150e74301cad8ff9064a78bc416bfb9b011bcf74550beb012b0837e2de688dca453b1a5c4d1020379994bed9131a4385297518c1728d9b061fad5e030e94abc372fbd45db2050f0db92af225b3f72394f68eab8df3d758bfb7f6ba9e4e4956bd996ff0322d08d92540a4b82979a3dadabd8f0c6376fd6123754461104ccb78c129d8429352bb1eab7c2162b5313c2d016ea2757bd84c8b36524c0b7185cb0ef8e5013e7963df6a5ea8bb8a01929621a0651b34d9867835b1ef9088533c44e3a2bb76ee4f9685297a278586ae8", 0xf5}, {&(0x7f0000000280)="f53edf24c3615b3913c98f78e701e3823d3a4451eb65b487cbaf1fb7758989c478524e08a5d719524f6dc5e4f8b05de191cc8b0cd0b18c438ae82297f6b35f1f48fb60d0402789630c52afa3c8161de27d9066dc64bc502c72400341cf8d9804fc2d6b096ddff7ac88403a178e9a8742048713d04168b344a11b5a005c82c0f289cbed12ac2630a6f0992ad7683821ad9255528ca503f5f94a7a8efa15e8cf890987d741737438a1576593db0601611d4e6880cf2f3dd52f77eda6130039ca7893d9b3", 0xc3}, {&(0x7f0000000380)="f31ba8b3bf03cd83512616d2f9dc9c2c7e8e892b95e4a18913e8726daf05845e2c94b2903356507b3663019aafdabe8a1288982cffdba4663b833da73fecc8cbe4ebf18f82e21c3231fcaa979ad00d97d01a", 0x52}, {&(0x7f0000000400)="18f4f8", 0x3}], 0x4, 0x0, 0x0, 0x8000}, 0x8000) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff8, 0x1) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000004c0)={0x100000001, 0xf8d}, 0x2) r5 = syz_open_dev$usb(0x0, 0x0, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) fstat(r0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 01:51:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021e, 0x0) 01:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000212, 0x0) 01:51:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x67, 0xa}}, &(0x7f0000000180)='GPL\x00', 0x0, 0xffffff43, 0x0, 0x41f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x327) [ 587.412624][T27879] binder: BINDER_SET_CONTEXT_MGR already set 01:51:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 587.465635][T27879] binder: 27877:27879 ioctl 40046207 0 returned -16 01:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000213, 0x0) 01:51:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2110000890e, &(0x7f0000000180)="0adc1f123c123f319bd07028e2fd697ef2c6e3611a53c9c818f53d9e3c057baee512dc93ce22733d23b434531830c13cf64608e8f52e28ab83b7ac89cf3f888926b06484c4a5034b1f00889262b1062b8b13ab53d0a2eb75b2a7ab015061ab35a2da901cb06bff9617fac651e9b0f2dc38aa56c4f863ab4f3974be376fb949572039058215a70adc2117eecd2521a4649ffdc0c18c8da3cc58024f270a076f") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x88) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000240)="1e4512ee689b17126df46cd49beccb0252087c416f39e3d0fb7a1b2e4d1251aa55693106eb4474ab399489d052c96cc876ab81e609e1a36d258b2d5fc5aa747b7a5c8257219bd6d537d6958b8bd5daacaa29e5bcf0785cf39920b85e7358ce3433beab7da252b1fe0c879890b56ecf5542cea41e2cdc0c718e460fa7a4699b8dbfc3fa2452915f25d199b7ebc4e778ef11ee2972ef7c88b300993e19988310f63d27109e1028de1e5fae380a42c831f117111775b3382c35c9b2843499a982971f3f4cb981d7c7178e221be54145ba7135006a007de645d8c5a81b2e773f38e4ac5db324dbb9b0a96dd2dac685") syz_emit_ethernet(0x66, &(0x7f0000000000)={@dev={[], 0x1e}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2b, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60, 0x0, 0x0, 0x0, 0x3c], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff81, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:51:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021f, 0x0) [ 587.565790][T27891] binder: BINDER_SET_CONTEXT_MGR already set [ 587.616424][T27891] binder: 27890:27891 ioctl 40046207 0 returned -16 01:51:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)="8aef6828bc4904bf93e7a8cc1f86ddef44b3405ca62b4a50dbae9651e2e898bb3bd82e6079b5d5ce8150e74301cad8ff9064a78bc416bfb9b011bcf74550beb012b0837e2de688dca453b1a5c4d1020379994bed9131a4385297518c1728d9b061fad5e030e94abc372fbd45db2050f0db92af225b3f72394f68eab8df3d758bfb7f6ba9e4e4956bd996ff0322d08d92540a4b82979a3dadabd8f0c6376fd6123754461104ccb78c129d8429352bb1eab7c2162b5313c2d016ea2757bd84c8b36524c0b7185cb0ef8e5013e7963df6a5ea8bb8a01929621a0651b34d9867835b1ef9088533c44e3a2bb76ee4f9685297a278586ae8", 0xf5}, {&(0x7f0000000280)="f53edf24c3615b3913c98f78e701e3823d3a4451eb65b487cbaf1fb7758989c478524e08a5d719524f6dc5e4f8b05de191cc8b0cd0b18c438ae82297f6b35f1f48fb60d0402789630c52afa3c8161de27d9066dc64bc502c72400341cf8d9804fc2d6b096ddff7ac88403a178e9a8742048713d04168b344a11b5a005c82c0f289cbed12ac2630a6f0992ad7683821ad9255528ca503f5f94a7a8efa15e8cf890987d741737438a1576593db0601611d4e6880cf2f3dd52f77eda6130039ca7893d9b3", 0xc3}, {&(0x7f0000000380)="f31ba8b3bf03cd83512616d2f9dc9c2c7e8e892b95e4a18913e8726daf05845e2c94b2903356507b3663019aafdabe8a1288982cffdba4663b833da73fecc8cbe4ebf18f82e21c3231fcaa979ad00d97d01a", 0x52}, {&(0x7f0000000400)="18f4f8", 0x3}], 0x4, 0x0, 0x0, 0x8000}, 0x8000) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff8, 0x1) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000004c0)={0x100000001, 0xf8d}, 0x2) r5 = syz_open_dev$usb(0x0, 0x0, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) fstat(r0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 01:51:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair(0xb, 0x2, 0x8001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0x6e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000200)=0x4) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) 01:51:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000220, 0x0) 01:51:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:51:37 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x77359400}}, 0x0) socketpair(0x5, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) 01:51:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x4) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0xf000, 0x4, 0x0, 0x1], 0x679eb4e6, 0x1, 0xffff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB='\\R']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000019000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:51:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000221, 0x0) 01:51:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7400}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 588.125923][T27942] binder: BINDER_SET_CONTEXT_MGR already set [ 588.149400][T27942] binder: 27941:27942 ioctl 40046207 0 returned -16 01:51:37 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x6, 0x2}}, 0xffffffffffffff6a) r1 = socket$inet(0x2, 0x3, 0x8) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x8, 0x0, "f93a9120d32b20b9f8657de22845c2d1440de036c5b1374f74ada2c463fa570bcb5a94a31e3da2885f8bfdd7b52837db44aad2f8cb75ef9311f377c880ff5417670ab2d4e150a3753b1eb5910fff3b67"}, 0xd8) setsockopt(r1, 0xff, 0x1, 0x0, 0x0) 01:51:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000215, 0x0) 01:51:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 588.305543][T27959] binder: BINDER_SET_CONTEXT_MGR already set [ 588.356768][T27959] binder: 27958:27959 ioctl 40046207 0 returned -16 [ 588.356792][T27966] binder_alloc: 27941: binder_alloc_buf, no vma 01:51:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000222, 0x0) 01:51:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000216, 0x0) 01:51:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x88d00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000140)={0x244, 0x401, 0x7, 'queue0\x00', 0x5}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) syz_open_dev$media(0x0, 0x0, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @initdev, @loopback}, &(0x7f0000000dc0)=0xc) bind$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) 01:51:37 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0faa1382ad3d54e1163ce4d42da92ef05fb36928530d692f404a7085f14f4b82eea83eaf74faf91534fab58c4e07bf4ce5a958950e767d893b92de491399c67e39ad9f62a99e1eaa24", 0x49) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000002c0)={0xf, {0x4, 0x100000001, 0x0, 0x57}, {0x200, 0xf44, 0xfffffffffffffe2f, 0x5}, {0x9, 0x100000001}}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x1d1001, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f00000000c0)={{0x1, @name="a9cef8bce19dc573dcba2c9b127577b13aa353250caa39b3b5a0f598f708ed37"}, "d6fd4af602a7501f8f8c4742cfae57d51b433fbda08f008ad81912b87a0df5d5", 0x1}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="400fc8cd80c4e1785b3cbc6969ef69dc00d9d0d0c442c2f5122db5d900000070e4c653fb0fcdcce39a468fc73c3b4d4d408064797f41cf404e01e19d3e420f72e37167450f483b1c0a1a63460fc476c16161f6623a960404c40171f99725000000ac8f0f000000b79f16d5fe") accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x800) [ 588.487118][T27959] binder: BINDER_SET_CONTEXT_MGR already set [ 588.523422][T27959] binder: 27958:27959 ioctl 40046207 0 returned -16 01:51:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000223, 0x0) 01:51:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xa) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) connect(0xffffffffffffffff, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x1100) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/246, &(0x7f0000000140)=0xf6) [ 588.673019][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:51:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000217, 0x0) [ 588.765132][T27999] binder: BINDER_SET_CONTEXT_MGR already set 01:51:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 588.836190][T27999] binder: 27998:27999 ioctl 40046207 0 returned -16 01:51:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000224, 0x0) 01:51:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:38 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x220000, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x202ecb, 0x4) setsockopt$inet_int(r0, 0x0, 0x100000000000017, &(0x7f0000000080)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x99, 0x40, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0xffffffffffffffba) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) 01:51:38 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket(0x800000002b, 0x4000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="39000000140081ae00d175040f62b04a2b546fc54c1960b89c40ebb373585806dbb7d553b4a400"/57, 0x39}], 0x1}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000140)=0xffff) setns(0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, &(0x7f00000000c0)) ioprio_get$uid(0x3, 0x0) 01:51:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000225, 0x0) 01:51:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x2000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000218, 0x0) [ 589.240495][T28039] binder: BINDER_SET_CONTEXT_MGR already set [ 589.285650][T28039] binder: 28038:28039 ioctl 40046207 0 returned -16 01:51:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000226, 0x0) 01:51:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffff80}) r2 = dup3(r1, r1, 0x80000) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x400080) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000100)=0x2b, 0x4) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000000c0)=r3) [ 589.338851][T28043] binder: BINDER_SET_CONTEXT_MGR already set [ 589.346628][T28043] binder: 28041:28043 ioctl 40046207 0 returned -16 [ 589.357976][T28050] binder_alloc: 28038: binder_alloc_buf, no vma 01:51:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x3000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000227, 0x0) 01:51:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000219, 0x0) 01:51:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 589.677706][T28078] binder: BINDER_SET_CONTEXT_MGR already set [ 589.722070][T28078] binder: 28077:28078 ioctl 40046207 0 returned -16 01:51:39 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket(0x800000002b, 0x4000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="39000000140081ae00d175040f62b04a2b546fc54c1960b89c40ebb373585806dbb7d553b4a400"/57, 0x39}], 0x1}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000140)=0xffff) setns(0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, &(0x7f00000000c0)) ioprio_get$uid(0x3, 0x0) 01:51:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = gettid() move_pages(r1, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x6, 0x62, 0x1, 0x8000, 0xffffffff00000000, 0x70081c07, 0x1, 0x0, 0xffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x2, 0x600081) sched_setparam(r1, &(0x7f0000000240)=0x401) write$P9_RSYMLINK(r2, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x0, 0x3, 0x4}}, 0x14) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0x0, 0x800, 0xfffffffffffffff7, 0xffff, 0x14, 0x7fffffff, 0x8, 0x2, 0x6, 0x100000000, 0x5}) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x0, {0x4000000000000, 0x1f, 0x1, 0x80000000}, {0x800, 0x7fffffff, 0x1, 0x2}, {0x1, 0x1}}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) write$P9_RMKNOD(r3, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x0, 0x0, 0x3}}, 0x14) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02090000b500"/16], 0x10}}, 0x0) 01:51:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000228, 0x0) 01:51:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x5000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021a, 0x0) 01:51:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 590.032373][T28090] binder: BINDER_SET_CONTEXT_MGR already set 01:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021b, 0x0) [ 590.090253][T28090] binder: 28089:28090 ioctl 40046207 0 returned -16 01:51:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x608, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3, 0x18, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 01:51:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021c, 0x0) 01:51:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000229, 0x0) [ 590.435047][T28126] binder: BINDER_SET_CONTEXT_MGR already set [ 590.501120][T28126] binder: 28125:28126 ioctl 40046207 0 returned -16 [ 590.502218][T28135] binder_alloc: 28112: binder_alloc_buf, no vma [ 590.587129][T28135] binder_transaction: 48 callbacks suppressed [ 590.587146][T28135] binder: 28125:28135 transaction failed 29189/-3, size 64-16 line 3148 [ 590.615600][T28142] binder: 28125:28142 transaction failed 29189/-22, size 64-16 line 2995 01:51:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000228, 0x0) 01:51:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021d, 0x0) 01:51:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022a, 0x0) 01:51:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000229, 0x0) [ 590.762384][T28148] binder_fixup_parent: 35 callbacks suppressed [ 590.762395][T28148] binder: 28146:28148 got transaction with invalid parent offset or type 01:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021e, 0x0) [ 590.863259][T28160] binder: BINDER_SET_CONTEXT_MGR already set [ 590.884329][T28148] binder: 28146:28148 transaction failed 29201/-22, size 64-16 line 3389 [ 590.904028][T28160] binder: 28157:28160 ioctl 40046207 0 returned -16 01:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022b, 0x0) 01:51:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000228, 0x0) 01:51:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000140)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) [ 590.961368][T28164] binder: 28157:28164 got transaction with invalid parent offset or type [ 590.980222][ T7985] binder_release_work: 49 callbacks suppressed [ 590.980230][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.010300][T28162] binder_alloc: 28146: binder_alloc_buf, no vma [ 591.035853][T28148] binder: BINDER_SET_CONTEXT_MGR already set [ 591.071714][T28162] binder: 28146:28162 transaction failed 29189/-3, size 64-16 line 3148 [ 591.119006][T28148] binder: 28146:28148 ioctl 40046207 0 returned -16 [ 591.129484][T28164] binder: transaction release 4812 bad handle 1, ret = -22 01:51:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021f, 0x0) [ 591.161309][ T2825] binder: undelivered TRANSACTION_ERROR: 29189 01:51:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 591.237029][T28164] binder: 28157:28164 transaction failed 29201/-22, size 64-16 line 3389 01:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) 01:51:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000228, 0x0) [ 591.280532][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.293285][T28164] binder: 28157:28164 got transaction with invalid parent offset or type 01:51:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000220, 0x0) [ 591.368798][T28164] binder: 28157:28164 transaction failed 29201/-22, size 64-16 line 3389 [ 591.368803][T28190] binder: BINDER_SET_CONTEXT_MGR already set [ 591.368825][T28190] binder: 28186:28190 ioctl 40046207 0 returned -16 [ 591.465722][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:51:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x48000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022d, 0x0) 01:51:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000221, 0x0) 01:51:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000100)={0x8000000, 0xd2, 0x16}) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xfffffffffffffff8) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5c2, 0x2000) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0xfffffffffffffe1b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x8108551b, &(0x7f0000000180)={0x10000003, 0x2, 0x4, 0x0, 0xfffffffffffffffd}) [ 591.669028][T28205] binder: 28201:28205 got transaction with invalid parent offset or type 01:51:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000222, 0x0) [ 591.739445][T28199] binder: 28186:28199 got transaction with invalid parent offset or type [ 591.751745][T28205] binder: 28201:28205 transaction failed 29201/-22, size 64-16 line 3389 [ 591.765966][T28199] binder: 28186:28199 transaction failed 29201/-22, size 64-16 line 3389 01:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022e, 0x0) [ 591.800042][T28190] binder: BINDER_SET_CONTEXT_MGR already set [ 591.815195][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.823969][T28199] binder: 28186:28199 got transaction with invalid parent offset or type [ 591.834023][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.848310][T28190] binder: 28186:28190 ioctl 40046207 0 returned -16 [ 591.856874][T28199] binder: 28186:28199 transaction failed 29201/-22, size 64-16 line 3389 [ 591.870932][T28218] binder_alloc: 28201: binder_alloc_buf, no vma [ 591.877510][T28205] binder: BINDER_SET_CONTEXT_MGR already set [ 591.912754][T28218] binder: 28201:28218 transaction failed 29189/-3, size 64-16 line 3148 [ 591.934350][T28205] binder: 28201:28205 ioctl 40046207 0 returned -16 [ 591.934607][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.978613][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 01:51:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000140)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 01:51:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000223, 0x0) 01:51:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022f, 0x0) 01:51:43 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r0 = socket(0x22, 0x2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 01:51:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 594.114040][T28238] binder: 28229:28238 got transaction with invalid parent offset or type [ 594.124523][T28233] binder: BINDER_SET_CONTEXT_MGR already set [ 594.141032][T28233] binder: 28232:28233 ioctl 40046207 0 returned -16 01:51:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000224, 0x0) [ 594.163230][T28233] binder: 28232:28233 got transaction with invalid parent offset or type [ 594.168842][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.197701][T28245] binder: 28229:28245 got transaction with invalid parent offset or type 01:51:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319b") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x80002002}) [ 594.221772][T28233] binder: transaction release 4835 bad handle 1, ret = -22 01:51:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000230, 0x0) [ 594.267654][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.295680][T28233] binder: BINDER_SET_CONTEXT_MGR already set 01:51:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 594.328877][T28251] binder: 28232:28251 got transaction with invalid parent offset or type [ 594.356134][T28233] binder: 28232:28233 ioctl 40046207 0 returned -16 01:51:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000225, 0x0) [ 594.392479][T28251] binder: transaction release 4842 bad handle 1, ret = -22 [ 594.551496][T28296] binder: 28273:28296 got transaction to context manager from process owning it 01:51:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) msgget$private(0x0, 0x200000000000080) r1 = dup(r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={r2, 0x2}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000340)=0x1000, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4000000020000000) socket$inet6(0xa, 0x6, 0x0) inotify_init() sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000140)=""/200) write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x1, {0x101}}, 0x18) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x20000270}}, 0x0) 01:51:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000140)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 01:51:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000231, 0x0) 01:51:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) r2 = syz_open_pts(r1, 0x0) r3 = dup2(r1, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80001, 0x0) poll(&(0x7f0000000080)=[{r3}, {r2}], 0x2, 0x0) 01:51:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000226, 0x0) 01:51:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x68000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 595.067517][T28384] binder: BINDER_SET_CONTEXT_MGR already set [ 595.099860][T28384] binder: 28378:28384 ioctl 40046207 0 returned -16 01:51:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 595.122683][T28384] binder: BINDER_SET_CONTEXT_MGR already set [ 595.132948][T28384] binder: 28378:28384 ioctl 40046207 0 returned -16 01:51:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000227, 0x0) 01:51:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c6d6ace970ef913, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000640)=""/42, 0x2a) 01:51:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000232, 0x0) [ 595.306097][T28399] binder: BINDER_SET_CONTEXT_MGR already set [ 595.372773][T28399] binder: 28398:28399 ioctl 40046207 0 returned -16 [ 595.380351][T28406] binder: BINDER_SET_CONTEXT_MGR already set 01:51:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000280)=0xff) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "1c51f1e150a144b076f9510cb0ce9a02d7ec8f"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x100, 0x0) [ 595.425436][T28406] binder: 28402:28406 ioctl 40046207 0 returned -16 [ 595.487697][T28406] binder: BINDER_SET_CONTEXT_MGR already set [ 595.534427][T28406] binder: 28402:28406 ioctl 40046207 0 returned -16 01:51:47 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [{0x8, 0xfffffffffffffffe}]}, 0x2c, 0x0) 01:51:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000228, 0x0) 01:51:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000233, 0x0) 01:51:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x74000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x3, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfff, 0x305000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000, 0x4) [ 598.134286][T28436] dccp_v6_rcv: dropped packet with invalid checksum [ 598.156016][T28437] binder_fixup_parent: 9 callbacks suppressed [ 598.156030][T28437] binder: 28435:28437 got transaction with invalid parent offset or type [ 598.174204][T28428] binder: BINDER_SET_CONTEXT_MGR already set 01:51:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000229, 0x0) [ 598.177406][T28436] dccp_v6_rcv: dropped packet with invalid checksum [ 598.199599][T28428] binder: 28427:28428 ioctl 40046207 0 returned -16 [ 598.200297][T28437] binder_transaction: 14 callbacks suppressed [ 598.200316][T28437] binder: 28435:28437 transaction failed 29201/-22, size 64-16 line 3389 01:51:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000234, 0x0) 01:51:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000001a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1060}, {&(0x7f0000000400)=""/120, 0x12ac}, {&(0x7f00000001c0)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x251}, {&(0x7f0000000540)=""/154, 0xae}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xfffffffffffffdcc}}], 0x4000000000001de, 0xa, &(0x7f0000003700)={0x77359400}) r1 = dup(r0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/35) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000240)) [ 598.261889][T28428] binder: 28427:28428 got transaction with invalid parent offset or type [ 598.294272][ T2825] binder_release_work: 12 callbacks suppressed [ 598.294280][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:51:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) r2 = dup(r0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000100)={0x7cc, 0x8}) pipe(&(0x7f0000000040)) close(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x7ff, 0x7, r3}) pipe(&(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x1, 0x40000) tee(r0, r1, 0x104, 0xffffffffffffffff) [ 598.313728][T28437] binder: BINDER_SET_CONTEXT_MGR already set [ 598.331280][T28428] binder: 28427:28428 transaction failed 29201/-22, size 64-16 line 3389 [ 598.351248][T28437] binder: 28435:28437 ioctl 40046207 0 returned -16 01:51:47 executing program 0: r0 = mq_open(&(0x7f00000012c0)='eth0\x00\x10^\xfc4P\xb77\xa3\xe4\xbdE\x16\xe30d\xc3n\xa0\x8f\xf9\xb1\xb0\x8b\xc5D\xec\x14k~\xe9d>z8\xf2\xe8\xc0\x91\xd2\xd6]>\xf8\xa2b\xa30x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) read$rfkill(r0, &(0x7f0000000280), 0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000300)={0x4, 0x0, 0x10000, 0x40}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000340)={0x8000, r4, 0x0, 0x81}) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000380)=0x3, 0x4) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @remote}, 0x20, 0x0, 0x0, 0x0, 0x401, &(0x7f00000003c0)='bcsf0\x00', 0x8, 0xcf16}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000480)="c4e17e7fb424b58a000066b864008ed80fd40d763af0b8640fc75cca7dea9b52000030010f18cfc4c34d4bbd000000000a0f001a0f01cf0f01b127550632", 0x3e}], 0x1, 0x4, &(0x7f0000000500), 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000540)={0x6, 0x9}) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@gettfilter={0x54, 0x2e, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, r2, {0xe, 0x3}, {0xf, 0xffff}}, [{0x8, 0xb, 0x107}, {0x8, 0xb, 0x7fba}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) sendto$packet(r3, &(0x7f00000006c0)="fc3fce0e5725f3f1708bce0e4a5c4af28a7640c177f10604f5f3c81e8cdeee96c4bde716447414dadb1693a3f11192795896d59989389eca4d664055fd23af8542d8c5b38937cfea7b1f62a257c433e81ac341fe303a932bdae5f50a9d8e9b53ad66ab895a03e0790ca409c8c3c39ce580a23f527d4ebac4172a8891b710da1db180e97ca97e9ff315f0eba1a7b2bd3e4d0fb71b886864a680ba2e00d55df766e01b8d2ec7d7540e9713d336d930e60fe3d4ed3c8450e5245308c1cb0e7759db28e4540286d09138a6a962849eed8131d22257ab09", 0xd5, 0x40, &(0x7f00000007c0)={0x11, 0xf5, r2, 0x1, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000800)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000840)=0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000880)={0x1f, 0x4, 0x4, 0xffffffff00000000, 0x81, 0x96df, 0x8000, 0x401, r5}, 0x20) fsetxattr$security_evm(r1, &(0x7f00000008c0)='security.evm\x00', &(0x7f0000000900)=@sha1={0x1, "964e5f6189369140c6a85f15907a9be5ca4e9d87"}, 0x15, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000940)={0x9}, 0x1) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000980)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000009c0)) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000a00)=0x3) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000a40)={'veth0_to_bridge\x00', {0x2, 0x4e22, @loopback}}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000a80)='trusted.overlay.redirect\x00', &(0x7f0000000ac0)='./file0\x00', 0x8, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000d00)={0xc4, 0x8, 0xffff, 0xb5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000d80)={0x0, 0x6, 0x2, 0x80, &(0x7f0000ff6000/0x2000)=nil, 0x7}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000dc0)={@multicast1, @multicast2, 0x1, 0x6, [@rand_addr=0x7, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @loopback, @broadcast, @rand_addr=0x1f]}, 0x28) ioctl$TIOCNXCL(r3, 0x540d) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xadd, 0x8001, 0x8]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xd1) 01:51:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022b, 0x0) [ 598.569293][T28477] binder: 28476:28477 got transaction with invalid parent offset or type 01:51:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x140, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x4e23, 0x4e20, 0x8}}}}}}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 598.659771][T28477] binder: 28476:28477 transaction failed 29201/-22, size 64-16 line 3389 [ 598.672495][T28482] binder: BINDER_SET_CONTEXT_MGR already set 01:51:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000236, 0x0) [ 598.716315][T28482] binder: 28480:28482 ioctl 40046207 0 returned -16 [ 598.727519][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.736162][T28477] binder: BINDER_SET_CONTEXT_MGR already set 01:51:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffa, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4) 01:51:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) 01:51:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_mtu(r1, 0x0, 0x32, &(0x7f0000000200), 0x4) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000180)) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000240)=""/215) [ 598.763727][T28477] binder: 28476:28477 ioctl 40046207 0 returned -16 [ 598.763998][T28494] binder: 28480:28494 transaction failed 29189/-22, size 64-16 line 2995 [ 598.791266][T28492] binder: 28476:28492 transaction failed 29189/-22, size 64-16 line 2995 [ 598.805970][ T2825] binder: undelivered TRANSACTION_ERROR: 29189 01:51:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x100000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 598.874718][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.882653][T28494] binder: 28480:28494 got transaction with invalid parent offset or type 01:51:48 executing program 0: clone(0x82102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xaaeb, 0xb, 0x3, "15a3f84ada481ff14784961f5f9cc9c9c1c478a00b3325ff944cf035a96bbb97", 0x47555a5a}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') exit(0x0) getdents64(r1, &(0x7f0000000100)=""/196, 0xc4) 01:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022d, 0x0) 01:51:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:51:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 598.932117][T28494] binder: 28480:28494 transaction failed 29201/-22, size 64-16 line 3389 [ 598.944992][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.954544][T28513] binder: BINDER_SET_CONTEXT_MGR already set [ 598.970808][T28513] binder: 28512:28513 ioctl 40046207 0 returned -16 [ 599.054157][T28527] binder: 28526:28527 got transaction with invalid parent offset or type [ 599.063056][T28513] binder: 28512:28513 got transaction with invalid parent offset or type 01:51:48 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x400) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) mmap(&(0x7f0000702000/0x2000)=nil, 0x8800000100000000, 0x0, 0x10, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x364, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff361}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2400000000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff7f}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xf0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr="07ecd42c56e017cf30dea9c8ffba20a8", 0xfff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @empty, 0xb8}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x400}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc117}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffb20d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc6}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4be}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x599a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000040)) [ 599.097610][T28527] binder: 28526:28527 transaction failed 29201/-22, size 64-16 line 3389 [ 599.112507][T28513] binder: 28512:28513 transaction failed 29201/-22, size 64-16 line 3389 [ 599.124938][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:51:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0000336e97eda6055156598d871a1de182721b62554ca3ba15129ba494f3d17fed82"], 0x8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x92) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f00000001c0)="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", &(0x7f0000000040)=""/15}, 0x18) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000011c0)=""/229) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x0) [ 599.144381][T28513] binder: BINDER_SET_CONTEXT_MGR already set 01:51:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000238, 0x0) 01:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022e, 0x0) [ 599.189191][T28530] binder_alloc: 28526: binder_alloc_buf, no vma [ 599.199148][T28513] binder: 28512:28513 ioctl 40046207 0 returned -16 [ 599.230780][T28527] binder: BINDER_SET_CONTEXT_MGR already set [ 599.254574][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:51:48 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8b53, 0x64000) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000001180)={0x9, 0x4, 0xfffffffffffffffa}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x4000) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x1015, 0x6, 0x8, "f42792ebb34075e0f9663a4c03df7f64", "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"}, 0x1015, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030207031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) recvfrom(r2, 0x0, 0x0, 0x400, 0x0, 0x0) [ 599.281032][T28527] binder: 28526:28527 ioctl 40046207 0 returned -16 01:51:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x200000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:48 executing program 1: accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000009680)=[{{&(0x7f0000000340)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000bc0)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff62}}], 0x2, 0x0) 01:51:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000239, 0x0) 01:51:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022f, 0x0) [ 599.434607][T28558] binder: 28557:28558 got transaction with invalid parent offset or type 01:51:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x2, 0x1000000000000805, 0x84) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0xea0b}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="09b9d489e0c0132789e517b971a300", 0xf}], 0x1}, 0x0) r2 = msgget$private(0x0, 0x608) msgrcv(r2, &(0x7f0000000240)={0x0, ""/239}, 0xf7, 0x3, 0x2800) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0x20, 0x9}) close(r1) [ 599.503307][T28558] binder: BINDER_SET_CONTEXT_MGR already set 01:51:48 executing program 1: mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x51, &(0x7f0000000140)=0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x2f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x18) chdir(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000080)) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) removexattr(&(0x7f0000000340)='./file0/file0\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), &(0x7f0000000580)=[&(0x7f00000003c0)='ramfs\x00', &(0x7f0000000400)='\'em0)vmnet0\x00', &(0x7f0000000440)='\'\x00', &(0x7f00000004c0)='\'!wlan1user\x03@vboxnet1bdev#mime_type.@keyring\x00', &(0x7f00000005c0)='ramfs\x00', &(0x7f0000000540)='ramfs\x00']) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0x0, 0x0}, 0x10) [ 599.577342][T28558] binder: 28557:28558 ioctl 40046207 0 returned -16 [ 599.583630][T28574] binder: 28572:28574 got transaction with invalid parent offset or type 01:51:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023a, 0x0) 01:51:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x300000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:48 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x40000, 0x0) 01:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000230, 0x0) [ 599.666776][T28574] binder: BINDER_SET_CONTEXT_MGR already set [ 599.692034][T28574] binder: 28572:28574 ioctl 40046207 0 returned -16 01:51:48 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={[], 0x40, 0x68, 0x2, 0x0, 0x80000001, 0xf000, 0x5000, [], 0x4}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x27) sendto$unix(r0, 0x0, 0x0, 0x7ff9, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) [ 599.759763][T28589] binder: 28588:28589 got transaction with invalid parent offset or type [ 599.794309][T28596] binder: 28588:28596 got transaction with invalid parent offset or type 01:51:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023b, 0x0) 01:51:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000231, 0x0) 01:51:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x4000000000000003, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="17"]) ioctl(r0, 0x7fff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 599.964786][T28609] binder: BINDER_SET_CONTEXT_MGR already set 01:51:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x262) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) timerfd_gettime(r1, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') sendfile(r0, r2, 0x0, 0x88002) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) getsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ppoll(&(0x7f0000000400)=[{r0}, {r2, 0x1}], 0x2, 0x0, 0x0, 0x0) 01:51:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023c, 0x0) [ 600.009881][T28609] binder: 28604:28609 ioctl 40046207 0 returned -16 01:51:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x500000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000232, 0x0) 01:51:49 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) flock(r0, 0x0) bind(r0, &(0x7f0000000500)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x466400, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TUNSETLINK(r1, 0x400454cd, 0x334) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="070100000d0000000000000003000100000000ea0000000028e804b2268a03f8bb32ff7ee8f11c94c009dfccbc01e1c833ffff00d124b98e"], 0x38) 01:51:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023d, 0x0) 01:51:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x600000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000233, 0x0) [ 600.358512][T28650] binder: BINDER_SET_CONTEXT_MGR already set [ 600.393278][T28650] binder: 28649:28650 ioctl 40046207 0 returned -16 01:51:49 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x680202) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = getgid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0xb8, 0x0, 0x7, [{{0x1, 0x2, 0x4, 0x5, 0x40, 0x40a0, {0x2, 0x5, 0x0, 0x10001, 0x3, 0x2, 0xffffffffbb3a2073, 0x101, 0xff, 0x8, 0x3, r1, r2, 0x200, 0x1}}, {0x3, 0x9, 0x9, 0x5, 'mime_type'}}]}, 0xb8) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) modify_ldt$write2(0x11, &(0x7f00000000c0), 0x10) 01:51:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:49 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0x4e, 0x0, 0x0, 0x0, 0x8, 0xffffff84}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000280)={0x9, 0x8000, 0x1, 0x400, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, &(0x7f0000000340)=0x8) write$USERIO_CMD_REGISTER(r1, &(0x7f0000004300)={0x0, 0x100}, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000001640)={0x0, 0x6, 0x20}, &(0x7f0000001680)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000016c0)={0x0, 0x5}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast1, 0x8}}, [0xfffffffffffffffd, 0x1, 0x8, 0x2, 0x400, 0x10001, 0x8, 0x67122325, 0xfffffffffffffae6, 0x32c, 0x6, 0xffff, 0x3, 0x80000000, 0x5f6]}, &(0x7f0000001840)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001880)={0x0, 0x0, 0x7, 0xa7e, 0x6, 0x2}, &(0x7f00000018c0)=0x14) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000002080)={0x0, 0x3ff, 0x9, 0x8000, 0x10000, 0x800, 0x45a, 0x52, {0x0, @in6={{0xa, 0x4e23, 0xff, @ipv4={[], [], @rand_addr=0x800}, 0xff}}, 0x78c66efb, 0xb97a, 0x4, 0x5, 0x7}}, &(0x7f0000002140)=0xb0) sendmmsg$inet_sctp(r1, &(0x7f0000004800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="e1d805c16e853db3901012755f767d6f2e20be0b0f2b552e233e93cea1e108b8d35edecb905b0d9da76968d2d29a553d511ba39b976fe6204e6ed1e2edd8277440d016ff30bb5b75f894b29d08481232813d8b04f958fafb3a8e2584e5b1f5f2cf03f30c6845e70c16b34ab6e8540ec689dd87dd905643890d568be0f4b91060e907822cf8a33cb3e770ee5df50c77af96bd6f85e5936c596b85768350482b9d182f06ad8636f0286d0af1cc93dcc0a5ee9efae449f399ce86f0a7623218d5ea51da952fe6d07c08213066ccd47936805e", 0xd1}, {&(0x7f00000001c0)="3f352981dc99fba03825550463da2316e37c0f6e9786d04610f99d428e6c756dc4c5d8727ef741", 0x27}, {&(0x7f0000000200)="ada4229dc16901a29723827a261329ab5af463ce3a682b32ef64619be60cb583aa339a7f", 0x24}], 0x3, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0xffff, 0x20e, 0x7, 0x200, 0x6, 0x2, 0x8, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x24}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x45, 0x8000, 0x3, 0x7, 0x8001, 0x1, 0x7, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x3, 0x4, 0x4, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xfff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x110, 0x10}, {&(0x7f00000004c0)=@in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @rand_addr=0xc790}, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000500)="2756e23e54c58f098518bfada53a7c9ab34667d705156e873f9dec992ed68fbc356f2b3863999cc5", 0x28}, {&(0x7f0000000540)="56475182c7b3ef557ca337f71b1ece642c77694b1926c112713d8e319eb68a74db55630240fd28951541887f7fb2a17fe2f4b2fe469b103f3b619275f2ed2e904194fca38567fd36a3518d5a83148e6bfd92430f562fe01bf389a705049ebe7744ff700f93dcdd61416305dffd7e46a0e2faadc8", 0x74}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="c538acb5bd85b317e5d49b9c04480fc8ec3e77dd249c7318c5cfbf57f74ccbdfeacddde5dd2447b4", 0x28}], 0x4, &(0x7f0000001900)=[@init={0x18, 0x84, 0x0, {0x1, 0x2, 0x3ff, 0x70bc}}, @init={0x18, 0x84, 0x0, {0x1, 0x9, 0x10001}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x3f35, 0x0, 0x10000, 0x4, 0x6, 0x9, 0x7, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x0, 0x8002, 0x9, 0xffff, 0x9, 0x2, 0x9, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x10001, 0xf, 0x5, 0x8001, r6}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x200}}, @sndinfo={0x20, 0x84, 0x2, {0xe584, 0x4, 0xffff, 0x20, r7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}], 0x120, 0x4000}, {&(0x7f0000001a40)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001a80)="66e56e1c09033f5383a0b6892fcf916e4159122c66c152490d93a52d1b308473d5c5c06b46415a3fbe270769b7773af47a511fd59d8879d97462a59eae0cf9200d9e5a90827d38276718b6141f164ae361d618b66cdb3f46469169aea8534e7207d12e3606d2588e1d23a0c7f569bde3e41b2565900b96e94e471541d9f38b6cd88cdff00fe07a0f64731ebf0ddfc224932789533016e78b61d462691e2a3398118642681d8a85765932cd5c6500c33033c64ad136d6ae5a04604ae220", 0xbd}, {&(0x7f0000001b40)="39cf24d542945237899a9c0f0da36e11ab1cb8ff061e6a96dcc3f3fc9a6b92840b69b31bb05a3987bcde5acee20c7fbdb1d652619abf937d1e8b1ed72ba9a266ff6e025bf9e2af341b72eda03a7f4428b824c2ca332cf6e7d19c699be66ac0bdef325b65c7a8aa107ee79f14572e1b69481fc8d288b03676e92675069d7467a1d0ab6f2795f8e2feab7deb0a80ee6086311319075beaa856f7614cb0f630b6177ec24c749c41513d6fdd1616b1045c663d5384ec09d2c1a4b836faf83b029d8fe0d6329756ef57ce67a17e2e09a787df30", 0xd1}, {&(0x7f0000001c40)="240e97051f969eeeb57cef054ed176ec9c037dc8853571dee8b263431548e008773117d2", 0x24}, {&(0x7f0000001c80)="4029fe9f7927546c2ee65d1c03dfc72785aae910aeadc4d5528eefa0e4a972251a1e5c426d1b1ec11dda7528146a9175fa877316a4dfbb08b7bd8101e52c530bafdc55bb91f09e388c74f07be4fe136d4525d846fe730ee1d655391f7df13fb2b3286d05192c9ff35618eab026ae8472e44bd2", 0x73}], 0x4, &(0x7f0000001d40)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @multicast2}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x58, 0x40}, {&(0x7f0000001dc0)=@in6={0xa, 0x4e20, 0xff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffffffb}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001e00)="9f2f220b9a3d2cf7adea7b80879ef77190eeb336ee8a5ed1140a31473677312bfebecb2d63127fcbbf9fb16f76f718e1ffabcf1fcfc8cc300d3f2d3a02c8957d8ac33ea25c35ff1ed5aabe04ff6050dc6688e2c8dc4ac359eee31a3236246b15437fe6dacfc034f5aefd69", 0x6b}, {&(0x7f0000001e80)="84954cbafd397c476b4bf50901793555e83b8cb5e53209fe0557c73133fae181d594a572f134c20189e9ccfb9324bb0c272a2224254242f85a17faaf71b09f85ee583a6f6e62224a7f4448f58ee450a980cd98e4246aa870a9178d4ebf56967eb035e49ff97483818ceaa2800d4fde56ba0ceb5b9f92db2a969aed7ed6d980bad16e065f7b1d5acae81c990fb154903e3794f724259a29f1a19e3680468cd2a765ec2e69624e02820fc96048d0e540448d2accf5b65ce1fe09467129615f639fc051f4d1477b64dafca641c63d26d717c7c4502740c802cd73491c17c01c9b88f9", 0xe1}, {&(0x7f0000001f80)="1e284ab32d606b86a0eebb17de1329da2424191ab9a17004951f8e9d61be993088b99c74786af0a6386b4776c15ac7e410ec904baf0dca2313a80115851bf6b1d9f3ca0f1d9bf6b6e7b0eae6cfa70a910ef5b18a86bf5babe34688fe21700b2a9b575914068f8a3ad86f4f18ac43c46956cb7f262a466bcea077f5ff5745a3ea73130b8c1a1b3da86d1c98049acff602796f", 0x92}], 0x3, &(0x7f0000002180)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x1, 0x8001, 0x100000001, r8}}], 0x20, 0x40081}, {&(0x7f00000021c0)=@in6={0xa, 0x4e24, 0x497, @loopback, 0x7}, 0x1c, &(0x7f0000004740)=[{&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000003200)="302493bca7ac9e87613e382a132d92299231394a60e14e04be3fd576198ac413ba1d", 0x22}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000004240)="acc389bd66fb6d6fcd41b6ac393eb48407035d8b0f5d1d66b523cfbf2a08e6d4bd13192e020403a7de132aa1c2a6cba34465045d6dbbdf0bf4ff4786fb83c377b8d6055dfc4cbda191bc6441ba4b25195579cc36210c9bbabce73fea6bbdbc0face84a78689e3fc2f0bfdd81b1d7fe99fa5949a2bad6795c658a6f06e7022d8860ac3e43c375862356e7f6e6c11a0ba7718b18ab2f762dab5a94fb91c1c520e8ae28ef47cfbb51afc8689d84fb2df57bace3d2ce6e5c", 0xb6}, {&(0x7f0000004300)}, {&(0x7f0000004340)="e6bd6d00b32076ad09b8a1ebd4cae96917fe69a6ee7b1f20dcd7f8caeeda96156b6707821d4337b93565649e2f2d88ab4eda9ce2a0f89334c1639fe17098af837ff96c30d7a4e971608ab004bc9a08d6e49e9fe5ac0ef05da3844fb3f4527bb894389407f0215a7db52e4da37b3af8787b3a564408592948c5a44df1ccc41fd477714b1652aa1bf757af7a8662", 0x8d}, {&(0x7f0000004400)="cfbb6872f58a6d2a75edec10cf84a9f6d59cc03e6246fdda213b34c5a4fdbddb8c74e5db428ec5b1bf9c2582c750901ac673aa4f4417327975a8a3a0471e4d5a2c46752cb12834814ca07cad1d369bbed81e601adaa6502b2b1c4389f695daa4179d81a2f7758749e492c8a563a02fe010e8797d1a39e679a6b2c4a38e60122f19efcb97a1c07cac006165bec511eab9b68731df84868a82717b096c2adeab901236cf6330d9569fa3c0cd3c36e7910e76b80904ba4de3c79de0c24dfbbb864727cbcdabfdc4aed7373cdbdb0beac9a7", 0xd0}, {&(0x7f0000004500)="faffd22cf810f46f2507650a9e65d4c9e215ee3f3b0c25b1cbaf4e9a8bfc96493d30eb8631fbc96f4c63e6542bef2e85926ffbfe181b54136f887272a849127214357e47d425e25cba518631e2358921c741c0d10c383ea1eae873bce8e47349a2ee5cbcc8b5c2440396f2f252c19117eeb54975a03554b4979f8fa548ddefbd2d03b68630cd09410d6a82785609fd38b694a7dc7137c6d6ff71367f4661d4ac2e8b41edefe72455b8644021e0b70f8274d664dca050200e292dfe67f93147772b43e00440228785bba5bbf8acd4c12ea36b9c32b9f89f276400256f6c55331e7e8c2020265bf47096a5d4", 0xeb}, {&(0x7f0000004600)="6b34b6e88c1c51244d08f6c67d486c0494cc81cb7472b88fd828afa5f553e1a6631dda761ef208cf09bf5e009e7b75066c56e6254da775a070c4e0", 0x3b}, {&(0x7f0000004640)="e9659879ea35c41f47949aaadfe51269d3255c5e5c36586c5fa3cc58d00a91485746e8f71e2325dbeb597496510ccd3ec51bca9111e89b3e863b86e21c24e0eb37223bb752fc18a5826c02b411c7b5c769c40ca86a99d041cc50afdb168d735f74044661b2b771e0fb1eba1a119213784df3c93c9bfd9182fdad6c8b7afd2e120bbb47afefbd50f3ad8c0ca61d09f55be854625fc68b09de5148f3c055487b599340a6742954786150e09e35a2f24079d0cb35dc0949bbc85dd63b291df9dbca860ad7d615f3136905b92399d336d4b47c75b4e84ef0ce06c203e8f09757d8ac625cd02c6e4248207319f597edc190ae0968d743a26000a063", 0xf9}], 0xa, 0x0, 0x0, 0x4000000}], 0x5, 0x10) 01:51:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x700000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 600.535857][T28665] binder: BINDER_SET_CONTEXT_MGR already set 01:51:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) ftruncate(r1, 0x8000) r2 = accept(r1, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000070000003268500f3f457b9dc311c561073b1a5a320fe853ebdda51c59936371be87cd75973988e7653f57eaec3cdbecb943d53085a2142ebcca33c3dfc6be3910332cfe85d7ffa6193a66c458c200000000"], 0x14}}, 0x20008080) recvfrom$unix(r2, 0x0, 0xffffffffffffffa1, 0x2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 01:51:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023e, 0x0) 01:51:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000234, 0x0) [ 600.609999][T28665] binder: 28664:28665 ioctl 40046207 0 returned -16 [ 600.661331][T28665] binder: BINDER_SET_CONTEXT_MGR already set 01:51:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x280802, 0x0) fcntl$addseals(r0, 0x409, 0x2) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, r2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x3f, @local, 0x4e21, 0x2, 'sh\x00', 0x4, 0x3, 0x27}, 0x2c) syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x10100) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x9, 0x0, 0x0, 0x6, 0x0, 0x4, 0x20004, 0x2, 0x3, 0x5, 0x1, 0x0, 0x10000, 0x0, 0x208001, 0x2b96, 0x3, 0x200, 0x7f, 0x90e0, 0x1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x9, 0x9, 0x49, 0xf76, 0x0, 0x1f, 0x0, 0x9, 0x1d8, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x20, 0xfffffffffffffff7, 0x8, 0x0, 0x1ff, 0xda5a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) ftruncate(r3, 0xffffffff) r4 = socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @local, @remote}, &(0x7f0000001b00)=0xc) connect$can_bcm(r2, &(0x7f0000001b40)={0x1d, r5}, 0x34243ed2286cd2df) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10e) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000003c0), 0xed5f0dd4, 0x1650, 0x0, 0x184) [ 600.708184][T28665] binder: 28664:28665 ioctl 40046207 0 returned -16 01:51:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023f, 0x0) 01:51:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x280802, 0x0) fcntl$addseals(r0, 0x409, 0x2) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, r2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x3f, @local, 0x4e21, 0x2, 'sh\x00', 0x4, 0x3, 0x27}, 0x2c) syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x10100) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x9, 0x0, 0x0, 0x6, 0x0, 0x4, 0x20004, 0x2, 0x3, 0x5, 0x1, 0x0, 0x10000, 0x0, 0x208001, 0x2b96, 0x3, 0x200, 0x7f, 0x90e0, 0x1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x9, 0x9, 0x49, 0xf76, 0x0, 0x1f, 0x0, 0x9, 0x1d8, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x20, 0xfffffffffffffff7, 0x8, 0x0, 0x1ff, 0xda5a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) ftruncate(r3, 0xffffffff) r4 = socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @local, @remote}, &(0x7f0000001b00)=0xc) connect$can_bcm(r2, &(0x7f0000001b40)={0x1d, r5}, 0x34243ed2286cd2df) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10e) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000003c0), 0xed5f0dd4, 0x1650, 0x0, 0x184) [ 600.890601][T28698] binder: BINDER_SET_CONTEXT_MGR already set 01:51:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x18) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) wait4(r2, 0x0, 0x3, &(0x7f0000000200)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'bond_snave_1\x00', {0x2, 0x4e23, @loopback}}) [ 600.949396][T28698] binder: 28697:28698 ioctl 40046207 0 returned -16 01:51:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000235, 0x0) 01:51:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000236, 0x0) [ 601.202816][T28728] binder: BINDER_SET_CONTEXT_MGR already set 01:51:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000240, 0x0) [ 601.253520][T28728] binder: 28727:28728 ioctl 40046207 0 returned -16 01:51:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @rand_addr="b04e4f5fbf44521bd708309769e76ca3", 0x400}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x1}, 0x8) r3 = socket$inet6(0xa, 0x801, 0x0) dup2(r3, r0) [ 601.449370][T28742] binder: BINDER_SET_CONTEXT_MGR already set [ 601.526692][T28742] binder: 28740:28742 ioctl 40046207 0 returned -16 01:51:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:50 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x3, 0x4) write$binfmt_elf64(r0, &(0x7f0000004480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_open_procfs(0x0, &(0x7f0000272000)) 01:51:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x280802, 0x0) fcntl$addseals(r0, 0x409, 0x2) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, r2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x3f, @local, 0x4e21, 0x2, 'sh\x00', 0x4, 0x3, 0x27}, 0x2c) syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x10100) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x9, 0x0, 0x0, 0x6, 0x0, 0x4, 0x20004, 0x2, 0x3, 0x5, 0x1, 0x0, 0x10000, 0x0, 0x208001, 0x2b96, 0x3, 0x200, 0x7f, 0x90e0, 0x1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x9, 0x9, 0x49, 0xf76, 0x0, 0x1f, 0x0, 0x9, 0x1d8, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x20, 0xfffffffffffffff7, 0x8, 0x0, 0x1ff, 0xda5a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) ftruncate(r3, 0xffffffff) r4 = socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @local, @remote}, &(0x7f0000001b00)=0xc) connect$can_bcm(r2, &(0x7f0000001b40)={0x1d, r5}, 0x34243ed2286cd2df) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10e) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000003c0), 0xed5f0dd4, 0x1650, 0x0, 0x184) 01:51:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:51:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e24}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000002c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x88) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) listen(r1, 0xfffffffffffffffe) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x2, 0x7000, 0x4, 0x6, 0xffffffffffffffff, 0x1000, 0x81, 0x9, 0x6, 0x9, 0x8001, 0x1}, {0x3000, 0x14000, 0xa, 0xc0b, 0xfff, 0x2, 0x8, 0x7, 0x6, 0x100000000, 0x80000001, 0x2}, {0x0, 0x7000, 0x0, 0x0, 0xdb, 0x3d73, 0x2, 0x10000, 0x80, 0x3, 0x80, 0x8}, {0xd000, 0xd000, 0x10, 0x8, 0x4, 0x1, 0x0, 0x10001, 0x5, 0x1, 0x7367, 0x2}, {0x103004, 0xf000, 0xf, 0x0, 0x1, 0x2, 0x81, 0x8, 0xffffffffffffff01, 0x95, 0x3f, 0x3e3d}, {0x3000, 0xf000, 0x8, 0x8, 0x6, 0x5, 0x7fff, 0x40, 0x40, 0x2, 0xffffffffffffffff, 0x80000001}, {0x0, 0x5000, 0xf, 0x63, 0x200, 0x8, 0x4, 0x4, 0x6, 0x6, 0x80000001, 0xc16}, {0x5000, 0x0, 0x0, 0x7, 0x0, 0x9, 0x10001, 0xfffffffffffffffa, 0x5, 0x7, 0x2f, 0x6}, {0x1000}, {0xf000, 0x2}, 0x2, 0x0, 0x0, 0x200000, 0x0, 0x1801, 0x0, [0x200, 0x10000, 0x7fffffff, 0x6032542f]}) setsockopt$inet6_int(r4, 0x29, 0x6, &(0x7f0000000000), 0x4) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) 01:51:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000241, 0x0) 01:51:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 601.913775][T28779] binder: BINDER_SET_CONTEXT_MGR already set 01:51:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000238, 0x0) [ 601.975276][T28779] binder: 28775:28779 ioctl 40046207 0 returned -16 01:51:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000242, 0x0) 01:51:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0xc080) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000002c0)=""/192) mq_unlink(&(0x7f0000000080)='\x00') write$eventfd(r0, &(0x7f0000000000)=0x3, 0x8) 01:51:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 602.254411][T28806] binder: 28805:28806 got transaction with invalid offsets size, 3 [ 602.349911][T28806] binder: BINDER_SET_CONTEXT_MGR already set [ 602.388960][T28816] binder: 28805:28816 got transaction with invalid offsets size, 3 [ 602.458774][T28806] binder: 28805:28806 ioctl 40046207 0 returned -16 01:51:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x280802, 0x0) fcntl$addseals(r0, 0x409, 0x2) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, r2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x3f, @local, 0x4e21, 0x2, 'sh\x00', 0x4, 0x3, 0x27}, 0x2c) syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x10100) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x9, 0x0, 0x0, 0x6, 0x0, 0x4, 0x20004, 0x2, 0x3, 0x5, 0x1, 0x0, 0x10000, 0x0, 0x208001, 0x2b96, 0x3, 0x200, 0x7f, 0x90e0, 0x1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x9, 0x9, 0x49, 0xf76, 0x0, 0x1f, 0x0, 0x9, 0x1d8, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x20, 0xfffffffffffffff7, 0x8, 0x0, 0x1ff, 0xda5a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) ftruncate(r3, 0xffffffff) r4 = socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @local, @remote}, &(0x7f0000001b00)=0xc) connect$can_bcm(r2, &(0x7f0000001b40)={0x1d, r5}, 0x34243ed2286cd2df) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10e) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000003c0), 0xed5f0dd4, 0x1650, 0x0, 0x184) 01:51:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000243, 0x0) 01:51:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000239, 0x0) 01:51:51 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x8000, 0x6, [], &(0x7f0000000040)=0x6}) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 01:51:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b704d647320a57923f6240e25a2f0e402c593b1d83ac0c1c0a6aa1d946800914960fa3cd9f3d38efc57c73a3b82cdaeef5fe3e69c19efede93ed77ce18c2fc5b4435ee1cc03a94c8e9edd87fab8a0ef602ac32415f2e05d02e15da8f33dcbf2ff616e0d3be03c8bba7520ffceb673a4c6b5475e25d5115996dc2a91e0f38c8ed0670d13a5580ca418"], 0x6) 01:51:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000244, 0x0) 01:51:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x9, 0x800) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0xffffffffffffff70, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='v5\x00p\x85\x86\x12\xfa\xce\xe9of\xb2\xb3uz0\x00K\x1a\xde:\xa3v\xdd\x84F\xa0\x11\x8ev\xb8\xb4\xe8\xde\xca\xa5y;R\x99\xcb\x11D;\x86\xed\xdc\x00\xaf`\xd3%\x02\x00\xae9\xfc\xab\"\xe5\x13\xdb\xd7\x0eD\xd8\xaf\bL`\xe6%\x03\x9f\xc0\xecLy*\xa3\xfc', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x4, @mcast2, 0x100}], 0x1c) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000640)={0x0, 0x70, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8dd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f2, 0x0, 0xa9, 0x7ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x34, 0x4) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) recvmsg$kcm(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='v5\x00p\x85\x86\x12\xfa\xce\xe9of\xb2\xb3uz0\x00K\x1a\xde:\xa3v\xdd\x84F\xa0\x11\x8ev\xb8\xb4\xe8\xde\xca\xa5y;R\x99\xcb\x11D;\x86\xed\xdc\x00\xaf`\xd3%\x02\x00\xae9\xfc\xab\"\xe5\x13\xdb\xd7\x0eD\xd8\xaf\bL`\xe6%\x03\x9f\xc0\xecLy*\xa3\xfc') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x80000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0xb}, @remote, @rand_addr=0x3}, 0xc) 01:51:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023a, 0x0) 01:51:51 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000660007081dfffd940101830020200a000900000000000004000000000d00ff7e", 0xa}], 0x1}, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) setuid(r1) flock(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080), 0x4) [ 602.752174][T28853] binder: BINDER_SET_CONTEXT_MGR already set 01:51:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 602.827351][T28853] binder: 28852:28853 ioctl 40046207 0 returned -16 [ 602.827390][T28859] binder: 28852:28859 got transaction with invalid offsets size, 4 01:51:52 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x80000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x8, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$setsig(r1, 0xa, 0x33) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r4 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000300)='user\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r5, 0x8, 0x3ff}, &(0x7f0000000380)=0xc) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r4, r2, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) signalfd(r2, 0x0, 0x0) [ 602.966171][T28866] binder: 28852:28866 got transaction with invalid offsets size, 4 [ 602.967053][T28859] binder: BINDER_SET_CONTEXT_MGR already set 01:51:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000245, 0x0) 01:51:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:52 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x110, 0x2, 0x0, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80012000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x702}]}, 0x58}}, 0x44) creat(&(0x7f0000000080)='./file0\x00', 0x110) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_NMI(r3, 0xae9a) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 01:51:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023b, 0x0) [ 603.061216][T28859] binder: 28852:28859 ioctl 40046207 0 returned -16 01:51:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000246, 0x0) [ 603.300886][T28891] binder: 28889:28891 got transaction with invalid offsets size, 5 [ 603.365949][T28891] binder_transaction: 53 callbacks suppressed [ 603.365968][T28891] binder: 28889:28891 transaction failed 29201/-22, size 64-5 line 3202 [ 603.393623][T28895] binder: BINDER_SET_CONTEXT_MGR already set 01:51:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023c, 0x0) [ 603.451360][T28895] binder: 28894:28895 ioctl 40046207 0 returned -16 [ 603.473636][ T7985] binder_release_work: 53 callbacks suppressed [ 603.473645][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 603.489530][T28902] binder: BINDER_SET_CONTEXT_MGR already set [ 603.560715][T28902] binder: 28889:28902 ioctl 40046207 0 returned -16 [ 603.571287][T28901] binder_fixup_parent: 37 callbacks suppressed [ 603.571299][T28901] binder: 28894:28901 got transaction with invalid parent offset or type 01:51:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000247, 0x0) [ 603.633132][T28901] binder: 28894:28901 transaction failed 29201/-22, size 64-16 line 3389 01:51:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0xfffffffffffffdc9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x9, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x8800, 0x0) sendto$inet(r0, &(0x7f00000001c0)="1b2f73ad4127595ed5be588b47420fa3c7e37878a0d0edc02c2ddce08c94fddd7ed3f950b971bc2b751c16d885976da648c2c3294c211b7b038db1a5241a5bb38af206c163c270c06cef43cddd846f1bcd822043e190dd1f40e64d998a1e1a6d17297f5b7907f446019b0bb4", 0x6c, 0x40000, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000002c0)={r0, 0x1ff0000000}) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffa) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 603.700177][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 603.713348][T28901] binder: 28894:28901 got transaction with invalid parent offset or type 01:51:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023d, 0x0) [ 603.765707][T28901] binder: 28894:28901 transaction failed 29201/-22, size 64-16 line 3389 [ 603.818223][T28915] binder: BINDER_SET_CONTEXT_MGR already set [ 603.836130][T28915] binder: 28914:28915 ioctl 40046207 0 returned -16 [ 603.840330][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:51:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000248, 0x0) 01:51:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 603.863722][T28915] binder: 28914:28915 got transaction with invalid offsets size, 6 [ 603.875829][T28915] binder: 28914:28915 transaction failed 29201/-22, size 64-6 line 3202 [ 603.927570][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 603.950188][T28921] binder: 28914:28921 got transaction with invalid offsets size, 6 [ 603.991272][T28921] binder: 28914:28921 transaction failed 29201/-22, size 64-6 line 3202 [ 604.021706][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 604.054269][T28926] binder: BINDER_SET_CONTEXT_MGR already set [ 604.088890][T28926] binder: 28923:28926 ioctl 40046207 0 returned -16 [ 604.138982][T28932] binder: 28923:28932 transaction failed 29189/-22, size 64-16 line 2995 01:51:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) flistxattr(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000011c0)={'syz0', "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"}, 0xfd9e) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 01:51:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023e, 0x0) 01:51:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000249, 0x0) [ 604.274145][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 604.302480][T28938] binder: BINDER_SET_CONTEXT_MGR already set [ 604.388910][T28932] binder: 28923:28932 got transaction with invalid parent offset or type [ 604.402041][T28938] binder: 28937:28938 ioctl 40046207 0 returned -16 [ 604.436670][T28932] binder: 28923:28932 transaction failed 29201/-22, size 64-16 line 3389 [ 604.445639][T28943] binder: 28937:28943 got transaction with invalid offsets size, 7 [ 604.456634][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 01:51:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x20, 0x1, 0xff, 0x2, 0x4, 0x5d}, 0x20) r1 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)='-vboxnet0\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r1, 0x0, 0x3}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'nhpoly1305-neon\x00'}}, &(0x7f0000000300)="71a8f7613e7b67506d215e417af339d9800e5c3652c357d3cf8b68d40a2fa8d68669f15f89c8802e99fd85fd5d3fcb90a58432f84318ef6d1da0b8f1443b4d28c02e71b78adf47aff12ae7420a00fecdca85ebb3a32324241e4397ab976c88cb519f2be0e83e895697f2b7cba8fdde9bceed9315eee1c4bf179bb957679db0439d1948207af2343528e979c1d0a0579074b444d9475dc1363d4eba924d01ce94eb43ad00b1e241f6ef01c75485342854c17b4d7a059f9bfbc8fd", &(0x7f00000003c0)=""/48) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000100)={0x1, 0x7f}) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xffffffffffffffc0, 0x210000) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000080)=0x6) getpeername$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=@routing={0x0, 0x0, 0x2}, 0x8) msgget(0x2, 0x0) [ 604.478957][T28943] binder: 28937:28943 transaction failed 29201/-22, size 64-7 line 3202 [ 604.559553][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 604.560551][T28947] binder: 28937:28947 transaction failed 29189/-22, size 64-7 line 2995 01:51:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(r0, 0x5451) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$getflags(r0, 0x40b) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0xae71, &(0x7f00000000c0)={0xfdfdffff}) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) [ 604.604133][T28954] binder: 28950:28954 got transaction with invalid parent offset or type [ 604.617855][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 604.627265][T28954] binder: 28950:28954 transaction failed 29201/-22, size 64-16 line 3389 01:51:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024a, 0x0) 01:51:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023f, 0x0) 01:51:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x6) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 604.678908][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 604.706309][T28962] binder: 28950:28962 got transaction with invalid parent offset or type 01:51:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x48}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:53 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1) [ 604.879987][ T5] binder: release 28972:28976 transaction 5104 out, still active [ 604.916243][T28976] binder: BINDER_SET_CONTEXT_MGR already set [ 604.922290][T28976] binder: 28972:28976 ioctl 40046207 0 returned -16 01:51:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024b, 0x0) [ 604.956696][ T5] binder: unexpected work type, 4, not freed [ 604.975484][T28981] binder_alloc: 28972: binder_alloc_buf, no vma [ 604.982044][T28983] binder: BINDER_SET_CONTEXT_MGR already set 01:51:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x3f, 0x7, 0x8004, 0xce, 0x52a, 0xf70, 0x5b, 0x1000, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="37000000553e9378c11bb0b1e904e9f991791040c5326f793ab1a5c03954ccab5f7682b2983d1d39d4a142a17c17878cb1ce73cd4c2f6508c57f93"], &(0x7f0000000140)=0x3f) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@generic={0x1, 0x0, 0x4}) 01:51:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000240, 0x0) [ 605.015531][ T5] binder: undelivered TRANSACTION_COMPLETE [ 605.045775][T28983] binder: 28980:28983 ioctl 40046207 0 returned -16 [ 605.046858][ T5] binder: send failed reply for transaction 5104, target dead 01:51:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) [ 605.159973][T29001] binder: 29000:29001 got transaction with invalid offsets size, 9 01:51:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:54 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='fdinfo\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f0000000080)='.', &(0x7f0000000000)='.') ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) 01:51:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000241, 0x0) 01:51:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024d, 0x0) [ 605.301024][T29010] binder: BINDER_SET_CONTEXT_MGR already set [ 605.332952][T29010] binder: 29008:29010 ioctl 40046207 0 returned -16 [ 605.341649][T29001] binder: BINDER_SET_CONTEXT_MGR already set [ 605.375655][T29011] binder_alloc: 29000: binder_alloc_buf, no vma [ 605.384834][T29015] binder: 29008:29015 got transaction with invalid parent offset or type [ 605.398967][T29001] binder: 29000:29001 ioctl 40046207 0 returned -16 01:51:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x80, 0x4) r2 = socket$inet(0x2, 0x80001, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r3, 0x16}) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffffe, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000440)="0a721b49cfb455f06405cef0920eacd4baa026cc1c52e00d0bb7d5e664e0") r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x2203, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x20003, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @rand_addr=0x2}, 0x8) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 01:51:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x68}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000242, 0x0) [ 605.580363][T29029] binder: 29028:29029 got transaction with invalid parent offset or type [ 605.591926][T29030] QAT: Invalid ioctl 01:51:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024e, 0x0) [ 605.642541][T29034] binder: BINDER_SET_CONTEXT_MGR already set [ 605.697011][T29039] binder: 29032:29039 got transaction with invalid offsets size, 10 [ 605.697482][T29034] binder: 29032:29034 ioctl 40046207 0 returned -16 [ 605.711247][T29038] binder: 29028:29038 got transaction with invalid parent offset or type 01:51:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000243, 0x0) 01:51:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x2000}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() r4 = getuid() getgroups(0x9, &(0x7f0000000240)=[0xee00, 0x0, 0xee01, 0xee01, 0x0, 0xee01, 0xee00, 0x0, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00020000000000000800000000000000060000000000000002000000000000000000000000c00100000000000000000005000000000200000400000000000000fcffffffffffffff00000000000000000500000000000000ffffff7f000000000700000000000000000100001f0000000800000002000000b60d0000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000009f03000000000000050000000000000007030000000000020800000002f5ffff6267726f757032000300000000000000030000000000000001000080000000000600000000000000dd020000f9ffffff060000000000000004000000000000004500000000000000080000100000000006000000000000002c09000000000000070000484f2f662cd8620002000000c108000003cbff18b726d2f7cc36c71e0bdf29853b0192f702aece746a5e6002161bca9473eb925670cfcb52c10ea0c9569fec52daa2bbcf900610520ab7c9a860797b4907c81a0c2ce376", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000009ebd8f2c00000000010000000000000001800000000000000d000000cd0700006367726f75702e70726f6373000000000600000000000000020000000000000000000000000000000300000000000000010000000700000006000000000000000600000000000000400000000000000006000000000000000101000000000000934000000000000003000000040000000400000004000000dd0b0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000200002000000000000000050000000000000007000000000000000d000000090000006367726f75702e70726f637300000000"], 0x200) [ 605.781469][T29029] binder: BINDER_SET_CONTEXT_MGR already set [ 605.805789][T29029] binder: 29028:29029 ioctl 40046207 0 returned -16 [ 605.824950][T29034] binder: BINDER_SET_CONTEXT_MGR already set 01:51:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024f, 0x0) [ 605.874255][T29034] binder: 29032:29034 ioctl 40046207 0 returned -16 01:51:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 606.066930][T29058] binder: 29056:29058 got transaction with invalid parent offset or type [ 606.122123][T29061] binder: 29056:29061 got transaction with invalid parent offset or type 01:51:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f8bc3b4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1cd, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1, 0x3f, 0x0, 0x7, 0x7ff, 0x8000, 0xdb, 0x100000000, 0xffffffffffffff00, 0x4, 0x80, 0x0, 0xaf2, 0x0, 0x3, 0x0, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:51:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000244, 0x0) 01:51:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000250, 0x0) 01:51:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x74}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 606.307415][T29074] binder: BINDER_SET_CONTEXT_MGR already set [ 606.377537][T29074] binder: 29073:29074 ioctl 40046207 0 returned -16 01:51:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000251, 0x0) 01:51:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000245, 0x0) 01:51:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000002c0)='eth0\x00', 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0xf2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000340)={0x6, 0x4b, 0x0, 0x92e1, 0x5}) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x5) ioctl$VIDIOC_RESERVED(r4, 0x5601, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000001c0)=""/214) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000666ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) 01:51:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:55 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="1500000000000000") r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x105200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1, {0x77359400}, 0x3, 0xfffffffffffffeff}) read(r0, &(0x7f0000a16000)=""/71, 0x47) 01:51:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000252, 0x0) [ 606.907194][T29100] binder: BINDER_SET_CONTEXT_MGR already set [ 606.913464][T29100] binder: 29098:29100 ioctl 40046207 0 returned -16 01:51:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000246, 0x0) [ 606.955557][T29109] binder: BINDER_SET_CONTEXT_MGR already set [ 606.961831][T29109] binder: 29108:29109 ioctl 40046207 0 returned -16 01:51:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) [ 607.085163][T29109] binder: BINDER_SET_CONTEXT_MGR already set 01:51:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x300}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000253, 0x0) [ 607.132588][T29109] binder: 29108:29109 ioctl 40046207 0 returned -16 01:51:56 executing program 0: r0 = memfd_create(&(0x7f0000000300)='#g\x04\x00\x00\x00\x10r\xe9\xdf\x00\xb9a\xb7\x11\x98\xdb\xabT\xf0\xd4#\xc8\xcfr\xe2 \xfe\x15\xd2G\xa4\xf1\xb7\xd27\xe0N\x11\x86i\x80\xaeI\x9b\xcfAd8\x03\x11O9\xe7!8\x82\xeag!\xb6\xbb\x06\xc0P\x99L', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x1, 0x4) 01:51:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000247, 0x0) 01:51:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000254, 0x0) 01:51:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0), 0x4000) add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000003c0)="add8498f4aa2fe4761b7706106ecf906a1980de590b8e401a7bc0c540e4bbc63323e2436c0ec", 0x26, 0x0) add_key$user(0x0, &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)="6cdbe7472c66c01ce9073a6881ded553df5a65560869185d62aa0d01774c9bc2e64589ca2758a12dcfbd42cb1870d2908352417cc0b8d2e11b4c8dd114e07ca73d591b345d44e573b8e2b2f5f6952e47e4300799879705be9d9b1ce57ee02c4617036071652a93", 0x67, 0xfffffffffffffff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x44801) sendto$inet(r3, &(0x7f0000000400)="1c554cf8b93687aab173d8032491f239015b84dcb4678ad1d63110fe50222ecdab43be4f8e44ebb3fd0953c47b4b239192db69ddbdf96044e77bcca1", 0x3c, 0x40, 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000000, 0x80000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 01:51:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000248, 0x0) [ 607.361052][T29130] binder: BINDER_SET_CONTEXT_MGR already set [ 607.388307][T29130] binder: 29127:29130 ioctl 40046207 0 returned -16 [ 607.393142][T29145] binder_transaction: 6 callbacks suppressed [ 607.393154][T29145] binder: 29144:29145 got transaction with invalid offsets size, 14 01:51:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x500}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) [ 607.538772][T29161] binder: BINDER_SET_CONTEXT_MGR already set [ 607.580734][T29161] binder: 29155:29161 ioctl 40046207 0 returned -16 [ 607.587849][T29160] binder: 29144:29160 got transaction with invalid offsets size, 14 01:51:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 607.632654][T29170] binder: BINDER_SET_CONTEXT_MGR already set 01:51:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000249, 0x0) 01:51:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000255, 0x0) [ 607.706690][T29170] binder: 29155:29170 ioctl 40046207 0 returned -16 [ 607.745244][T29174] binder: 29173:29174 got transaction with invalid offsets size, 17 01:51:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x8841) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYRES16], 0x2) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x20011b6f}], 0x1) 01:51:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x600}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 607.839907][T29182] binder: 29173:29182 got transaction with invalid offsets size, 17 01:51:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024a, 0x0) 01:51:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x12, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:51:57 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='/dev/dsp\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dsp\x00', 0x1, 0x0) sendfile(r1, r2, &(0x7f00000000c0), 0xfffffffffffffffd) ioctl$int_in(r2, 0x800000c0045002, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006) 01:51:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000256, 0x0) 01:51:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0), 0x4000) add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000003c0)="add8498f4aa2fe4761b7706106ecf906a1980de590b8e401a7bc0c540e4bbc63323e2436c0ec", 0x26, 0x0) add_key$user(0x0, &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)="6cdbe7472c66c01ce9073a6881ded553df5a65560869185d62aa0d01774c9bc2e64589ca2758a12dcfbd42cb1870d2908352417cc0b8d2e11b4c8dd114e07ca73d591b345d44e573b8e2b2f5f6952e47e4300799879705be9d9b1ce57ee02c4617036071652a93", 0x67, 0xfffffffffffffff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x44801) sendto$inet(r3, &(0x7f0000000400)="1c554cf8b93687aab173d8032491f239015b84dcb4678ad1d63110fe50222ecdab43be4f8e44ebb3fd0953c47b4b239192db69ddbdf96044e77bcca1", 0x3c, 0x40, 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000000, 0x80000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 608.104955][T29204] binder: BINDER_SET_CONTEXT_MGR already set 01:51:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x700}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 608.179249][T29204] binder: 29203:29204 ioctl 40046207 0 returned -16 01:51:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000257, 0x0) 01:51:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024b, 0x0) [ 608.260296][T29214] binder: 29203:29214 got transaction with invalid offsets size, 18 [ 608.282227][T29213] binder: BINDER_SET_CONTEXT_MGR already set [ 608.345760][T29213] binder: 29212:29213 ioctl 40046207 0 returned -16 [ 608.425784][T29218] binder_transaction: 34 callbacks suppressed [ 608.425804][T29218] binder: 29212:29218 transaction failed 29201/-22, size 64-16 line 3389 01:51:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x50, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 608.563512][T29218] binder: 29212:29218 transaction failed 29201/-22, size 64-16 line 3389 [ 608.575424][T27155] binder_release_work: 34 callbacks suppressed [ 608.575438][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 608.600764][T29225] binder: BINDER_SET_CONTEXT_MGR already set 01:51:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) 01:51:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:51:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000258, 0x0) [ 608.625726][T29225] binder: 29224:29225 ioctl 40046207 0 returned -16 [ 608.636133][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 608.642316][T29225] binder_fixup_parent: 9 callbacks suppressed [ 608.642327][T29225] binder: 29224:29225 got transaction with invalid parent offset or type 01:51:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xf, "04c16dca0b6b"}, 0x8, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 608.698523][T29225] binder: transaction release 5189 bad handle 1, ret = -22 [ 608.758999][T29225] binder: 29224:29225 transaction failed 29201/-22, size 64-80 line 3389 [ 608.776838][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 608.792734][T29242] binder: 29241:29242 got transaction with invalid parent offset or type 01:51:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024d, 0x0) [ 608.813739][T29234] binder: 29224:29234 got transaction with invalid parent offset or type [ 608.835558][T29242] binder: 29241:29242 transaction failed 29201/-22, size 64-16 line 3389 [ 608.878871][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 608.881365][T29234] binder: 29224:29234 transaction failed 29201/-22, size 64-80 line 3389 [ 608.894915][T29242] binder: BINDER_SET_CONTEXT_MGR already set [ 608.918856][T29250] binder: 29241:29250 transaction failed 29189/-22, size 64-16 line 2995 [ 608.941042][T29242] binder: 29241:29242 ioctl 40046207 0 returned -16 [ 608.952171][T27155] binder: undelivered TRANSACTION_ERROR: 29189 [ 608.983887][T27155] binder: undelivered TRANSACTION_ERROR: 29201 01:52:00 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='/dev/dsp\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dsp\x00', 0x1, 0x0) sendfile(r1, r2, &(0x7f00000000c0), 0xfffffffffffffffd) ioctl$int_in(r2, 0x800000c0045002, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, "59e5659589020aacb6b6e266759d2a5691c0060f99b201fdf827458682c47c35aea25abdf36ad68b2ea32321f7fbebb21b31a68fba77a7f80c80a0dbb3730eb4c2636d67718eed06d8d432b0c74dfe2ae29401cec2bf2f304bdef253f2cb1882c21cc2a6f51ffeb043ff70a396ecf28764cf942d74062a76e532fb44b7256614fcde8a97c32730a486c042166842431c165e8d63956d3647c37212a37aa1afd6dc7027d29d6121f186b517b01a07f8e08af289f91d7010f4eddc58101e4d3b222f83ce8b0de36ff54eb03168dabb26b6386d9bf805000bef4554223b759884dc2767dd3ea22b26a000acacdf70e411bbbc315184ea821a925a5f91f99a968489d58bf13afa65e47e07624aa9af259eb89f7f5b33c935abaef123b37a8a400e205dc684d8db46dab7517f72bb663632e7b8ed3f7c07fa247767678b58d19a124dc6eaa36b7d3620ef1f14e1375703b5e4717087479d6186d0d182e74acb26d9e6165307ddb97c019931bba5eb17a4a0065f1279c974562bbfc1f162411ff271b52157cfe2052be1ebcc516e2dfefe9008a6b38755659199a3b46360cbc431ef94320f72624b526104b2f883bf604619b9dedb25e3c9d63121dd8d41e024e5fd828ba0d798bea9591f40a2e6a3f96cafed4b9be6635a13dad3423215172e4ee40e89dfd397537f1a8141615b6a5b50d684a8d8f46a9aa5c3bf5604807e8eaf0aac0942879842c7443511e3527129268b5470b9ac39b11897ba1d2f3adb79ae9608357fc536851dbf94e74eb23329d0d4231f32ce102a12381cd43ada052c5f1c04df0b5fa5b230661a8144dabf9bc591e587d4c7ce733bb429e34d294aa0485f0fc9d705104aa70d3d87b4e95de8f57d6ba71d62a190bb79fac0774228af94da4fa8b9d06c334ae15962e413593d0ba48de7c7e7895aad23ed6b6c2d21a10cb3536b131bf9e352987178e6142819c35bd22834de34217a83ade3a44b758a79c8dcd6a1821b02c88675204e30d7cd166c61511fce4b9ee81f3f523ce79dc95f80accbd533a98a8ab7609485487d5a716bfa6d164369048ac7ddf35405d60c0b26b3f5d0ab91ccbc974a756eb59b86878f949f933ba50952bc311269f470be6449bad83e45ba1d210de66b4e9714969f65cf76d178cb37900c05e8098a27cbadadfc8afd71703c51b239c9801a4be93e1bd93530904a27ccc3c179133d75561f4f6670780ec13458babb8b2ef7d96f3f00ff8f240bcf46f556ff613a2e749ef615db312bf63ee76b73ca793333a85ee17b923ce836d76757c248c1ee3de4f44f596b778a3264c07a9c42024da4852456f125c4f25bb85a6a2369f46031df4ef3a97225301197b12213b4698990631a2a7f28ef4f6af7712e884866828f50ca3ecc8db82002d4767fd3eb91c06ae59c5a672660522b983b242e6bc4f4500cae4a069d09df788ebb668f79d67713651c26c5058f1ab37468fede74d8b74fd98083091a35762bf94e6272fdd4f80deddd6e519455bea19fcdf7f450188066c6637baeeeaf4968cc4a51114e674374e677a23255d47f670b160010093d4affa9faf4eb241bbdc8d2116b02d5a5cc84669ce173bf201db2bfd9cc12d7eac60a70880647367f545a90ec05893d4d136e57457219350dff3c20501f88470553385f087be55a9d9c8ee808cd71448d9cadd8aa8534e03f3e59a6a074a37f902b9845cd8466bafdca03a66068a7ab1edebd19d4cc5e509088d1a2532a1dd42cabb23ff7f47a28e1bfbc9d415388eb2c79dccd5c6eccb4559faa5c819a6d3f58bee20bf24fadd33a7b4c0febd395a652d81c6ad00a1c2fd1e7149a093f13721e21ed9ddfe5039ba61135b63dee73fec3098f1cf0ece45a3a03c2c9e26ea2c43abc95d74c5d1a1d6a89672c2a855788d560fdc038ce761b05f2b36c57122f05a26c1a80f19e5528257f1134c8ad4a8578f3e585308a888ab85762d125cd9d143f993d43cbe59b4bfe66d7d0e0e7b27e2682dba110edd5be07f71f9221f90b7246d73a3a05f26ea4327e707872035951c81f9f229d23551b8b2de6b5b5cc8feb57ca1203f7f9eca5594dff8dfe5a302fae87040784ce83f5df0899499cb66709e64c525b10eaa7907c86c6b90dc6f596075f5411217286b611179724f4049c49d96a5ed11cb5d9443f87046ad71ddd6f8dfc430662e37571c69634a6790f3d8a0683b76b5e797d425fe27fc5bd1df47dfcae8407c85e0df2eb1008a7e4c636da80535a595bbd7a9d7b3dd83948b65a3385a4a13231b4847a709521a35058f11c7d266dac0a3e6b80fa7d806fd2e68b057db6d136a7b7a3e443d9f47932a622233cc7cd65083aa5bd01e351b13498cb720d4d861ab11d7af10a9f06a5c7d537cbfe8c493e1cbedb850870c36ae3334872b6bbbeb2dc374742239a8a8778820c969cc8c99917884870d95400f821b7a134b7dc31aee46bb90dc20b0cd95911321bf5b8f88c0ecc05024a3a99854f25f4b51c54a497cd2920b58fb8a717d8960efbea40be5c8c07cd24539f009ff2664829e68742085651951983982ea4df7b9d6e9a2542118bc89e723cc93c940f21bb5b68c39d8c37bcc90eca3185d3f0daf12028aeed7bfc4287efb1a8ae4afa6cb163545c20b6c72871cf3d259959d3b5f6b2f267af9482df87bff5bca50d76e6fe43f499903eb7266d3c680f188aaee659a9266a54b01baa534af6788f3167a6a4e52dcbe4bd52ed95dfc1c3ac3320d75d052ea224d378cb3ae47a71cc302b1f5d0c2cfc4c810c93dae177bbdc1a7c1239ebded03cb050325f6dc234ce5334c308858a814df9239f1300c83c2626c6bfcce1cdf41ffd9480b7b7749adbedc00c8f589dd059087ae48a0dfa69ccbb7f5b983b8d578fa98a3cce52340031191a31e8d71b89635c7fe12258513a55b56b8151a0f3f88a3a0243f6ef6683252cff0fab4cf69f2dc6e00fbe7d7ad513d84b772ba1a8bb1fad77df4c469491ea9399e570f97f7cbf0fee82f9980748cca34f97b68acdb22d3d6ca16cb05741907177b12483af356e1178f7514d5529631e1db37104c7ab05efb73569cc1fe8d4d5a7a2635558ab721d0f299c3f5aff2074f79e8025398724407bcd8b101c9afcf5ea7a0be2a9d0d55687fd46ab7a9c141d881c3cdb339aa957bf7714d55ff82aaf010817b7a1b007e367f417a246b6ad01fa57e7454c57e75633c85d14e319ed5bbf9131d92e530ed11a0e71c1577a40a3c2f8d78ee5e70e76c75669927dbed4afeec7cd4ef64b096ce1d17ef1ecbe87aa9b26c8849fe4227ae5c852fbad5232766c0db5097d25a76fa5bc51b9fa735c7f3e312aa004ee2c3b93e51208b8145b63fe402c47f64c53ecd69794dcff3ca8c329a8e05a3a3ed94b16bca64d3807e8be0997c09d1210bb848e02baef4985e56fed141fbfa9f246f9da166a8d1792be7240d80fd9c864383dab814333fda4bbc4af98c28b0345276e6097184ee709491be0a902d482593eec68ed9dc836b6f3d0aae02dfd4a586457360fbc3c681fa98b0387603075c4d8607e2db47ce47782d8955ab23e21f661238dba3e0d1bd6e815a79f3d141031153944c9a81fd8904d0d331c96607c5326879d55f3eb3324aa6bc32005038a32681b0aa137e14d5ad950c228b3ac1f32fb5a9e403f4126bb12bc6ea4ab5305eddd461af8c81b37d378f93639ef82fd9d223cef5d74c554d6601d8bce8ac8715ef6a7201df20c7284cfdabe967bb99e85f6dd29a5e9c8dd3155c2f51180fbe39e9b592d3815f8878dbc543f5b38b4969c4abdc885f120726fb2e57f9860155fd6b926099894e4632b6b0ae96b7ab794e712af1df8c7d8c5e83855aa1f924208c25416f1592f1f97b4ac98b29734cf87b096aa8dd59ef40ac7286a81cf64dd33b86adc4f875d1266cb3ec73e748b27dc7ab38f96e7fad365b84c2a7af9b00aea9413704c2af9990c3c4adfb427c4769b35719107d0dac5b9d48538883eff403051aaae84e3006d8848413387fffb389d338928921e7696da780ada59dadf545c2615634fb5e386f7d4bc0c1455e9f8aaec44110f780dac34252e378a67121ed60c6e3c4b611fcb40947a2215625c6faf80d5befd8ab070ca4634bea28ce57105a8f1d7afa896d68765dbf1e9be9520df061980218034c24aba042962f565b5d93e0cf07a1a3fec94cfeef016a93865048c124c0c1ba04cf9be8f694a16b37004e8d4e947b1d5c6146dab61fe8b7acd81e10e6bd298a768267f73b630723446e0423525ac47c5e77af036157fa18f0dcf7ab244f3b91575a5253d7ea04d4e548c14b85e11d91bf778207dfcc33d85b350110373076579e1a256572b88b6fc47d0d922da7ea498107cada53018b63c499994a9e0bd4120698c32d345bae83071fc75940755469b5a0d5c509f350b18014bbd4aa31d8ec3ff5cdfea64ab526afa2ac02689dbb798e53c8233615421c78e72fd930b923e4d52f0ebff3e431a66e7a1189bdf5f356bfecaa497f6e6563805a301039018eee9bd929a224a9594119b0dbd4c3479e99b6c95c3b33a6251786352fb7afc4deee093c2f4ec79bea072aac4fa33336aff2812d1c8994d00c6cf52f6fac5fd8e317ab3f8692fa0737e865d6b1c3a3ca3e7912ef6e3d4b3126826cbe32a00fdab9e6838562cd5b6ade0b7eee488a1bbdc879e78a0102f27ea1b05e33c9ec4d557d8b1e0dfb075271b55808d76a527f4cd378410954fef0ac3bd8683f76684b0af1c99a3d8a41727ff7d9370020371f8681b538634caf912ba46100cebaf052aee4f1a00135a87cb98e51503955e2e96ce1727d03ba7bf9e8b70c805309c512e59b57d51bac1babca05362f7e01cab18ef93acd59b311e873e3f52041a2a402dfdd5cb4576d57ef0d0c6aa942bb9645346fc75e0924fa636a07e8dbc8852cf5bac8795d092c4fb3ea274704e6fc138c65d6dba20273c1702dc1b0f212a99b931bd1a6ff35905863cdae637d5fbe7d274a525080218d35b185e099e6663849d5cbdd8a9dce9fa0c36a8771e0009ef1a7a18eb8afc07441dec5fe645bb7bf6d5add77dd4973730797a3d9e8b09cb10870c872d9fc64d8b1274b29522016f8510f98c74a0ab900905207cf80366c62c8c31f8740313930fba97c88f8a63eab44764b17e90f9ab72499a60089b9c21a40e16030947922191564a091d99651498d136fb47f9ca2793d2475588b798df5276cfd2f2c5f9ff5ff2d372dd9dfb8c89fd69590ffc38076e76d96f6eb04f7aae3295749930d9a2c774b4fbe9c7f652765d82e109fbd1bf7cb352890a79b77caedbaa13446cd152c6264f606a03e24c03cdca04aabfaa0b277b5a1c4302b13ac578186628193a97f0fc6c9212ebdbd6ff78eb638ee29a9c3b1ef0ad6fa4ac24b0b8174558453f9f9c356e8820da71fb83eb6868f87e4cf1f4bedc8cd2900ab6ae2a3facff90a55fd07d7a400df08203910e153d02e0972f7d2b86f239f38e1daac1b4e11ea3968e64bc1788a3c3e691c62a38cf60ac5a4069c56877807d6eeb8b7024ec4ff73009db9933b565ecd73be67966efb5e9274397b9729f89ab100a3c8d9f6e80588f19169d9604dc0bafff640226ec6c959e9e1786f250054d9ffefe826684ad963003018131207f7a9bfe7fd920e58e99443429920d9a10ec5d54800c2b9909da37797e1b3fc35110a954cddd345f909626930c82c7a3c262e4fef81bbd5eb1805bdb29aeb99a6f471cdb7af376ee316d8f0f15e0cc323da617943a52bee8d86f74ea4371be6f3b2c2dfff30c659edb28d7", 0x1000}, 0x1006) 01:52:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000259, 0x0) 01:52:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024e, 0x0) 01:52:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x223, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:00 executing program 0: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40002, 0x20000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe9, 0x7c, 0x0, 0xf, 0x9, 0x10, "1a8de3766c596a004835020250040d9cc0995211f4ca2a9fae70c922f96a6ccf2f4207e36ede4b4c8731b1cb4cced78187a8c5c43ec2900b1497c524e8aa4fce", "e44133148a4cc6137281c4dee887124fe4f3f6b6f5535e25575b0835cfc4e0e2f9ee8bc1ed7dd61b1c261343d6eb81f0d2a5e82d80715809a95c54c2691387fd", "dd129e16b947d7af1a815ea05fab5a881acb288d198dfdb63ac097bb681853c1", [0x8, 0x5]}) [ 611.102497][T29260] binder: 29259:29260 got transaction with invalid parent offset or type [ 611.126749][T29266] binder: BINDER_SET_CONTEXT_MGR already set [ 611.168684][T29266] binder: 29263:29266 ioctl 40046207 0 returned -16 [ 611.174305][T29260] binder: 29259:29260 transaction failed 29201/-22, size 64-16 line 3389 [ 611.205042][ T5] binder: undelivered TRANSACTION_ERROR: 29201 01:52:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025a, 0x0) 01:52:00 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x0, 0x2) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000000c0)) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000003c0)={0x6, @capture={0x1000, 0x1, {0x7}, 0x8, 0x8}}) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'eql\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x402) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000100)={0x80000000, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @remote}}}, 0x108) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000240)={@reserved}) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x7fff, 0xa1, 0x207, 0x4, 0x7, 0xff, 0x9, 0x2, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000004c0)={r3, 0xbd, "e7a62af2ee18d03d9fde418be2864f21dee6745feb224684ba8fbb2ce7ae145f8ccd2967d8ed21a767dfb07a22cb65920ed6120df78adf5df5ac96d100bb5c936c138a9643974b826811df557c7d16f3374c0ce28ac3267eb56f54ab0ea953422610dcd642c7d218274bcbf9b6438e57e23718a05ce350533b3dc2c013b4814af6beb6b63123ab46ba21cd9098574f54c281f81ab0d26ceca7998bb5781b4f46cd20b0a81a4a5c706e7cbfef91b2d82b309578d0276ff48ad206a0b7bc"}, &(0x7f00000005c0)=0xc5) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0x80800) [ 611.211771][T29272] binder: 29263:29272 got transaction with invalid offsets size, 547 [ 611.227117][T29260] binder: BINDER_SET_CONTEXT_MGR already set [ 611.255601][T29260] binder: 29259:29260 ioctl 40046207 0 returned -16 01:52:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024f, 0x0) [ 611.266740][T29274] binder: 29259:29274 transaction failed 29189/-22, size 64-16 line 2995 [ 611.268428][T29272] binder: 29263:29272 transaction failed 29201/-22, size 64-547 line 3202 [ 611.305573][T27155] binder: undelivered TRANSACTION_ERROR: 29189 01:52:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) [ 611.353182][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 611.365705][T29272] binder: 29263:29272 got transaction with invalid offsets size, 547 [ 611.373875][T29272] binder: 29263:29272 transaction failed 29201/-22, size 64-547 line 3202 01:52:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025b, 0x0) [ 611.473273][T29292] binder: BINDER_SET_CONTEXT_MGR already set [ 611.508652][T29292] binder: 29290:29292 ioctl 40046207 0 returned -16 [ 611.557980][T29298] binder: 29290:29298 got transaction with invalid parent offset or type [ 611.576065][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 611.593518][T29292] binder: BINDER_SET_CONTEXT_MGR already set [ 611.607362][T29292] binder: 29290:29292 ioctl 40046207 0 returned -16 [ 611.614594][T29298] binder: 29290:29298 got transaction with invalid parent offset or type [ 611.625486][T29298] binder: transaction release 5211 bad handle 1, ret = -22 01:52:03 executing program 1: r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3f, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x3a}, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) 01:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000250, 0x0) 01:52:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x2, &(0x7f0000000100)=0x1) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x8000000000004}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) close(r1) 01:52:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025c, 0x0) 01:52:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3d0, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 614.117397][T29305] binder: 29303:29305 got transaction with invalid parent offset or type [ 614.143152][T29310] binder: BINDER_SET_CONTEXT_MGR already set 01:52:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfc0004) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x7ff, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xb) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f0000004900), 0x500, 0x0, &(0x7f0000004a80)={0x77359400}) [ 614.162667][T29305] binder_transaction: 2 callbacks suppressed [ 614.162691][T29305] binder: 29303:29305 transaction failed 29201/-22, size 64-976 line 3389 [ 614.207662][T29310] binder: 29309:29310 ioctl 40046207 0 returned -16 01:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000251, 0x0) [ 614.225664][T29320] binder: 29309:29320 got transaction with invalid parent offset or type [ 614.234209][T29320] binder: 29309:29320 transaction failed 29201/-22, size 64-16 line 3389 [ 614.254449][T27155] binder_release_work: 2 callbacks suppressed [ 614.254458][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 614.269882][T29305] binder: BINDER_SET_CONTEXT_MGR already set 01:52:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000240), 0x4) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000000)={0x3, 0x1, @stop_pts=0x8}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 614.289261][T29322] binder: 29303:29322 transaction failed 29189/-22, size 64-976 line 2995 [ 614.326799][T29305] binder: 29303:29305 ioctl 40046207 0 returned -16 01:52:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025d, 0x0) [ 614.358422][T27155] binder: undelivered TRANSACTION_ERROR: 29189 01:52:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x2}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:03 executing program 1: r0 = socket$inet(0x2, 0x0, 0x1ff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x8, 0x8, 0x100000000, 0x7}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x8800, 0x0) sendto$inet(r0, &(0x7f00000001c0)="1b2f73ad4127595ed5be588b47420fa3c7e37878a0d0edc02c2ddce08c94fddd7ed3f950b971bc2b751c16d885976da648c2c3294c211b7b038db1a5241a5bb38af206c163c270c06cef43cddd", 0x4d, 0x40000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 614.449836][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 614.459446][T29337] binder_alloc: 29309: binder_alloc_buf, no vma 01:52:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025e, 0x0) 01:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000252, 0x0) [ 614.513273][T29337] binder: 29309:29337 transaction failed 29189/-3, size 64-16 line 3148 [ 614.552501][T29344] binder: 29343:29344 got transaction with invalid parent offset or type 01:52:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x80000000, 0xbae, &(0x7f0000000340)="af72addd0b0ca7cc14aa0319d84d72a03e36c0894f79a7237919f4594efd094ce9e093a8f34805703f3459459cbee0a42fdcf00499998f9e8bcc42533b9eec50dfd65ab560e9a3644a58b78c20b2e0af2c27873b7a100be0eb459d9b816af47bcdec5360c5bcfd24b90a4d520c90c95bc98c4ed17f2e4346172846d4d51ddaf81ea531b8b634c3620a1066856947088df769df847d273f148fea78b29c5fe6", &(0x7f0000000400)="89ec37e9e3639bfc392d72f966936d48b728da3ae741a930f225ef2fc054cb5dec1ceb81b2a7b0cd7af33db9a435fb489a8c30eacb0d072500f7dc02c1600b158b92eecc879aefc1da469dd543d90dd69af6fb4f895a53e145877f491ed1070019b1173a78a48e", 0x9f, 0x67}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x9, 0x80000001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 614.594765][T27155] binder: undelivered TRANSACTION_ERROR: 29189 [ 614.608823][T29344] binder: 29343:29344 transaction failed 29201/-22, size 64-16 line 3389 [ 614.659986][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 614.671711][T29350] binder_alloc: 29343: binder_alloc_buf, no vma 01:52:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7400}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:03 executing program 1: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x1, @rand_addr=0x6740}}, 0x24) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 01:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000253, 0x0) [ 614.702552][T29350] binder: 29343:29350 transaction failed 29189/-3, size 64-16 line 3148 01:52:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x3}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 614.782827][T27155] binder: undelivered TRANSACTION_ERROR: 29189 01:52:03 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) getpeername(r0, &(0x7f00000001c0)=@caif=@dgm, &(0x7f0000000240)=0x80) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa283002000000080000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101180, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) [ 614.881875][T29369] binder: 29367:29369 got transaction with invalid parent offset or type [ 614.906655][T29369] binder: 29367:29369 transaction failed 29201/-22, size 64-16 line 3389 01:52:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025f, 0x0) [ 614.942805][T29372] binder: BINDER_SET_CONTEXT_MGR already set [ 614.991846][T29372] binder: 29371:29372 ioctl 40046207 0 returned -16 [ 614.993986][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 615.005434][T29369] binder: BINDER_SET_CONTEXT_MGR already set [ 615.011535][T29374] binder_alloc: 29367: binder_alloc_buf, no vma [ 615.036293][T29369] binder: 29367:29369 ioctl 40046207 0 returned -16 [ 615.047463][T29377] binder: 29371:29377 transaction failed 29189/-22, size 64-16 line 2995 01:52:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000254, 0x0) [ 615.093002][T29374] binder: 29367:29374 transaction failed 29189/-3, size 64-16 line 3148 [ 615.119548][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.122384][T29377] binder: 29371:29377 got transaction with invalid parent offset or type 01:52:04 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200600, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x6000000000000, 0x4}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000000200)=""/127, &(0x7f0000000000)=0x7f) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) bind$isdn_base(r1, &(0x7f0000000100)={0x22, 0x8001, 0xfffffffffffffffb, 0xea53, 0x400}, 0x6) [ 615.144307][T29377] binder: 29371:29377 transaction failed 29201/-22, size 64-16 line 3389 01:52:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000260, 0x0) 01:52:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 615.204458][T27155] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.241676][T27155] binder: undelivered TRANSACTION_ERROR: 29201 01:52:04 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000000202100, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="290000000000000000000013c4d77effaecedd1fd357492500000000000000000000000000000000f8ffffffffffffff0000000000"]}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xffffffffffff0001}, &(0x7f0000000400)=0xffffffffffffffc8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000980)=ANY=[], 0x0, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000200)='em0&wlan0selinux\x00') ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r4 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000000)={r4}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r5, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000280)={0xa, 0x6, 0x5, 0x7}, 0xa) listen(r6, 0x80) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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") bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r6) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000900)={'filter\x00', 0x0, 0x3, 0x50, [], 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000880)=""/80}, &(0x7f0000000480)=0x78) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)=0xfeffffff) socket$inet_udplite(0x2, 0x2, 0x88) [ 615.336366][T29398] binder: 29396:29398 got transaction with invalid parent offset or type [ 615.359576][T29403] binder: BINDER_SET_CONTEXT_MGR already set 01:52:04 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80040, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0)=0x7, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x2a, 0x8, 0x1, 0x2, 0x3, 0x9, 0x53c8f594, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0xff, 0x0, 0x1}, &(0x7f0000000140)=0x10) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x4) [ 615.396413][T29403] binder: 29402:29403 ioctl 40046207 0 returned -16 [ 615.410256][T29398] binder: BINDER_SET_CONTEXT_MGR already set 01:52:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000255, 0x0) [ 615.455423][T29409] binder_alloc: 29402: binder_alloc_buf, no vma [ 615.463761][T29398] binder: 29396:29398 ioctl 40046207 0 returned -16 01:52:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000261, 0x0) [ 615.517859][T29407] binder_alloc: 29402: binder_alloc_buf, no vma 01:52:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x5}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800, &(0x7f00000000c0)="91efe0c20a1fc436001f31203e1b20872fc1fbb1a3269b2701bc6cedac15f6e5a3cddd260d26e7d29415") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8040, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x600, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, r1, r1, r1, r0], 0x5) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioprio_set$uid(0x0, 0x0, 0xffffffdf80000000) [ 615.647391][T29426] binder: 29421:29426 got transaction with invalid parent offset or type [ 615.706372][T29431] binder: BINDER_SET_CONTEXT_MGR already set [ 615.744144][T29431] binder: 29430:29431 ioctl 40046207 0 returned -16 01:52:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000256, 0x0) 01:52:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000262, 0x0) 01:52:04 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x72eb, 0x40) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0xb12) write$vnet(r0, &(0x7f0000000380)={0x1, {0x0, 0xffffffffffffffd7, &(0x7f0000000400)=""/118, 0x0, 0x2}}, 0x68) [ 615.750771][T29434] binder: 29421:29434 got transaction with invalid parent offset or type [ 615.760470][T29438] binder: 29430:29438 got transaction with invalid parent offset or type [ 615.828373][T29431] binder: BINDER_SET_CONTEXT_MGR already set [ 615.855595][T29431] binder: 29430:29431 ioctl 40046207 0 returned -16 01:52:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:04 executing program 1: msgget$private(0x0, 0x40a) r0 = msgget$private(0x0, 0x8) msgget(0x1, 0x2) msgctl$IPC_RMID(0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) write(r1, &(0x7f00000001c0)="97b2d965a240f85ed32d716b1694ef88df1ebf083031302b5e9836fb323142f29c9453a4b8194803a94784e7aa522e0a6446860e608fdc3b083bb6b87f702025345c02b4389995598f874b07b5e2e196e789f29c28578302ea038d450304105373e708e1712445f23da40392671603e6", 0x70) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000000c0)=""/202) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x4001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) fcntl$addseals(r2, 0x409, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x6) getpgid(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00') semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2000000000002900, {0x0, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 01:52:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000263, 0x0) [ 615.875595][T29438] binder: 29430:29438 got transaction with invalid parent offset or type [ 615.972987][T29438] binder: transaction release 5259 bad handle 1, ret = -22 01:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000257, 0x0) 01:52:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:05 executing program 0: syz_emit_ethernet(0x56, &(0x7f00000003c0)={@broadcast, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "9e7f82", 0x20, 0x0, 0x0, @loopback, @ipv4={[], [], @dev}, {[], @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x5}}, 0x4, 0x883f, 0x1, 0x6, 0x4}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0x53, "59f0202313d40a772c2f475c02ef9b2387237b3d6d82dfa119512e5cd8b9b48860fee10f782efc693ac3e1c491dbd759e080d6086b314ed25859e7c450ad2821f4ead94d645c1b6085d74c6fec67d4c701c2d1"}, &(0x7f0000000180)=0x5b) syz_emit_ethernet(0x1011, &(0x7f0000000440)={@remote, @random="556aaa2c9654", [], {@x25={0x805, {0x3, 0x3f, 0x0, "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"}}}}, &(0x7f00000001c0)={0x1, 0x1, [0xba9, 0x34c, 0x13a, 0xe]}) 01:52:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000264, 0x0) 01:52:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x405c7c3d, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '\x00'}, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0ad8aa149ed73f3188b070") futex(0x0, 0x47c96994aa9055bd, 0x0, 0x0, 0x0, 0x0) [ 616.186914][T29473] binder: BINDER_SET_CONTEXT_MGR already set [ 616.222130][T29473] binder: 29472:29473 ioctl 40046207 0 returned -16 01:52:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x138, 0xe, 0x0, 0x311) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x77e, 0x4) 01:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000258, 0x0) [ 616.288491][T29473] binder: BINDER_SET_CONTEXT_MGR already set [ 616.294548][T29473] binder: 29472:29473 ioctl 40046207 0 returned -16 01:52:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x80000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000480)={0x28, 0x2, 0x0, {0x0, 0x7, 0x7}}, 0x28) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000780)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xc0, 0x0, &(0x7f0000000840)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae4201ca1ee9c2231708e18a47bc68a2a79a0b4a531f6ff6d3095bbabd89d9f9a38c3d9f6d958dd03695246acccffd5f34fb78adb0f0810a1650b0360f4b043041bc79576af9826bf0fd7953a0f7086bac1dc335119dc9f5c6019f9b43210916d4145484665a0a45670ffb740e5567a9f45b091d08ff13329126f09746f5bb9b65b060bf2c6df3022fd5f40a22104f153052d0927a88800"/192}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000500)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f, 0xfffffffffffffffb}}, 0x30) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0663044001000000d63e961c6e5c54c098e351a22eb72cb092f6cef5d92d9a8bb7037e3f1c7486a5b48713af5176d518faffc5913e25bf6371eba010f68a4bf3bf14720861421b8c693719a0f862f540c582152d98bcfaeab423ab6fbec42675714a8328455bd5b31f914a40d187cabce9054d5040367089fa48171d64fd03ab65eef8d9b83107c082"], 0x0, 0x0, &(0x7f00000009c0)}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) socket$inet(0x2, 0x5, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb6697223f51228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000fff020007000000000000000000000001bc0700003000020000000000000000aa02000000100001007500400000000000000000000000000000000000ff75b5531c6f368be0b7c9dc6d"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) fallocate(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 01:52:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000265, 0x0) 01:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000259, 0x0) 01:52:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x48}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 616.487017][T29497] binder: BINDER_SET_CONTEXT_MGR already set [ 616.506610][T29497] binder: 29496:29497 ioctl 40046207 0 returned -16 01:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025a, 0x0) [ 616.566597][T29497] binder: 29496:29497 Release 1 refcount change on invalid ref 1 ret -22 01:52:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000266, 0x0) 01:52:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x22e) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82200080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r2, 0xf02, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x24b3}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbb}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xef1f}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x1, {{0xa, 0x4e23, 0x5, @loopback, 0x80000000}}, 0x1, 0x3, [{{0xa, 0x80000000, 0x800, @rand_addr="dc87941af7d024fc0ed38f8c40f29da2", 0x461b}}, {{0xa, 0x4e23, 0x5f, @rand_addr="c199b1d1aade6bd5edda52332a01cd2b", 0x8d5}}, {{0xa, 0x4e20, 0x7, @mcast1, 0x7fffffff}}]}, 0x210) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x33a6fd48b14286f7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) [ 616.643559][T29519] binder: BINDER_SET_CONTEXT_MGR already set [ 616.695477][T29519] binder: 29515:29519 ioctl 40046207 0 returned -16 [ 616.722082][T29512] binder: BINDER_SET_CONTEXT_MGR already set 01:52:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000180), 0x1c) prctl$PR_GET_DUMPABLE(0x3) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 616.747961][T29512] binder: 29496:29512 ioctl 40046207 0 returned -16 [ 616.769039][T29533] binder: BINDER_SET_CONTEXT_MGR already set [ 616.780303][T29533] binder: 29515:29533 ioctl 40046207 0 returned -16 01:52:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000267, 0x0) 01:52:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 616.824100][T29497] binder: 29496:29497 Release 1 refcount change on invalid ref 1 ret -22 [ 616.929523][T29548] binder: BINDER_SET_CONTEXT_MGR already set [ 616.955379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 616.955409][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 616.961315][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 616.990059][T29548] binder: 29544:29548 ioctl 40046207 0 returned -16 [ 617.023961][T29555] binder: BINDER_SET_CONTEXT_MGR already set 01:52:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) write$smack_current(r1, &(0x7f0000000080)='posix_acl_access\x00', 0x11) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x80fe, 0x7, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x62f, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x0, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:52:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x50}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025b, 0x0) [ 617.038139][T29555] binder: 29544:29555 ioctl 40046207 0 returned -16 [ 617.049126][T29556] binder_alloc: 29542: binder_alloc_buf, no vma 01:52:06 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x10000000000002, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(0xffffffffffffffff, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_elf32(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0) [ 617.115399][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 617.121292][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:52:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025c, 0x0) 01:52:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) 01:52:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x68}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 617.289211][T29582] binder: BINDER_SET_CONTEXT_MGR already set [ 617.320772][T29582] binder: 29580:29582 ioctl 40046207 0 returned -16 01:52:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0x0) [ 617.352900][T29582] binder_alloc: 29575: binder_alloc_buf failed to map pages in userspace, no vma [ 617.395599][T29582] binder: BINDER_SET_CONTEXT_MGR already set [ 617.419702][T29586] binder_alloc: 29575: binder_alloc_buf failed to map pages in userspace, no vma [ 617.470727][T29582] binder: 29580:29582 ioctl 40046207 0 returned -16 [ 617.755403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 617.761228][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:52:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000940], 0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x238) 01:52:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025d, 0x0) 01:52:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026a, 0x0) 01:52:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 617.899375][T29600] binder: BINDER_SET_CONTEXT_MGR already set [ 617.925541][T29600] binder: 29599:29600 ioctl 40046207 0 returned -16 01:52:07 executing program 0: syz_emit_ethernet(0x35, &(0x7f0000000000)={@local, @broadcast, [], {@llc={0x4, {@llc={0xfe, 0x0, "46bd", "63184349dc0a5b6e01c1ad212559107d70d36e30c1125b952d51290fd6d42ef160cfa9"}}}}}, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x02\x00\x00\x00\x00t\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x2, 0x0, 0x0}, 0x1b0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x8, [{0xfffffffffffffff8, 0x5}, {0x7, 0xffffffffffffffdc}, {0x3, 0x4}, {0x8, 0x5}, {0x2}, {0x4, 0x401}, {0x80, 0x41}, {0x4059, 0x5}]}}) 01:52:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(r0, 0x4, &(0x7f0000000080)="23a573c8c21bbd33bebb56cb5f11da66d726942e34d7c3862ed5eb6349b31f263eaa3e37227124d1f270c94029519d11ee0be8599e0aec95a063674964a779dae31647") sendfile(r1, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 01:52:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026b, 0x0) 01:52:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x74}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x48000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025e, 0x0) [ 618.177711][T29634] binder: BINDER_SET_CONTEXT_MGR already set 01:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025f, 0x0) [ 618.221483][T29634] binder: 29632:29634 ioctl 40046207 0 returned -16 01:52:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 618.281331][T29630] print_req_error: I/O error, dev loop0, sector 0 flags 80700 [ 618.398730][T29655] binder: BINDER_SET_CONTEXT_MGR already set 01:52:07 executing program 1: r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)=""/223, 0xdf}, {&(0x7f0000000200)=""/72, 0x1b}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f0000000480)=""/219, 0xdb}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000600)=""/21, 0x15}], 0x8}, 0x102) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x7d, "4d09c460dbda4e64badec9beeaf5e47514c063aa91e5a7d21170e49aa575d40a774f73166538e580060be02e792425008f2b109cb8f4c00a3cdb8528c5a60457c09ef0d8c079df0e7e0a7820aa6780f396f5e3a1e53f11c25610c31176baa7c162de3c0b360f0ea324b985486080b0ffe69c44627cde5a82c8396a28b4"}, &(0x7f0000000800)=0x85) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000840)={r2, 0x2040}, 0x8) [ 618.439540][T29658] binder: BINDER_SET_CONTEXT_MGR already set [ 618.446248][T29655] binder: 29654:29655 ioctl 40046207 0 returned -16 01:52:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026c, 0x0) [ 618.481475][T29658] binder: 29649:29658 ioctl 40046207 0 returned -16 [ 618.518512][T29655] binder: BINDER_SET_CONTEXT_MGR already set 01:52:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x68000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 618.571757][T29655] binder: 29654:29655 ioctl 40046207 0 returned -16 01:52:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x7fe, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000100)={0x2, 0x6}) pipe2$9p(0x0, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="c744240000010000c7442402f7e33256ff2c240f3806f1c4c1fe6faf8000c0fe0f01c82666460f38821d01c87715440f01cf66bad004ed66440f3831b50000000066ba4300b00aeedd8a0d000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) rmdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000001c0)={0x0, 0x100, 0x0, {0x81, 0xffffffff80000000, 0x0, 0x401}}) getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x20141043, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f0000001180)='IPVS\x00') timer_create(0x40000, 0x0, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="649b41028dc88ba9ef2d64aae0ced3e320a0a81d14008b94d789b52a4697f7e2f6ddecbe67f3edf6065f27f30cfa6017e59350d513c9479bbe87658e7d362ef8b4365110c93dd12eff1286b994beee8329d6cd0825d2ad997a20825ceef62ebed6e91694477abe528211fd677e2cea3098efc3adae8a2b105fca7316ba44c617dbc2895f15d05b54e221afb1d8de910bf0", 0x91, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000180)) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000140)) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl(r2, 0xffffffffffffffb2, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r3, 0x84, 0x5, [0x4f, 0x9, 0x9, 0x4, 0x4]}, 0x12) socket$l2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000002c0)=""/91) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x63000000, &(0x7f0000000000)) 01:52:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendto(r0, &(0x7f0000000740)="4696370ecadc0d28f162abbce6af48b6e569194aec710c7d0cf2b90b4751021bccde211489735e11e394ac6ec7e0829fac8100f0dfbfbfae2e2daffbf20a58ebad4a82817410b7b5015a64358200241b238fe43f15b9e10b4b35f2963ed1ecc89b419e60cc391b017dc5a7ac85fa86a9ce1f1ae72bf46e14af8b35968ee424ea63a7b0aa9c0d72679f563cff6cce6741e94b58703a692893338ee7381ae58efaa35e0e862daaf349eca9a7c0e39bad4ccade28568621bff9fcd2051ad686cc75dc231d1812312aaaa2d3166e75b94237b5b2286878325c984d108ff76d2fb22aecec5f03ef510e41df05", 0xea, 0x1, &(0x7f0000000840)=@ethernet={0x307, @random="52289ead3a32"}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000001000010500060020000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x6, 0xc040) getpeername$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000680)=0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0x81a) sendmmsg(r0, &(0x7f0000002e40)=[{{&(0x7f00000003c0)=@hci={0x1f, r2, 0x1}, 0xffffffffffffff96, &(0x7f0000000640)=[{&(0x7f0000000440)="6be104782773bb62960bb5c357d4f384bf64e12d44d2c7418d419fb07033641ba1db5f0b68b20331f9d5c64840625d9de8d61a196701d66565ee08b3cb49f98cc04a282117629c3b4609013cfc89a3d62ebccee7fae3b43fd360da92808b9064063fc711787f988b10d74c529f494076e708fac6d55eb29cf44875a61a3ba83c91654c6950504288dc5b4220d7f1096895b0bf2209e94f41c4de70b9789357a4289f795f327d41b40042df", 0xab}, {&(0x7f0000000500)="024312af9db4901442c61f4804cd59436cecbe33303e812176abcb97b454b8ee17799547c06661e62a502632fd8c2f220748f103aa027207014f2f3ed79a355bd0ec0e07a3c99fd96d03149f3c1f699b83d09255fd6403832f3f872edc3f2039145f1e33a420355b3177b961", 0x6c}, {&(0x7f0000000580)="bdab1919ee99b8f1ca019c2df08b53d097710f59d9fed1303aa573fb39ff17e55251698542752506fca23accaf52af2da52d10d44e6c4d8d39c237680e18be121c4b040cf712a8d6833fee1f003f22f0160f9156961e0b8b8a8a730a204c47b2b46855c21c1612f154ea5c236295dd3d97066698d6e29a7314b01d632ac0fdffa0b0f45e7926d3e26c93e0276cb0812a5d2dfd1afdaaf0afa594a6ede5", 0x9d}], 0x3, &(0x7f0000000680)}}, {{&(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x7282}, 0xff}}, 0xe4, &(0x7f0000002d80), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x10c8}, 0x9}], 0x2, 0x800) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000260, 0x0) 01:52:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x300}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026d, 0x0) 01:52:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 618.844523][T29703] binder: BINDER_SET_CONTEXT_MGR already set 01:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000261, 0x0) 01:52:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026e, 0x0) [ 618.893990][T29703] binder: 29700:29703 ioctl 40046207 0 returned -16 01:52:08 executing program 1: r0 = gettid() r1 = syz_open_dev$usbmon(0x0, 0x0, 0x200) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x1, 0xfffffffffffffffc}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) symlink(0x0, 0x0) umount2(0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$vnet(r3, 0x0, 0x0) 01:52:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x74000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x500}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000262, 0x0) [ 619.152099][T29726] binder_fixup_parent: 30 callbacks suppressed [ 619.152110][T29726] binder: 29725:29726 got transaction with invalid parent offset or type [ 619.167570][T29728] binder: BINDER_SET_CONTEXT_MGR already set [ 619.173601][T29728] binder: 29727:29728 ioctl 40046207 0 returned -16 [ 619.265559][T29726] binder_transaction: 47 callbacks suppressed [ 619.265578][T29726] binder: 29725:29726 transaction failed 29201/-22, size 64-16 line 3389 [ 619.280832][T29730] binder: 29727:29730 got transaction with invalid parent offset or type 01:52:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026f, 0x0) [ 619.356666][T29730] binder: 29727:29730 transaction failed 29201/-22, size 64-16 line 3389 01:52:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e70000000000000000"]) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000140)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) socket$caif_stream(0x25, 0x1, 0x2) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x10840) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) 01:52:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000263, 0x0) [ 619.411033][T27155] binder_release_work: 47 callbacks suppressed [ 619.411039][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 619.432180][T27155] binder: undelivered TRANSACTION_ERROR: 29201 01:52:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x600}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 619.470383][T29726] binder: BINDER_SET_CONTEXT_MGR already set [ 619.493790][T29739] binder_alloc: 29725: binder_alloc_buf, no vma [ 619.528062][T29726] binder: 29725:29726 ioctl 40046207 0 returned -16 [ 619.555214][T29739] binder: 29725:29739 transaction failed 29189/-3, size 64-16 line 3148 01:52:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000270, 0x0) [ 619.578160][T29749] binder: 29748:29749 got transaction with invalid parent offset or type [ 619.595760][T27155] binder: undelivered TRANSACTION_ERROR: 29189 01:52:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000700)="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") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\x00\x00\x00\x00`\x87\x00\xbdh\x00', 0x43732e5398416f1a}) dup3(r0, r1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0x1, 0x6}) [ 619.632636][T29749] binder: 29748:29749 transaction failed 29201/-22, size 64-16 line 3389 01:52:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000264, 0x0) [ 619.730300][T29751] binder_alloc: 29748: binder_alloc_buf, no vma [ 619.735535][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 619.810582][T29751] binder: 29748:29751 transaction failed 29189/-3, size 64-16 line 3148 [ 619.827296][T29761] binder: 29758:29761 got transaction with invalid parent offset or type 01:52:08 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x69c4}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x81, 0xa000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000240)=[0x3], 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000280)={r1, 0xfffffffffffffffb, 0xd, "7a4aa6202a86a3d41098bf4a709577d57b71441ff18d91f6c3ab0d7bd05f63e10ccb7427e63384e6a005fd9373a53aff07b48aa6ef208c31564e35dd04a8c46785a278b5e3b31dd45f3c6d72b35b425ca59e0645c2533bd44a079c4ab298334901ed864c16bee51f810876e657c8e14780f7902e8028b5440e"}) close(r0) 01:52:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000271, 0x0) [ 619.864884][T29761] binder: 29758:29761 transaction failed 29201/-22, size 64-16 line 3389 [ 619.893322][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 01:52:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x700}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 619.948975][T29761] binder: BINDER_SET_CONTEXT_MGR already set [ 619.955024][T29761] binder: 29758:29761 ioctl 40046207 0 returned -16 [ 619.980518][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 01:52:09 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x69c4}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x81, 0xa000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000240)=[0x3], 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000280)={r1, 0xfffffffffffffffb, 0xd, "7a4aa6202a86a3d41098bf4a709577d57b71441ff18d91f6c3ab0d7bd05f63e10ccb7427e63384e6a005fd9373a53aff07b48aa6ef208c31564e35dd04a8c46785a278b5e3b31dd45f3c6d72b35b425ca59e0645c2533bd44a079c4ab298334901ed864c16bee51f810876e657c8e14780f7902e8028b5440e"}) close(r0) [ 620.053974][T29778] binder: 29775:29778 got transaction with invalid parent offset or type [ 620.075629][T29778] binder: 29775:29778 transaction failed 29201/-22, size 64-16 line 3389 01:52:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x100000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000700)="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") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\x00\x00\x00\x00`\x87\x00\xbdh\x00', 0x43732e5398416f1a}) dup3(r0, r1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0x1, 0x6}) [ 620.113180][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 620.134238][T29780] binder: 29775:29780 got transaction with invalid parent offset or type 01:52:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000265, 0x0) 01:52:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000272, 0x0) [ 620.189623][T29780] binder: 29775:29780 transaction failed 29201/-22, size 64-16 line 3389 01:52:09 executing program 0: openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002002, 0x0) getpid() r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000001400)={0x0, 0x10000, 0x3031, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getresgid(0x0, 0x0, &(0x7f0000000280)) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a207bd25a5588b8bff2e1c2222551fbc604e3e3b37d3"], 0x1d) r3 = syz_open_dev$vcsn(&(0x7f0000001240)='/dev/vcs#\x00', 0x2, 0x470b00) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000001280)={[0x100000, 0x0, 0xd001, 0x13000], 0x5, 0x12}) bind$isdn_base(r3, &(0x7f0000001300)={0x22, 0x0, 0x80, 0x7}, 0x6) io_setup(0x101, 0x0) io_submit(0x0, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) r4 = timerfd_create(0x0, 0x8000000800) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x301000, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) read(r4, &(0x7f0000000200)=""/4096, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x101000, 0x104) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000001580)={0x1000, "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"}) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000001340)={'security\x00', 0x1c, "d059b4beca5ddc328bfe8b4628faa07d4e5071fa6911db1f7cab805e"}, 0x0) [ 620.232890][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 01:52:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 620.279307][T29793] binder: BINDER_SET_CONTEXT_MGR already set [ 620.342178][T29793] binder: 29789:29793 ioctl 40046207 0 returned -16 [ 620.380723][T29805] binder: 29804:29805 got transaction with invalid parent offset or type [ 620.404400][T29805] binder: 29804:29805 transaction failed 29201/-22, size 64-16 line 3389 [ 620.411154][T29802] binder: 29789:29802 got transaction with invalid parent offset or type [ 620.453096][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 620.477328][T29806] binder: BINDER_SET_CONTEXT_MGR already set [ 620.487923][T29802] binder: 29789:29802 transaction failed 29201/-22, size 64-16 line 3389 01:52:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000266, 0x0) 01:52:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000273, 0x0) [ 620.518424][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 620.525592][T29806] binder: 29804:29806 ioctl 40046207 0 returned -16 01:52:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:09 executing program 0: request_key(&(0x7f0000000100)='blacklist\x00', 0x0, &(0x7f0000000180)='+ppp0ppp0loppp0^,[\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000000002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x2}}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 01:52:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f1ffffff689571868a7daf98"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0x0, &(0x7f0000000180)="1c00ba9ba6c9ca7504000001a6ac9cf22470dc2b39b96a3764fc24e00ad900a047d226000000000034936a413e2a6b8cf4c8eebe6193c42d") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x103000}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:52:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x200000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000274, 0x0) [ 620.754708][T29824] binder: 29823:29824 got transaction with invalid parent offset or type 01:52:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001eb, 0x0) [ 620.809973][T29836] binder: BINDER_SET_CONTEXT_MGR already set 01:52:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000267, 0x0) [ 620.867225][T29836] binder: 29835:29836 ioctl 40046207 0 returned -16 [ 620.867305][T29842] binder: 29835:29842 got transaction with invalid parent offset or type 01:52:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x5000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000275, 0x0) [ 620.975549][T29842] binder: transaction release 5424 bad handle 1, ret = -22 01:52:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) 01:52:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x300000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000053c000000100000000f010000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 621.063068][T29853] binder: BINDER_SET_CONTEXT_MGR already set [ 621.098114][T29853] binder: 29852:29853 ioctl 40046207 0 returned -16 01:52:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0x0) 01:52:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f00000000c0)="0adc1f123c20000000da7016cb4140ef2f2d164a895e0d6101b05fd4504aa38aa0be6b3f909bc83dceb17ae844a1a5cd6c39a817196676ac75d86097b5e7fd8c1e57f72fdc48ac35426a187a8a9f08305208d8aa7ca84db988") ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0xa4, &(0x7f0000000580)="28b087b535f2f086222465bd56d773ebe7d103664871528a9283114088480c8aefd9f55994e1ce15b165473194206b6bc12f46b32d9191059c39dba41b29ba9e7e744b52a9152c3405985e902ec67ac3a483f8ed6fbfb8c194006c03a0bcebdefaf140d798c5c0b22c0a7ad58493a243064ce83dd849f5bc4f10858b4d4606c14d6f5c6f9ddb7000db38cc79a3d5c47f6a2adcd118696a69fca5136e0ff4fd9c2979dca3"}) accept$inet(r0, &(0x7f0000000500), &(0x7f0000000540)=0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, &(0x7f00000003c0)=""/244, &(0x7f0000000000)=0x20a) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x301100, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc0800004}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x5, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000240)) write$P9_RLCREATE(r3, &(0x7f00000006c0)={0xcb3869092bab7a0e, 0xf, 0x1, {{0x4, 0xffffffffffffffff, 0x8}, 0x3f8}}, 0x18) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)={0x68, r2, 0x306, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xd0, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48c0}, 0x4008001) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$setown(0xffffffffffffffff, 0x8, r4) [ 621.293877][T29876] binder: BINDER_SET_CONTEXT_MGR already set [ 621.305029][T29876] binder: 29874:29876 ioctl 40046207 0 returned -16 01:52:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x80000001, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc00455d0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000000c0)={0x2, 0x0, 0x1001, 0xa4, 0xbcf, {0x7f, 0x7}, 0x1}) 01:52:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000276, 0x0) [ 621.401051][T29882] binder: BINDER_SET_CONTEXT_MGR already set [ 621.426758][T29882] binder: 29881:29882 ioctl 40046207 0 returned -16 01:52:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x10001, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x29c867f68265d9b8, @multicast2, 0x4e24, 0x3, 'nq\x00', 0x1, 0x200, 0x4}, {@broadcast, 0x4e22, 0x2, 0xbc6, 0x1}}, 0x44) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x161002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @local}], 0x30) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x54) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 01:52:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x500000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000277, 0x0) [ 621.552793][T29899] IPVS: set_ctl: invalid protocol: 55736 224.0.0.2:20004 01:52:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000276, 0x0) [ 621.610412][T29901] binder: BINDER_SET_CONTEXT_MGR already set [ 621.648048][T29899] IPVS: set_ctl: invalid protocol: 55736 224.0.0.2:20004 01:52:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026a, 0x0) [ 621.672234][T29901] binder: 29900:29901 ioctl 40046207 0 returned -16 [ 621.679158][T29908] binder: BINDER_SET_CONTEXT_MGR already set [ 621.715430][T29908] binder: 29904:29908 ioctl 40046207 0 returned -16 01:52:10 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r0 = syz_open_dev$swradio(&(0x7f0000000540)='/dev/swradio#\x00', 0x1, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1, 0x599bd84e6fdbe604, 0xff) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) setfsuid(0xee00) unshare(0x40401fc) socket$key(0xf, 0x3, 0x2) r3 = fcntl$getown(r1, 0x9) getpgid(r3) read(r1, &(0x7f0000000200)=""/168, 0xa8) r4 = mq_open(&(0x7f0000000080)='crc32-generic\x00', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r4, &(0x7f00000001c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000002, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x37c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x7, @empty, 0x2}, @in6={0xa, 0x4e22, 0x5, @loopback}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0xbcaf, @remote, 0x401}, @in6={0xa, 0x4e24, 0xe41, @dev={0xfe, 0x80, [], 0x28}, 0x34}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}]}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000100), 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x0) mq_notify(r4, &(0x7f0000002940)={0x0, 0x3f, 0x1, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="5e8a4b8ec7834e71702e", 0xa) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4) 01:52:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000278, 0x0) 01:52:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x7f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbcc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 01:52:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7400}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 621.760056][T29908] binder: BINDER_SET_CONTEXT_MGR already set [ 621.797010][T29908] binder: 29904:29908 ioctl 40046207 0 returned -16 01:52:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x600000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026b, 0x0) 01:52:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000279, 0x0) 01:52:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:11 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='/dev/rfkill\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') pause() sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000380)={0x2, r1}) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000004c0)={0x100000000000, 0x40000009, 0x9, {0x0, 0x989680}, 0x40, 0x7}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x3, &(0x7f0000000200)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000001780)={0x0, 0x0, 0x7fffffff}) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000002c0)={0x3, 0x2, @raw_data=[0xff, 0x1f, 0x0, 0x7f, 0x7ff, 0x7, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1, 0x79c]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x7fffffff, @bearer=@l2={'eth', 0x3a, 'ipddp0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000100006006000700000000000000"], 0x14}}, 0x0) 01:52:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x700000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 622.077614][T29946] binder_alloc: 29939: binder_alloc_buf, no vma 01:52:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:11 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x1, 0x1000000000000000, 0xfffffffffffffffe, 0x6, 0x2}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x105000, 0xf000, 0x0, 0x4000], 0x6, 0x44, 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) read(r0, 0x0, 0x0) 01:52:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026c, 0x0) [ 622.213159][T29961] binder: BINDER_SET_CONTEXT_MGR already set [ 622.244966][T29961] binder: 29960:29961 ioctl 40046207 0 returned -16 01:52:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x2000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027a, 0x0) 01:52:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x5, 0xe538, 0x5, {0xb, @sliced={0xd13, [0x35b42f19, 0x9b, 0xc248ece, 0x7, 0x3, 0x6, 0x5, 0x7, 0x5, 0x2, 0x5, 0x8, 0x1, 0xffffffff, 0x400, 0x5, 0x4, 0x1, 0x1, 0x3ff, 0x5e1c, 0xffffffffffffffff, 0x5, 0xae69, 0x1ff, 0x8f, 0xd, 0x4000000000000, 0x4, 0x4, 0x8, 0x100000001, 0x2, 0x8, 0x80, 0x81, 0x1, 0x800, 0xfffffffffffffff7, 0xb375, 0x2, 0x3, 0x1ff0000000, 0x8, 0x93e, 0x4, 0x5, 0x5], 0x5}}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x6, [], 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1000000000000002) 01:52:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026d, 0x0) [ 622.409441][T29981] binder: BINDER_SET_CONTEXT_MGR already set [ 622.418808][T29981] binder: 29980:29981 ioctl 40046207 0 returned -16 [ 622.428722][T29981] binder: BINDER_SET_CONTEXT_MGR already set [ 622.434987][T29981] binder: 29980:29981 ioctl 40046207 0 returned -16 01:52:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x3000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 622.595655][T30001] binder: BINDER_SET_CONTEXT_MGR already set [ 622.621914][T30001] binder: 30000:30001 ioctl 40046207 0 returned -16 01:52:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000880)=0x7ffffffe) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x8040, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000800)={0x8000, 0x400, 0x2, 0x3ff, 0x9, 0x1000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x189) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f00000005c0)={&(0x7f0000000500)={&(0x7f0000000480)}}, &(0x7f0000000980)=0x239) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) dup3(r2, r2, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x8000}, &(0x7f0000000580)=0x8) setsockopt(r2, 0x0, 0xd5, &(0x7f0000000300)="c33931f8cce695955357c91e388540861c10f746f3468b0240e586fff06d5f7354c0bdd6e214b9e551ced114bf9d81f93fa8fab11ff4128ff2dd3573bbaa8ae2d08adebbe11a06663145e70b6dd5e0ee3899e88b00dd834bdc3d5b5b5cf67fe12abd9edb71e7445d2de54b", 0x6b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080480a00000046000107a277001419000a000d000000000003f5000000004800ef38bf461e59d7", 0x39}], 0x1) 01:52:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027b, 0x0) 01:52:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026e, 0x0) 01:52:12 executing program 1: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x2000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40400, 0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x13, 0x2, @thr={&(0x7f00000002c0)="76f6a277fbb919923d9c33eb60df8904988aadfc07a27e78691b0128a0902a6f0fd3e86e6d92045e6daa7081999d3ccbad207ce10efddab010ca733a03c667c660", &(0x7f00000000c0)}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000400)={{}, {r3, r4+30000000}}, &(0x7f0000000440)) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xfffffffffffffe85, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000e52721e64fc314174a5077161a3e80ca89e13eb5524fcc1fc6cb214af2b7b44370673920b9cd7779fde183e4bb05620c45ae7ce5a4d0af404006163c948f3e4f7ab6f8437dac59d846c8c44e538113ea8c1e6c7f3e49ffad1fc4ea92f24e030f4691171c3404566e8463e7f72c3ce6fa6529c6f13101572915913b16e05220ccbbf0083eb3ce8a75e8b142205fdcc85381a722c8785c8250567577c57786d8c0887862a34237eb9cc4b3c11af3015803d553e3be9a8574c6ae8165406f3cfead4a43a51dbe6c25", @ANYRES16=r5, @ANYBLOB="200026bd7000fedbdf25010000000800030033000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 01:52:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 623.114143][T30017] binder: BINDER_SET_CONTEXT_MGR already set [ 623.131701][T30017] binder: 30015:30017 ioctl 40046207 0 returned -16 01:52:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x5000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026f, 0x0) 01:52:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027c, 0x0) [ 623.172170][T30017] binder: BINDER_SET_CONTEXT_MGR already set [ 623.193480][T30017] binder: 30015:30017 ioctl 40046207 0 returned -16 01:52:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff9) [ 623.220223][T30025] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 01:52:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e24, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0xfffffffffffffff7, 0xb2, "84b05d3f7abb6b05824d92da947338826df054149d277b9d0a52cf3ebfa96d4d826123d3b6e4fc90f35e998fc7a7578f272b0a3e3b5e21b2384ce064b8a7efb09df8df68c5cf14d55697fa033efd0eb0fbe4bf6b7dc3a7b55606a70a94db649a6ccf93da296ca4247d1bacf5f551556570a131a86829b71f95156088d0493f668613e0032abb43c4a2e17d913221b093da9441bb7e1175829d4adf2ada62e2fcbedfe24f471abacbd7d4c477d7c2e5e14d35"}, 0xba) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r1) 01:52:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000880)=0x7ffffffe) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x8040, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000800)={0x8000, 0x400, 0x2, 0x3ff, 0x9, 0x1000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x189) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f00000005c0)={&(0x7f0000000500)={&(0x7f0000000480)}}, &(0x7f0000000980)=0x239) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) dup3(r2, r2, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x8000}, &(0x7f0000000580)=0x8) setsockopt(r2, 0x0, 0xd5, &(0x7f0000000300)="c33931f8cce695955357c91e388540861c10f746f3468b0240e586fff06d5f7354c0bdd6e214b9e551ced114bf9d81f93fa8fab11ff4128ff2dd3573bbaa8ae2d08adebbe11a06663145e70b6dd5e0ee3899e88b00dd834bdc3d5b5b5cf67fe12abd9edb71e7445d2de54b", 0x6b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080480a00000046000107a277001419000a000d000000000003f5000000004800ef38bf461e59d7", 0x39}], 0x1) 01:52:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000270, 0x0) 01:52:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x211d49, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaab9aaaaaa02070000000086dd60b409000030000802000000000010000000ffffe0000002ff020000000000000000000000000001820090780009290060b680fa0000000000000000000000ffffffff00000000000000000000ffffac14ffbb"], 0x0) 01:52:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027d, 0x0) [ 623.596533][T30062] binder: BINDER_SET_CONTEXT_MGR already set 01:52:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000880)=0x7ffffffe) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x8040, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000800)={0x8000, 0x400, 0x2, 0x3ff, 0x9, 0x1000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x189) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f00000005c0)={&(0x7f0000000500)={&(0x7f0000000480)}}, &(0x7f0000000980)=0x239) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) dup3(r2, r2, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x8000}, &(0x7f0000000580)=0x8) setsockopt(r2, 0x0, 0xd5, &(0x7f0000000300)="c33931f8cce695955357c91e388540861c10f746f3468b0240e586fff06d5f7354c0bdd6e214b9e551ced114bf9d81f93fa8fab11ff4128ff2dd3573bbaa8ae2d08adebbe11a06663145e70b6dd5e0ee3899e88b00dd834bdc3d5b5b5cf67fe12abd9edb71e7445d2de54b", 0x6b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080480a00000046000107a277001419000a000d000000000003f5000000004800ef38bf461e59d7", 0x39}], 0x1) 01:52:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000880)=0x7ffffffe) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x8040, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000800)={0x8000, 0x400, 0x2, 0x3ff, 0x9, 0x1000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x189) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f00000005c0)={&(0x7f0000000500)={&(0x7f0000000480)}}, &(0x7f0000000980)=0x239) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) dup3(r2, r2, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x8000}, &(0x7f0000000580)=0x8) setsockopt(r2, 0x0, 0xd5, &(0x7f0000000300)="c33931f8cce695955357c91e388540861c10f746f3468b0240e586fff06d5f7354c0bdd6e214b9e551ced114bf9d81f93fa8fab11ff4128ff2dd3573bbaa8ae2d08adebbe11a06663145e70b6dd5e0ee3899e88b00dd834bdc3d5b5b5cf67fe12abd9edb71e7445d2de54b", 0x6b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080480a00000046000107a277001419000a000d000000000003f5000000004800ef38bf461e59d7", 0x39}], 0x1) [ 623.646856][T30067] binder: BINDER_SET_CONTEXT_MGR already set [ 623.657165][T30062] binder: 30061:30062 ioctl 40046207 0 returned -16 [ 623.666690][T30067] binder: 30066:30067 ioctl 40046207 0 returned -16 [ 623.686789][T30071] binder_alloc: 30066: binder_alloc_buf, no vma 01:52:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000271, 0x0) 01:52:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027e, 0x0) 01:52:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000880)=0x7ffffffe) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x8040, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000800)={0x8000, 0x400, 0x2, 0x3ff, 0x9, 0x1000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x189) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f00000005c0)={&(0x7f0000000500)={&(0x7f0000000480)}}, &(0x7f0000000980)=0x239) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) dup3(r2, r2, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x8000}, &(0x7f0000000580)=0x8) setsockopt(r2, 0x0, 0xd5, &(0x7f0000000300)="c33931f8cce695955357c91e388540861c10f746f3468b0240e586fff06d5f7354c0bdd6e214b9e551ced114bf9d81f93fa8fab11ff4128ff2dd3573bbaa8ae2d08adebbe11a06663145e70b6dd5e0ee3899e88b00dd834bdc3d5b5b5cf67fe12abd9edb71e7445d2de54b", 0x6b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080480a00000046000107a277001419000a000d000000000003f5000000004800ef38bf461e59d7", 0x39}], 0x1) [ 623.904345][T30085] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 01:52:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0x4) [ 623.974507][T30098] binder: BINDER_SET_CONTEXT_MGR already set [ 623.985535][T30098] binder: 30097:30098 ioctl 40046207 0 returned -16 01:52:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x48000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 624.098970][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 624.134983][T30102] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 01:52:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000272, 0x0) 01:52:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x2}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027f, 0x0) [ 624.139318][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 624.148510][T30113] binder: BINDER_SET_CONTEXT_MGR already set [ 624.185616][T30113] binder: 30109:30113 ioctl 40046207 0 returned -16 01:52:13 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x8, 0x0) write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x2}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000ebf70fdf333f220005001a00050000000005598d0800ff7f00eb5dc803000000680300000097f021ca7d7c01b3060002"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x180, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, 0x5}, 0x10) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 01:52:13 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48051) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) [ 624.221382][T30116] binder_fixup_parent: 38 callbacks suppressed [ 624.221393][T30116] binder: 30109:30116 got transaction with invalid parent offset or type [ 624.259521][T30123] binder: BINDER_SET_CONTEXT_MGR already set [ 624.316075][T30116] binder_transaction: 53 callbacks suppressed [ 624.316109][T30116] binder: 30109:30116 transaction failed 29201/-22, size 64-16 line 3389 [ 624.330781][T30123] binder: 30122:30123 ioctl 40046207 0 returned -16 [ 624.344177][T30132] binder: 30122:30132 got transaction with too large buffer 01:52:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000280, 0x0) 01:52:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 624.389187][T30132] binder: 30122:30132 transaction failed 29201/-22, size 64-16 line 3357 [ 624.430293][T30133] device nr0 entered promiscuous mode [ 624.459584][T30142] binder: 30122:30142 transaction failed 29189/-22, size 64-16 line 2995 [ 624.465737][ T7985] binder_release_work: 54 callbacks suppressed [ 624.465745][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 01:52:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x5, 0x5, 0xfffffffffffff001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0x2, @loopback, 0x5}, {0xa, 0x4e21, 0x400, @remote, 0x8}, 0x9, [0x1, 0x7, 0x0, 0x7f, 0x6, 0x410, 0xffffffffffffffd4, 0x81]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000080)={{0xa}, {0x39f72d14, 0xfffffffffffff800}, 0x1, 0x0, 0x1}) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="6368616e6765687420307891834f99c05f0ebe3750fd3030303030323030304e504c7b000000"], 0x26) 01:52:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000273, 0x0) [ 624.476781][T30141] binder: 30140:30141 got transaction with invalid parent offset or type [ 624.519712][T25852] binder: undelivered TRANSACTION_ERROR: 29189 01:52:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000281, 0x0) [ 624.577942][T30141] binder: 30140:30141 transaction failed 29201/-22, size 64-16 line 3389 [ 624.625650][T25852] binder: undelivered TRANSACTION_ERROR: 29201 [ 624.636847][T30154] binder: 30140:30154 got transaction with invalid parent offset or type 01:52:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001580)={0x5, 0x0, [{0xd000, 0x4e, &(0x7f0000000200)=""/78}, {0x100000, 0x51, &(0x7f0000000280)=""/81}, {0xf000, 0xd9, &(0x7f0000000300)=""/217}, {0x0, 0x1000, &(0x7f0000000400)=""/4096}, {0x0, 0x7a, &(0x7f0000001500)=""/122}]}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000001400)=0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000084896cf3f977ce65e4a0da5ba16b8da40537bbefc26d7a07f175084c4028f0e70cc18d73dac75f0a816dd168d453d8c32c7b3a83ddaf8b8c7bd630f542f693cabeea8182e38b0339fc51c715435bcbba78fb8833d391d5b1c5e8bd6f5b27d26f39207025dba3796f351f9508fcd7eecee67ec7f75f53878c43b77c1e4f7144d037a2faecd61ab803f90a821a94069999ad0ecc1a43c5cee6cf702345e1ff1cabcd27e858baf87102dbb45f1fccb5b394bb958c3aedf6353a5ee603f51f7049ca316d0f647d167aaa"]) [ 624.667633][T30154] binder: 30140:30154 transaction failed 29201/-22, size 64-16 line 3389 01:52:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000274, 0x0) [ 624.746648][T25852] binder: undelivered TRANSACTION_ERROR: 29201 01:52:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000282, 0x0) 01:52:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x50000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000275, 0x0) [ 624.984526][T30133] device nr0 entered promiscuous mode [ 625.078410][T30185] binder: 30180:30185 got transaction with invalid parent offset or type [ 625.094395][T30187] binder: BINDER_SET_CONTEXT_MGR already set [ 625.105453][T30187] binder: 30176:30187 ioctl 40046207 0 returned -16 [ 625.115651][T30185] binder: 30180:30185 transaction failed 29201/-22, size 64-16 line 3389 [ 625.132519][T30187] binder: 30176:30187 got transaction with too large buffer [ 625.162212][T30187] binder: 30176:30187 transaction failed 29201/-22, size 64-16 line 3357 [ 625.216059][T30185] binder: 30180:30185 got transaction with invalid parent offset or type [ 625.217055][T30187] binder: 30176:30187 got transaction with too large buffer [ 625.229241][T30185] binder: 30180:30185 transaction failed 29201/-22, size 64-16 line 3389 [ 625.238363][T30187] binder: 30176:30187 transaction failed 29201/-22, size 64-16 line 3357 01:52:14 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8921, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x7fffffff, 0x0, 0x80000000}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'nlmon0\x00', &(0x7f0000000100)=@ethtool_dump={0x0, 0xffff, 0x100000001, 0xd1, "56767ebf0f050a087a04bee63b39571e86cf30c7231b6689fcbdccc86d8ff2ffea1d2a5c836d6d1fc4f6037be3f46a288e62dd73bd95ec9fd3972e828372ee1322cd6ba235bd35fbd54b9fb57b3aa493eda2635e66deee9959dd0a49bd14da0aa9dfe6582c7d83cb486ce50bfb08f832758fdd4b38568465b63a98aedefcaabba54e7a04828fa47cb594a77bc87abf812940caeae996c100101d04fd664ecfeee6b84bbd8d24abf131b051f26ba063948ff2a4276e5ad33db62f0bba7fefb7eb4c2de4a4a629c77abd1e91f4c168bc8308"}}) 01:52:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x68000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001580)={0x5, 0x0, [{0xd000, 0x4e, &(0x7f0000000200)=""/78}, {0x100000, 0x51, &(0x7f0000000280)=""/81}, {0xf000, 0xd9, &(0x7f0000000300)=""/217}, {0x0, 0x1000, &(0x7f0000000400)=""/4096}, {0x0, 0x7a, &(0x7f0000001500)=""/122}]}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000001400)=0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000084896cf3f977ce65e4a0da5ba16b8da40537bbefc26d7a07f175084c4028f0e70cc18d73dac75f0a816dd168d453d8c32c7b3a83ddaf8b8c7bd630f542f693cabeea8182e38b0339fc51c715435bcbba78fb8833d391d5b1c5e8bd6f5b27d26f39207025dba3796f351f9508fcd7eecee67ec7f75f53878c43b77c1e4f7144d037a2faecd61ab803f90a821a94069999ad0ecc1a43c5cee6cf702345e1ff1cabcd27e858baf87102dbb45f1fccb5b394bb958c3aedf6353a5ee603f51f7049ca316d0f647d167aaa"]) 01:52:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000283, 0x0) 01:52:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000276, 0x0) 01:52:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 625.384606][T30206] binder: BINDER_SET_CONTEXT_MGR already set [ 625.407864][T30206] binder: 30202:30206 ioctl 40046207 0 returned -16 [ 625.411401][T30205] binder: BINDER_SET_CONTEXT_MGR already set [ 625.435614][T30205] binder: 30199:30205 ioctl 40046207 0 returned -16 [ 625.444908][T30206] binder_alloc: 30180: binder_alloc_buf, no vma [ 625.463399][T30206] binder: 30202:30206 transaction failed 29189/-3, size 64-16 line 3148 [ 625.475133][T30205] binder_alloc: 30180: binder_alloc_buf, no vma 01:52:14 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='/md5sum*em1eth0:5\x00', 0xfffffffffffffffa) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) fcntl$setstatus(r0, 0x4, 0x800) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, r1) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x10d100) pselect6(0x40, &(0x7f0000000300)={0x2, 0x3, 0x2, 0x1, 0x0, 0x8, 0x4, 0x3}, &(0x7f0000000340)={0x4, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x7f, 0x9, 0x0, 0x9, 0x1}, &(0x7f0000000380)={0x3f, 0x200, 0x1, 0x10001, 0x1a0000000000000, 0xffff, 0x7fffffff, 0xd52}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={0xffff}, 0x8}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) keyctl$read(0xb, r2, &(0x7f00000000c0)=""/17, 0x11) 01:52:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000277, 0x0) [ 625.492140][T30205] binder: BINDER_SET_CONTEXT_MGR already set [ 625.546021][T30205] binder: 30199:30205 ioctl 40046207 0 returned -16 [ 625.546433][T30206] binder: BINDER_SET_CONTEXT_MGR already set 01:52:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x3, 0x1, 0x2, 0x8, 0x2, [{0x800, 0x1, 0x80000000, 0x0, 0x0, 0xa}, {0x5, 0x800, 0x3, 0x0, 0x0, 0x2000}]}) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x2013, r0, 0x0) read(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) [ 625.588942][T30212] binder_alloc: 30180: binder_alloc_buf, no vma [ 625.589114][ T2825] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.615446][T30206] binder: 30202:30206 ioctl 40046207 0 returned -16 01:52:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) [ 625.638217][ T2825] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.663228][ T2825] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.690667][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:52:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x5}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000278, 0x0) 01:52:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 625.711204][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 625.721389][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 01:52:14 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10480, 0x82) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) [ 625.822803][T30234] binder: 30233:30234 got transaction with too large buffer [ 625.836335][T30236] binder: BINDER_SET_CONTEXT_MGR already set 01:52:14 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet(0x10, 0x805, 0x4000000000000002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000001c0)="4c0000001300ff09fffd956fa283b700008c0e0a000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 625.875857][T30236] binder: 30235:30236 ioctl 40046207 0 returned -16 [ 625.883169][T30242] binder: 30233:30242 got transaction with too large buffer 01:52:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000279, 0x0) 01:52:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000285, 0x0) [ 625.935516][T30248] binder: 30235:30248 got transaction with invalid parent offset or type [ 625.948961][T30236] binder: BINDER_SET_CONTEXT_MGR already set [ 625.990694][T30248] binder: 30235:30248 got transaction with invalid parent offset or type 01:52:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) signalfd4(r1, &(0x7f0000000140)={0x10001}, 0x8, 0x80800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x200200, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x6000, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r3, 0x1, 0xfffff000, 0xfffff000}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/185, 0xb9}], 0x4, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10900, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000080)) ioctl$TCSETAW(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 01:52:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:15 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:nodev 00000000000000000057'], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x428, 0x0, 0x800000, 0x1}, 0x14) [ 626.032867][T30236] binder: 30235:30236 ioctl 40046207 0 returned -16 01:52:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027a, 0x0) 01:52:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000286, 0x0) [ 626.093281][T30248] binder: transaction release 5620 bad handle 1, ret = -22 [ 626.145711][T30266] binder: 30262:30266 got transaction with too large buffer [ 626.153155][T30269] encrypted_key: keyword 'new' not allowed when called from .update method 01:52:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x74000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) socket$vsock_dgram(0x28, 0x2, 0x0) 01:52:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027b, 0x0) 01:52:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000287, 0x0) [ 626.206746][T30278] binder: 30262:30278 got transaction with too large buffer [ 626.294205][T30283] binder: 30282:30283 got transaction with invalid parent offset or type [ 626.311251][T30285] binder: BINDER_SET_CONTEXT_MGR already set 01:52:15 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_mreq(r0, 0x0, 0x21, 0x0, 0x0) [ 626.379239][T30285] binder: 30284:30285 ioctl 40046207 0 returned -16 [ 626.379419][T30297] binder: 30284:30297 got transaction with too large buffer [ 626.419398][T30295] binder: 30282:30295 got transaction with invalid parent offset or type [ 626.453095][T30297] binder: transaction release 5635 bad handle 1, ret = -22 01:52:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027c, 0x0) 01:52:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000288, 0x0) [ 626.533877][T30305] binder: 30284:30305 got transaction with too large buffer [ 626.596370][T30305] binder: transaction release 5642 bad handle 1, ret = -22 01:52:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1200008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r1, &(0x7f0000000100)=""/160, 0xa0, 0x2000, &(0x7f0000000040)={0xa, 0x4e21, 0xff, @loopback, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0xa2ffff) [ 626.653117][T30313] binder: 30312:30313 got transaction with invalid parent offset or type 01:52:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x48}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027d, 0x0) 01:52:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000289, 0x0) 01:52:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x100000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 626.848049][T30323] binder: BINDER_SET_CONTEXT_MGR already set [ 626.873365][T30323] binder: 30322:30323 ioctl 40046207 0 returned -16 [ 626.927016][T30329] binder: 30322:30329 got transaction with too large buffer [ 626.974574][T30333] binder: BINDER_SET_CONTEXT_MGR already set [ 627.013269][T30333] binder: 30331:30333 ioctl 40046207 0 returned -16 [ 627.087191][T30337] binder: BINDER_SET_CONTEXT_MGR already set [ 627.109065][T30337] binder: 30331:30337 ioctl 40046207 0 returned -16 01:52:16 executing program 0: rmdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x100) r0 = shmget(0x1, 0x4000, 0x7800000a, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101000, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f00000000c0)="a7cf31510415c3c613ec2bb646650ab17701a381e9fb5055e158", 0x1a) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) recvfrom$inet6(r1, &(0x7f0000000100)=""/204, 0xcc, 0x2, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffffffffffd, @rand_addr="8a296b515d058fe7e6248c3067214ce1", 0x6d8}, 0x1c) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000240)={[0x6000, 0x0, 0x100000, 0x2], 0x3, 0x1, 0x6}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0xfff]}, 0x6) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x2) mknod$loop(&(0x7f00000003c0)='./file0/file0\x00', 0x1200, 0x1) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KDSETLED(r1, 0x4b32, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x3}}, 0x3, 0x1ff, 0xffffffffffffffff, 0x3, 0xffffffffffffff41}, &(0x7f0000000500)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x7ff, 0x1000, 0x7, 0x1, 0x1}, &(0x7f0000000600)=0x98) removexattr(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000006c0)=[@in6={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x1}, @in={0x2, 0x4e23, @loopback}], 0x2c) write$P9_RMKNOD(r1, &(0x7f0000000700)={0x14, 0x13, 0x2, {0x60, 0x0, 0x4}}, 0x14) sendmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)}, 0x6}], 0x1, 0x4800) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000007c0)=0x7, 0x4) alarm(0x14321937) write$P9_RWSTAT(r1, &(0x7f0000000800)={0x7, 0x7f, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000840)={0xfffffffffffffff9, 0x1, 0x5, 0xfffffffffffffff8, 0x9, 0x20}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r4 = getpgid(0x0) prlimit64(r4, 0x7, &(0x7f0000000880)={0x6, 0xec3}, &(0x7f00000008c0)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000940)={0x0, @bt={0xafe, 0x1, 0x0, 0x3, 0x1, 0x10001, 0x1000, 0x2, 0x5, 0x6, 0x5, 0x3, 0x9, 0x9, 0x4, 0x18}}) 01:52:16 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x4000000000001, 0x3}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 01:52:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028a, 0x0) 01:52:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027e, 0x0) 01:52:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x200000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 627.270452][T30351] binder: BINDER_SET_CONTEXT_MGR already set [ 627.298260][T30351] binder: 30344:30351 ioctl 40046207 0 returned -16 01:52:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x300000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x68}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027f, 0x0) 01:52:16 executing program 0: inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x100000000a, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_execute_func(&(0x7f0000000340)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 01:52:16 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xd855, 0x12001) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) fanotify_init(0x3c, 0x80002) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000700)="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") ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) openat(r0, &(0x7f0000000100)='./file0\x00', 0x101800, 0x9) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x541000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xc767, 0x2, "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", 0x65, 0x10000, 0x1f, 0x401, 0x4, 0x80, 0x8}, r3}}, 0x120) 01:52:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028b, 0x0) [ 627.487974][T30371] binder: BINDER_SET_CONTEXT_MGR already set [ 627.522036][T30371] binder: 30370:30371 ioctl 40046207 0 returned -16 01:52:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000280, 0x0) 01:52:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028a, 0x0) [ 627.552790][T30371] binder: BINDER_SET_CONTEXT_MGR already set 01:52:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 627.616047][T30371] binder: 30370:30371 ioctl 40046207 0 returned -16 01:52:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:16 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x22) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) semctl$GETPID(0x0, 0x0, 0xb, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") migrate_pages(0x0, 0x2a, &(0x7f00000004c0)=0xfffffffffffffffe, &(0x7f0000000000)=0x2) 01:52:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x500000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000281, 0x0) [ 627.863819][T30404] binder: BINDER_SET_CONTEXT_MGR already set 01:52:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028c, 0x0) 01:52:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x74}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 627.906254][T30404] binder: 30403:30404 ioctl 40046207 0 returned -16 01:52:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028a, 0x0) 01:52:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000282, 0x0) 01:52:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x600000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7a}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028d, 0x0) 01:52:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="554d8c4a1400192340834f80399b21c564ddc307c24cf47b5f6255c07eb8562cc597847645485ff0f85bcfacee694d5b4a7cc98911e76ad0b207551b498f690ac57cb796387488335f7426fda9174cc52a9ce488ef70c82f67698e0c7d1b99c9171925f1c5", 0x65}], 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x401}, {{&(0x7f0000000440)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/183, 0xb7}], 0x3}, 0x6a}], 0x2, 0x100, &(0x7f0000000700)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000180)=0x1e) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) getpgid(0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x10001, 0x10201) unshare(0x40000000) 01:52:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000283, 0x0) [ 628.203227][T30433] binder: BINDER_SET_CONTEXT_MGR already set [ 628.270630][T30433] binder: 30431:30433 ioctl 40046207 0 returned -16 01:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="1dfe5c70966c64f85cf6ddf4055fbcf0dc75e5aa4fcfe2bb846d4a3aaba913da6be3560000dd5826b98260ef7f0bc49b92599699733a0cbe833b7f733660bc7d14d7f583176123b2a3e557d04d46346f41ba5b2aedcc66b9e0e435eea6e3a0d5027a24dc5740853cfc66203e77fbdd580e5dcdf02c24198c80920497ce44dd3963e7d8eeed2bf2055295728adfb8467b057a167f190723b13304f5921ec76d0deedb", 0xa2) sendto(r1, &(0x7f00005c8f58), 0xffffffffffffff54, 0x8dffffff, 0x0, 0xfffffffffffffe29) 01:52:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x700000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 628.388430][T30442] IPVS: ftp: loaded support on port[0] = 21 01:52:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x300}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028e, 0x0) [ 628.451679][T30453] binder: BINDER_SET_CONTEXT_MGR already set [ 628.482173][T30453] binder: 30446:30453 ioctl 40046207 0 returned -16 01:52:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) [ 628.543610][T30457] binder: BINDER_SET_CONTEXT_MGR already set [ 628.575475][T30457] binder: 30456:30457 ioctl 40046207 0 returned -16 01:52:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028f, 0x0) [ 628.731295][T30472] binder: BINDER_SET_CONTEXT_MGR already set [ 628.747999][T30472] binder: 30467:30472 ioctl 40046207 0 returned -16 01:52:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000285, 0x0) 01:52:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x500}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000290, 0x0) [ 628.945632][T30485] binder: BINDER_SET_CONTEXT_MGR already set [ 628.955785][T30485] binder: 30480:30485 ioctl 40046207 0 returned -16 [ 629.203326][T30492] IPVS: ftp: loaded support on port[0] = 21 01:52:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') r1 = dup3(r0, r0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000001800)={0x0, 0x100000000}, &(0x7f0000001840)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000001880)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000018c0)=0x28) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000001900)={0x8, 0x7fffffff, 0x8000, 0x8, 0x2, 0xe1, 0x5, 0xffffffff, 0x0}, &(0x7f0000001940)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000001d40)={0x0, 0x7ff}, &(0x7f0000001d80)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001dc0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8, 0x4, 0x7, 0x1f, 0xffff}, &(0x7f0000001e80)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000001ec0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x7ff, 0x400, 0x3f, 0x7, 0x18}, &(0x7f0000001f80)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002340)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002380)=0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000023c0)={0x0, 0xffffffff, 0x80000000, 0x6, 0x6c, 0x40}, &(0x7f0000002400)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000002440)={0x0, 0x7a, "89c29ca3e4bf73bdc2777c5f46fcf6ca1854942f1250b6597af652480262f7b34d48713df3d2db1dd05c186ed1640e2051b72bc46b444db2a0e68dc14e8727243ec2e73787ae79943cd12258e04fd5ed91e9aa7e4b873fb7a8c1634af184e297bda3552d161d0b4dc72db31691f05de525772638a476d2775246"}, &(0x7f0000002500)=0x82) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000002800)) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000027c0)={0x2, 0xfffffffffffffe01, [{0x20, 0x0, 0xe99a}, {0x2, 0x0, 0x7}]}) sendmmsg$inet_sctp(r1, &(0x7f0000002600)=[{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x101, @mcast2, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="63227b02f8ce60e8de650f8636d5578dc3f7627af5acf0d88ff2951138d52ccdf147d537032d145d42bfb21fcd6f703d9db7b99b93a26d20aa9ecda016d6d1499e3aa41f984387227b7dcc08c1c9b8eaa33d546cac846859625be8460b15000acb66ad1ad799d619adde703117fe88dbdba0ef542e851ec6e9cec4ccb5d09ac9037bc91de7c6f3323453c0fad8a1528441cb8481f158b7b5a161080ac4c1203ff73f2784dfbdefe969972a1a7e80237e969b787c531de84607", 0xb9}, {&(0x7f0000000340)="970524ec8f46451149b07c4799c290bffbe04348ea946e927e2b4580a067ab28bd2c67b3a22ab9c613ba4a09331269738199f866588394e5963e4e3282b9a053e3e66e8bc0a84e4f53bcbac0149ce7608500578d39b4d8a995edbb7e345d97e548a3e33fdeee6d31bdfd281f99ea5cc26d2ba782ccd3f41ef5bda824473a7b19caa86ed8e728a455e085fbd30724bb8b3247ca14572cc29c750c4887a5060118b0295e72c76226f693f3440f0cfc65f863c07352973aa7aa80484db5bd6150338a728122bb30aeba27f08a77b19b431f83c892baa431", 0xd6}], 0x2, 0x0, 0x0, 0x4000}, {&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x8001, @empty, 0x3}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000440)="2e8e09ccaa98b42dac013ef6f1aa36d7d676218d3ee80fc6e87347db07bdea0ffd05dd634094732d074b8cc8b65819df8ba2157782490efad9e4bcaeda547944c0b54147f5e13de9f08df5d4d532867f44b5819d907f421e2fa83df60f0ced1998e6abc4c588d2b89b21da3edcaca73721cac2e9a6f986949dd951749850082b04610384f7481222de98208ad4e745889077", 0x92}, {&(0x7f0000000500)="5f27d81501cf8d62ef3d6250d865dfd823971301a7f14053002e36d22fba6bd5f526ecb58c37ed07b7216929dd1ca284ccd402a10d9dce8f8d64996c72aad895a58f7570811da3fbb01eda75cb415c951135167f3b59f6551130f44851f445b9f1e349787f917f1cebd2b2be46e3e26eb89550a0c70a3bc4fc62ae3f49", 0x7d}, {&(0x7f0000000580)="c345929edd193d7ecc85d6c62aa5a6ac04d2dd8ab5291875d0c065d91aeda35772c9c7ed02232d1b3a9ae4630d936d2f37ea7002e4a87ecf194bb86c4595fe37df4ad5140b0b75f754c821f7c1089e85d786a5830540431bfb9c345faa2f5c410c2294495a1cbb8125963ca5b348ed2f279aed3fc6967ddb4bf333e5ca74bece007c248c5119ba833a40c91c750df3b7b0e2e07968e5b6fbeeafe5b19f2b21999838", 0xa2}, {&(0x7f0000000640)="2df197e13ae20f7cc5a827542984839bd5dad047960fd75b9b1acaa365bf5e647bc875125a388e8b686780b9edc9f0894bc511d498467ecaacc75769195ad10b6da1c169695db7e4c6018e4197e94a912fbadd8eb234d8b4d9d6277ec592b6992b", 0x61}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="44953faa08293f4e152ab79c125fede509fbeff8284bfa206951cae6c5eeb5af08ad636757ec430a734fd92c2f6ed8594b208f6aff60e13d2f8273e76c5862c6f1dcd4fefe40a48b3977790b41bdce8e27677865ea2ccefbb7ba930704ab46fac540c675fc4f6000792cbd13ccf28eedf04e04b8da5ca90935d18cdbbaea9d153dccc7e7d631cd8644ee570b79a7c9a6a5f3004ea1ed4b4d89ae1a9f4ba98ca910e7bfdb3f3bcd5a", 0xa8}], 0x6, &(0x7f0000001980)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x7, 0x1, 0x2400000000, 0xe5e0, 0x6, 0x100000000, 0xb0, r2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x206, 0x0, 0x8, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x20c, 0xfffffffffffffffb, 0x4, r4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x20}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x81}}], 0xd8}, {&(0x7f0000001a80)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="13276385ded883de999650b8f469800827184b4420815ff65d1d5813c8d30bb63968a409b4dcb9f8f8dbe6b0b934a96a83691fc3b18a45a52484da9783f370a80c5b66984463bbd230b1fd88d2df35a48883", 0x52}, {&(0x7f0000001b40)="5bf4227269058696d5b970e91c4a52c94ef5e35488b36294a1cca735a4e22ee1b458e9402c6ce913ae1c11fc7368209dad89945b19b3b81520af35a85756d25b013b02e88d6dac5999f87294a9793be4e646ace5e4e5c62bccf3723384698b41a45714b90587682d5da56b62f9725801dc6caa8fef6cf8b364ad45430925cd1302", 0x81}, {&(0x7f0000001c00)="7a5d589011323b22efd73baa12aa034104cb22c3fac0dafe12a5407a66fab7c64364a666951f3a707b422997bae3c7f34cb0fceef1a0391805043883dd192769d30ecac336264f964e7fc3a90bad2df115d8ec1acc7f52b0fea96b7eb12b1af97108a3c48526385873b8237b8ce6eeae5a5666733ede0ebe4a272e801a95", 0x7e}, {&(0x7f0000001c80)="9f54944b86fe4b2e77ef012348406ffb181f26e17f4619f9030a2d098ac23df4755d4aa4577330ac1db33585e0943bab9c224c05d8186e7e716f5d79f8fe9c48d3e369290d956a3fe221a02dc4f5d012596decd86c3ed9750054a21a09849d6116df92c7147e5e6c37e3146f16c94976759f5fa7", 0x74}], 0x4, &(0x7f0000001fc0)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x6, 0x0, r5}}, @init={0x18, 0x84, 0x0, {0x4, 0x13, 0x100000001, 0x80d}}, @init={0x18, 0x84, 0x0, {0x1, 0x5, 0x7fff, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x374}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0x1, 0x100, 0x0, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8, 0x2af, 0x80000001, r7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4a}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x445}}, @init={0x18, 0x84, 0x0, {0x100000001, 0xffffffffffffffee, 0x2, 0xfff}}], 0x108, 0x4000000}, {&(0x7f0000002100)=@in6={0xa, 0x9, 0x0, @loopback, 0x400}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000002140)="d4a69751440f92dccddd0b783ead3b585648031b05deb7d232012c815edbd70cf15478ac633ecf6ef07381ff6fd08af7b762581dcf4d96fc", 0x38}, {&(0x7f0000002180)="7ccdb76e4e726cb6077f1a199cefcd8c1e72a9343f956c120375600cd39d1c372e8a29354fcd3450cc4f84a9f73a5953e31f2a63022e74f0cbe463eafc975a1ca41f8e0bbb35b42aad728348b7572a816a1202faf4a5c76ab5b92d674e9673eb5b2469da5f6f7bb55ef3cc6b309b0396d168a1a69e4fee65f14a9e1ac3904af487c6d5c03376f6c0d1c1ec634e5e2ef5d32d593a5281ae0f4fd9d29ef63ff4d09f7801940193d7ac8e269428", 0xac}, {&(0x7f0000002240)="8440d2ff7ef53d380018cc1d6aa0997283721ecbf140c61cb9488c2ce4ac53f69ed81321c5714eb4395e66c26dfe14b1f27a8f08f7b1cdf5a7ab3f3ba6bdfc5d7979d3ae7cb5e5902c4265c338df57490e9f454f12aa0d3e58f1c0777657d6267428a621a64fbaf7bd5365d67f6b66c4b425a0c579131553cc85574e1fb5fe420d6976a6ae911414ea4958b54e4f663718deef9c846eca3a11013ef18eccfe", 0x9f}], 0x3, &(0x7f0000002540)=[@sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff9, 0x9, 0x8202, 0xc11a, 0x8, 0x5, 0x1, 0x3, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x4, 0x634, 0x3e7, r9}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0xd8, 0x6, 0x7fffffff, 0x7c, 0x2, 0x7ff, 0x9, r10}}], 0xb8, 0x4000000}], 0x4, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4a0080, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r11, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x40, 0x1, 0x1, 0x3, 0x6, 0x4, 0x1f, 0x932, 0x20, 0x1ff, 0x1f, 0x800, 0x5, 0x1, 0x10, 0x20}}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x13') ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r12, 0xc0845658, &(0x7f0000002700)={0x0, @bt={0x7, 0x10000, 0x1, 0x0, 0x2, 0x65, 0x5, 0x7, 0x319442d9, 0xffffffff, 0x3ff, 0x2a, 0x1, 0xffff, 0x10, 0x10}}) 01:52:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x4c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 629.361568][T30500] binder_fixup_parent: 13 callbacks suppressed [ 629.361579][T30500] binder: 30499:30500 got transaction with invalid parent offset or type [ 629.390313][T30500] binder_transaction: 46 callbacks suppressed [ 629.390331][T30500] binder: 30499:30500 transaction failed 29201/-22, size 64-16 line 3389 01:52:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x600}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000291, 0x0) 01:52:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000286, 0x0) 01:52:18 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) r1 = mq_open(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) ioctl$RTC_UIE_ON(r0, 0x7003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x400000000000a) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='nlmon0\x00', 0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) prctl$PR_GET_THP_DISABLE(0x2a) ftruncate(r4, 0x200004) fstatfs(r2, &(0x7f0000000100)=""/62) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) setfsgid(0x0) sendfile(r2, r4, 0x0, 0x80003f000000) [ 629.400786][T30503] binder: 30499:30503 got transaction with invalid parent offset or type [ 629.414007][T30503] binder: 30499:30503 transaction failed 29201/-22, size 64-16 line 3389 01:52:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x5000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x2, 0x113000) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xfb}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x200, @ipv4={[], [], @empty}, 0x1ff}, {0xa, 0x4e20, 0xfff, @ipv4={[], [], @broadcast}, 0x8ab2}, r5, 0x1000}}, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 629.478979][T30509] binder_transaction: 11 callbacks suppressed [ 629.478990][T30509] binder: 30508:30509 got transaction with too large buffer [ 629.485216][T30509] binder: 30508:30509 transaction failed 29201/-22, size 64-16 line 3357 [ 629.578856][ T5] binder_release_work: 47 callbacks suppressed [ 629.578863][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 629.594525][T30520] binder: BINDER_SET_CONTEXT_MGR already set [ 629.617388][T30521] binder: BINDER_SET_CONTEXT_MGR already set 01:52:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000292, 0x0) [ 629.624074][T30520] binder: 30516:30520 ioctl 40046207 0 returned -16 [ 629.646620][T30521] binder: 30508:30521 ioctl 40046207 0 returned -16 [ 629.662898][T30526] binder_alloc: 30508: binder_alloc_buf, no vma [ 629.702514][T30526] binder: 30516:30526 transaction failed 29189/-3, size 64-16 line 3148 [ 629.702697][T30522] binder_alloc: 30508: binder_alloc_buf, no vma 01:52:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000287, 0x0) [ 629.744695][T27155] binder: undelivered TRANSACTION_ERROR: 29189 [ 629.760424][T30520] binder: 30516:30520 transaction failed 29189/-22, size 64-16 line 2995 01:52:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x0, 0x0) mlockall(0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r1, 0x100000000, r0}, 0x10) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 629.805500][T30522] binder: 30508:30522 transaction failed 29189/-3, size 64-16 line 3148 [ 629.812843][T27155] binder: undelivered TRANSACTION_ERROR: 29189 01:52:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000293, 0x0) [ 629.848881][T27155] binder: undelivered TRANSACTION_ERROR: 29189 01:52:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:19 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x2040, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, [], @bt={0xffff, 0x100, 0x100000000, 0x3f, 0x7, 0xfffffffffffff000, 0x8, 0xf}}) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r2) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) r4 = getpid() capset(&(0x7f0000000100)={0x19980330, r4}, &(0x7f0000000140)={0x40, 0x5, 0x2d140691, 0x4, 0x6, 0x9}) write(r3, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0xb0) 01:52:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x700}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 630.041029][T30544] binder: 30543:30544 got transaction with invalid parent offset or type [ 630.062215][T30546] binder: BINDER_SET_CONTEXT_MGR already set 01:52:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000294, 0x0) [ 630.097654][T30546] binder: 30545:30546 ioctl 40046207 0 returned -16 [ 630.136760][T30544] binder: 30543:30544 transaction failed 29201/-22, size 64-16 line 3389 [ 630.138445][T30554] binder: 30545:30554 got transaction with too large buffer 01:52:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000288, 0x0) [ 630.188284][T30554] binder: 30545:30554 transaction failed 29201/-22, size 64-16 line 3357 [ 630.196212][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 630.216336][T30557] binder: 30543:30557 got transaction with invalid parent offset or type [ 630.268242][T27155] binder: undelivered TRANSACTION_ERROR: 29201 [ 630.277855][T30546] binder: BINDER_SET_CONTEXT_MGR already set [ 630.309161][T30546] binder: 30545:30546 ioctl 40046207 0 returned -16 [ 630.312851][T30554] binder: 30545:30554 got transaction with too large buffer [ 630.316263][T30557] binder: 30543:30557 transaction failed 29201/-22, size 64-16 line 3389 [ 630.385620][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 630.405696][T30554] binder: 30545:30554 transaction failed 29201/-22, size 64-16 line 3357 [ 630.449809][T27155] binder: undelivered TRANSACTION_ERROR: 29201 01:52:19 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) r1 = mq_open(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) ioctl$RTC_UIE_ON(r0, 0x7003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x400000000000a) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='nlmon0\x00', 0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) prctl$PR_GET_THP_DISABLE(0x2a) ftruncate(r4, 0x200004) fstatfs(r2, &(0x7f0000000100)=""/62) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) setfsgid(0x0) sendfile(r2, r4, 0x0, 0x80003f000000) 01:52:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4800}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000295, 0x0) 01:52:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x2282, &(0x7f0000000200)) 01:52:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x6c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000289, 0x0) [ 630.561374][T30572] binder: BINDER_SET_CONTEXT_MGR already set [ 630.649269][T30576] binder: 30575:30576 got transaction with too large buffer [ 630.649739][T30582] binder: 30571:30582 got transaction with invalid parent offset or type [ 630.672119][T30572] binder: 30571:30572 ioctl 40046207 0 returned -16 01:52:19 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="40dd8d000000000000000000000000001d22931fc602786dc562bb5d9d2d673d1d05372558535ec7b0658afe76c544c49f27f9680f4a2ad3a4d37f8399a24c54a17b3629c15fdb1f802c71"]}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000000c0)='\xbdmp\x17\x00\x9b\xbeW') [ 630.706559][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 630.714537][T30583] binder: BINDER_SET_CONTEXT_MGR already set [ 630.733255][T30584] binder: 30575:30584 got transaction with too large buffer 01:52:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028a, 0x0) [ 630.789454][T30583] binder: 30575:30583 ioctl 40046207 0 returned -16 [ 630.816734][ T2825] binder: undelivered TRANSACTION_ERROR: 29201 [ 630.824925][T30572] binder: BINDER_SET_CONTEXT_MGR already set 01:52:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000296, 0x0) 01:52:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c00}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 630.862043][T30572] binder: 30571:30572 ioctl 40046207 0 returned -16 01:52:20 executing program 0: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x46, 0x45, 0x3, 0x80000001, 0x7fff, 0x8, 0x9, 0x7fffffff, 0x80000000, 0x5, 0xfffffffffffffffc, 0x5, 0x4, 0x10001, 0xa4f]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x4}, 0x8) renameat2(r0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3) 01:52:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 631.043457][T30601] binder: 30600:30601 got transaction with too large buffer [ 631.090288][T30607] binder: BINDER_SET_CONTEXT_MGR already set [ 631.128409][T30609] binder: 30600:30609 got transaction with too large buffer [ 631.139837][T30607] binder: 30605:30607 ioctl 40046207 0 returned -16 [ 631.139905][T30610] binder: 30605:30610 got transaction with invalid parent offset or type [ 631.234160][T30610] binder: 30605:30610 got transaction with invalid parent offset or type 01:52:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) symlink(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7fff) link(0x0, 0x0) lseek(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) io_setup(0x200000800000000, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200100) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="08d8d82c00"/16]) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$UHID_CREATE(r4, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}, 0x120) r5 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendfile(r3, r5, 0x0, 0x8000dffffffe) 01:52:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028b, 0x0) 01:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000297, 0x0) 01:52:20 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0xea37, 0xffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x18) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x3, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 01:52:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6800}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 631.525965][T30625] QAT: Invalid ioctl [ 631.536492][T30622] binder: 30621:30622 got transaction with too large buffer [ 631.547328][T30624] binder: BINDER_SET_CONTEXT_MGR already set [ 631.559265][T30625] QAT: Invalid ioctl [ 631.584109][T30624] binder: 30623:30624 ioctl 40046207 0 returned -16 [ 631.606914][T30631] binder: 30621:30631 got transaction with too large buffer 01:52:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000040)=""/148, 0x94}], 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) r1 = gettid() ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='ipddp0\x00') r2 = syz_open_procfs(r1, &(0x7f0000000140)='wchan\x00') preadv(r2, &(0x7f0000000480), 0x10000000000001ea, 0x0) [ 631.626336][T30633] binder: 30623:30633 got transaction with invalid parent offset or type 01:52:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028c, 0x0) 01:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000298, 0x0) [ 631.686853][T30633] binder: 30623:30633 got transaction with invalid parent offset or type [ 631.722551][T30624] binder: BINDER_SET_CONTEXT_MGR already set 01:52:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c00}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 631.758190][T30624] binder: 30623:30624 ioctl 40046207 0 returned -16 [ 631.789655][T30633] binder: transaction release 5816 bad handle 1, ret = -22 01:52:20 executing program 0: epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080003, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000100000000000000000000000000000000000000000000000000feffffff010000001100000000000000000076657468315f746f5f7465616d000000736974302000000000000400000000006272696467653000000000000000000076657468305f746f5f627269646765000180c2000000000000000000aaaaaaaaaa0000000000000000007000000070000000a80000006d61726b000000000000000000000000000000cc8d000000000000000000000010000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000110000000000000000007465716c30000000000000000000000073797a5f74757e000000000000000000697036677265300000000000090000007663616e30000000d53fa73b00000000ffffffffffff000000000000aaaaaaaa98aa00000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x250) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x1017fe, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1000010, 0xffffffffffffffff, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_LINK={0x108, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53b0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46e9d675}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x02\x00\x00\x00\x00t\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x2, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00\x00\x00\x00\b\x00', 'veth0_to_bond\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1b0) 01:52:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 631.904626][T30649] binder: 30648:30649 got transaction with too large buffer 01:52:21 executing program 1: chmod(&(0x7f0000000080)='./file0\x00', 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f00000000c0)="0adc1f12f2123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:52:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028d, 0x0) [ 632.006742][T30658] ebtables: ebtables: counters copy to user failed while replacing table 01:52:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7400}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 632.047263][T30661] binder: BINDER_SET_CONTEXT_MGR already set [ 632.074070][T30661] binder: 30660:30661 ioctl 40046207 0 returned -16 01:52:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000299, 0x0) [ 632.114041][T30670] binder: 30660:30670 got transaction with invalid parent offset or type [ 632.144678][T30669] binder: BINDER_SET_CONTEXT_MGR already set [ 632.160419][T30675] ebtables: ebtables: counters copy to user failed while replacing table 01:52:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 632.199775][T30669] binder: 30668:30669 ioctl 40046207 0 returned -16 01:52:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) write$P9_RREAD(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="4f0000007501004400000097a6cae0db7170dd8121168c55f9ce9aaf34342d3363ce1bcdefe9e83d76c4caf6ed9a968a2eb37604a8ad4288c145a0b86ed800a7d1c63171ec6f1dc0558ed5340afd86aabd6e72b08d16278727c87c8ac4594a66a54ba4efd641ac3a107e693f70cf2e3cab8a44c311bdc1d4eb866ea17502ecd22cea67d7816f4fadd07d65c7e1f0b5a500dc5b8bbfeb61431ea4fd6843d22c791d791dccc7e6df7834c3000000000000000000000000000000002d9e4e9c9644001c"], 0x4f) tkill(r0, 0x1000000000013) 01:52:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028e, 0x0) 01:52:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7a00}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 632.294952][T30684] binder: BINDER_SET_CONTEXT_MGR already set 01:52:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029a, 0x0) 01:52:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x8000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x651}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3457be69}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6d1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 632.352164][T30684] binder: 30683:30684 ioctl 40046207 0 returned -16 [ 632.352222][T30688] binder_alloc: 30668: binder_alloc_buf, no vma [ 632.480380][T30700] binder: BINDER_SET_CONTEXT_MGR already set [ 632.516988][T30700] binder: 30697:30700 ioctl 40046207 0 returned -16 01:52:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028f, 0x0) 01:52:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029b, 0x0) 01:52:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x1000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f00000004c0)=0x100000035) 01:52:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10) [ 632.732837][T30722] binder_alloc: 30714: binder_alloc_buf, no vma [ 632.735628][T30717] binder: BINDER_SET_CONTEXT_MGR already set 01:52:21 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc5}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 632.795701][T30717] binder: 30714:30717 ioctl 40046207 0 returned -16 01:52:21 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/135, 0x74f) prctl$PR_SET_FPEXC(0xc, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(r0, r1, 0x80000) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r4, r3, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 01:52:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000290, 0x0) 01:52:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x2) 01:52:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x2000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 632.959271][T30736] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.069653][T30751] binder: BINDER_SET_CONTEXT_MGR already set 01:52:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000291, 0x0) [ 633.114845][T30751] binder: 30750:30751 ioctl 40046207 0 returned -16 [ 633.133401][T30751] binder: BINDER_SET_CONTEXT_MGR already set 01:52:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 633.155691][T30751] binder: 30750:30751 ioctl 40046207 0 returned -16 01:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0xf0ff7f) 01:52:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 633.314545][T30761] binder: BINDER_SET_CONTEXT_MGR already set 01:52:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) [ 633.358512][T30761] binder: 30760:30761 ioctl 40046207 0 returned -16 [ 633.370196][T30767] binder: BINDER_SET_CONTEXT_MGR already set 01:52:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000292, 0x0) [ 633.435151][T30767] binder: 30766:30767 ioctl 40046207 0 returned -16 01:52:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 633.592274][T30785] binder: BINDER_SET_CONTEXT_MGR already set [ 633.655476][T30785] binder: 30783:30785 ioctl 40046207 0 returned -16 01:52:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f000001cff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@mask_cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x58}, 0x0) 01:52:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 01:52:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000293, 0x0) 01:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x1000000) 01:52:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x48}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 633.728798][T30736] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 01:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x2000000) [ 633.822997][T30799] binder: BINDER_SET_CONTEXT_MGR already set [ 633.845550][T30799] binder: 30798:30799 ioctl 40046207 0 returned -16 01:52:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xffbc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x34) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss, @mss, @window, @sack_perm], 0x1bf) 01:52:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x5000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 633.910604][T30799] binder: BINDER_SET_CONTEXT_MGR already set [ 633.937179][T30799] binder: 30798:30799 ioctl 40046207 0 returned -16 01:52:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 01:52:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x7fffef8d) 01:52:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000294, 0x0) 01:52:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) 01:52:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 634.112137][T30826] binder: BINDER_SET_CONTEXT_MGR already set [ 634.194669][T30826] binder: 30825:30826 ioctl 40046207 0 returned -16 01:52:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000295, 0x0) [ 634.239802][T30849] binder_alloc: 30825: binder_alloc_buf, no vma [ 634.275158][T30852] binder: BINDER_SET_CONTEXT_MGR already set 01:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 01:52:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x7ffff000) 01:52:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x50}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 634.310374][T30852] binder: 30847:30852 ioctl 40046207 0 returned -16 01:52:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000296, 0x0) 01:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) [ 634.444276][T30869] binder_fixup_parent: 10 callbacks suppressed [ 634.444286][T30869] binder: 30868:30869 got transaction with invalid parent offset or type 01:52:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 634.548079][T30877] binder: BINDER_SET_CONTEXT_MGR already set [ 634.587375][T30869] binder_transaction: 46 callbacks suppressed [ 634.587393][T30869] binder: 30868:30869 transaction failed 29201/-22, size 64-16 line 3389 [ 634.623322][T30877] binder: 30876:30877 ioctl 40046207 0 returned -16 [ 634.623549][T30887] binder_transaction: 13 callbacks suppressed [ 634.623559][T30887] binder: 30876:30887 got transaction with too large buffer 01:52:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x8defff7f) 01:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) [ 634.719789][ T5] binder_release_work: 44 callbacks suppressed [ 634.719797][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 634.734502][T30885] binder_alloc: 30868: binder_alloc_buf, no vma 01:52:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000297, 0x0) [ 634.762321][T30887] binder: transaction release 5924 bad handle 1, ret = -22 [ 634.786005][T30885] binder: 30868:30885 transaction failed 29189/-3, size 64-16 line 3148 [ 634.794699][T30887] binder: 30876:30887 transaction failed 29201/-22, size 64-16 line 3357 [ 634.815678][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 634.844990][ T5] binder: undelivered TRANSACTION_ERROR: 29201 01:52:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 634.862448][T30877] binder: BINDER_SET_CONTEXT_MGR already set 01:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x68}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x7ffffffff000) [ 634.913969][T30877] binder: 30876:30877 ioctl 40046207 0 returned -16 01:52:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x48000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000298, 0x0) [ 635.072661][T30915] binder: 30910:30915 got transaction with invalid parent offset or type 01:52:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0xf0ff7f00000000) 01:52:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 635.156211][T30915] binder: 30910:30915 transaction failed 29201/-22, size 64-16 line 3389 [ 635.182319][T30928] binder: BINDER_SET_CONTEXT_MGR already set 01:52:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000299, 0x0) [ 635.262722][T30928] binder: 30927:30928 ioctl 40046207 0 returned -16 [ 635.262757][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 635.275930][T30915] binder: BINDER_SET_CONTEXT_MGR already set 01:52:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f0000000040)=""/38, 0x330) 01:52:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0xf0ffffff7f0000) [ 635.303812][T30926] binder_alloc: 30910: binder_alloc_buf, no vma [ 635.363223][T30915] binder: 30910:30915 ioctl 40046207 0 returned -16 [ 635.370652][T30936] binder_alloc: 30910: binder_alloc_buf, no vma [ 635.384045][T30926] binder: 30910:30926 transaction failed 29189/-3, size 64-16 line 3148 [ 635.393292][T30936] binder: 30927:30936 transaction failed 29189/-3, size 64-16 line 3148 01:52:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 635.420491][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 635.439062][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 635.447581][T30936] binder: 30927:30936 got transaction with too large buffer 01:52:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029a, 0x0) 01:52:24 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4610f6ff0000002f"], 0xb) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:52:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x100000000000000) [ 635.487350][T30936] binder: 30927:30936 transaction failed 29201/-22, size 64-16 line 3357 [ 635.566478][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 01:52:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 635.618080][T30964] binder: BINDER_SET_CONTEXT_MGR already set [ 635.656478][T30964] binder: 30955:30964 ioctl 40046207 0 returned -16 01:52:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029b, 0x0) [ 635.707208][T30969] binder: 30968:30969 got transaction with too large buffer [ 635.725737][T30971] binder: 30955:30971 got transaction with invalid parent offset or type 01:52:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 01:52:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x200000000000000) [ 635.790766][T30971] binder: 30955:30971 transaction failed 29201/-22, size 64-16 line 3389 [ 635.812536][T30969] binder: 30968:30969 transaction failed 29201/-22, size 64-16 line 3357 [ 635.823465][ T7985] binder: undelivered TRANSACTION_ERROR: 29201 [ 635.832644][T30971] binder: BINDER_SET_CONTEXT_MGR already set [ 635.873237][T30979] binder: 30955:30979 got transaction with invalid parent offset or type [ 635.892178][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 635.904473][T30984] binder: BINDER_SET_CONTEXT_MGR already set [ 635.934873][T30971] binder: 30955:30971 ioctl 40046207 0 returned -16 [ 635.946963][T30985] binder: 30968:30985 transaction failed 29189/-22, size 64-16 line 2995 [ 635.970855][T30984] binder: 30968:30984 ioctl 40046207 0 returned -16 [ 635.977873][ T5] binder: undelivered TRANSACTION_ERROR: 29189 01:52:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 01:52:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x68000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x2) [ 635.988190][T30979] binder: transaction release 5946 bad handle 1, ret = -22 01:52:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x74}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 636.094480][T30996] binder: 30995:30996 got transaction with too large buffer [ 636.139407][T31001] binder: 30995:31001 got transaction with too large buffer [ 636.161283][T31000] binder: BINDER_SET_CONTEXT_MGR already set [ 636.223029][T31000] binder: 30999:31000 ioctl 40046207 0 returned -16 [ 636.258117][T31005] binder: 30999:31005 got transaction with invalid parent offset or type [ 636.293440][T31005] binder: transaction release 5958 bad handle 1, ret = -22 [ 636.317758][T31005] binder: 30999:31005 got transaction with invalid parent offset or type 01:52:25 executing program 1: 01:52:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x8defff7f00000000) 01:52:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 01:52:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x3f00) 01:52:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 636.662059][T31016] binder: 31015:31016 got transaction with too large buffer [ 636.677243][T31022] binder: BINDER_SET_CONTEXT_MGR already set 01:52:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 01:52:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/237, 0xed}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/110, 0x6e}], 0x9, 0x0) 01:52:25 executing program 1: [ 636.703237][T31022] binder: 31020:31022 ioctl 40046207 0 returned -16 [ 636.730995][T31026] binder: 31015:31026 got transaction with too large buffer [ 636.793782][T31022] binder: 31020:31022 got transaction with invalid parent offset or type 01:52:25 executing program 1: 01:52:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x4000) 01:52:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x74000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:26 executing program 1: 01:52:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x300}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 637.029329][T31051] binder: 31050:31051 got transaction with too large buffer 01:52:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:26 executing program 1: [ 637.110391][T31059] binder: 31050:31059 got transaction with too large buffer [ 637.140836][T31061] binder: BINDER_SET_CONTEXT_MGR already set 01:52:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x501800, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x9, 0xff, 0x3, 0x3, 0x11, 0xffffffff7fffffff, 0x80000001, 0x1, 0x3, 0x5, 0x9, 0x8001}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r1, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7a000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 637.185461][T31061] binder: 31058:31061 ioctl 40046207 0 returned -16 [ 637.194050][T31064] binder: 31058:31064 got transaction with invalid parent offset or type 01:52:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0xf0ff7f) 01:52:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:26 executing program 1: [ 637.260995][T31071] binder: 31070:31071 got transaction with too large buffer [ 637.332726][T31064] binder: transaction release 5985 bad handle 1, ret = -22 [ 637.351835][T31071] binder: BINDER_SET_CONTEXT_MGR already set 01:52:26 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 637.380786][T31064] binder: 31058:31064 got transaction with invalid parent offset or type [ 637.398661][T31071] binder: 31070:31071 ioctl 40046207 0 returned -16 01:52:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18}, 0xffffffffffffffed) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 01:52:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x100000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x500}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x1000000) 01:52:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) fgetxattr(r0, &(0x7f00000000c0)=@random={'user.', 'vmnet1ppp1\x00'}, &(0x7f0000000100)=""/62, 0x3e) preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:26 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="9b223f383c123f319bd070") personality(0xffffffffffffffff) [ 637.637375][T31096] binder: BINDER_SET_CONTEXT_MGR already set 01:52:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x200000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 637.687696][T31096] binder: 31094:31096 ioctl 40046207 0 returned -16 [ 637.757771][T31102] binder_alloc: 31091: binder_alloc_buf, no vma 01:52:26 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 637.812782][T31102] binder: 31094:31102 got transaction with invalid parent offset or type [ 637.837740][T31114] binder: BINDER_SET_CONTEXT_MGR already set [ 637.859618][T31114] binder: 31109:31114 ioctl 40046207 0 returned -16 01:52:26 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="91f6a3460a99", 'erspan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 01:52:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x600}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 637.893424][T31114] binder: BINDER_SET_CONTEXT_MGR already set 01:52:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x2000000) 01:52:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2d) preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) [ 637.934154][T31114] binder: 31109:31114 ioctl 40046207 0 returned -16 01:52:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x300000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x700}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x3f000000) 01:52:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) [ 638.183073][T31143] binder: BINDER_SET_CONTEXT_MGR already set 01:52:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x208000, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') fsetxattr$security_smack_transmute(r1, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000140)="8fb8ed631094d9da93b5a613e38d34cd7894146f56f16b98e9bb2091ddb194896679e84b24a49001c4fdbcd4a7adec546e95cd991c3d36acfaf862f35ea42c5329d2cb775288c3a70f167230da65191474981b9aac1759072cf82527afcacd9dbe50e2", &(0x7f00000001c0)=""/215}, 0x18) preadv(r1, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 638.249400][T31146] binder: BINDER_SET_CONTEXT_MGR already set [ 638.256253][T31143] binder: 31142:31143 ioctl 40046207 0 returned -16 [ 638.299371][T31146] binder: 31138:31146 ioctl 40046207 0 returned -16 01:52:27 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) 01:52:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x40000000) 01:52:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x400000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 638.661891][T31182] binder: BINDER_SET_CONTEXT_MGR already set [ 638.685448][T31182] binder: 31175:31182 ioctl 40046207 0 returned -16 01:52:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x500000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x8, 0x6, 0x8, 0x80, 0x5, 0xfff, 0x2, 0xffffffffffffff80, 0x2, 0x3, 0x3, 0x7, 0xffffffffffffff00, 0x4, 0x922, 0x100, 0xf0, 0x8, 0xbce, 0x8, 0xffffffff, 0x6, 0x0, 0x3, 0x1e, 0x400, 0x200, 0x8, 0x1, 0x3, 0x6, 0x2c2]}) 01:52:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x7fffef8d) 01:52:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 638.915919][T31203] binder: BINDER_SET_CONTEXT_MGR already set [ 638.945683][T31203] binder: 31198:31203 ioctl 40046207 0 returned -16 01:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x82, 0x4) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r1, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x600000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x7ffff000) 01:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 639.145634][T31224] binder: BINDER_SET_CONTEXT_MGR already set [ 639.198534][T31224] binder: 31223:31224 ioctl 40046207 0 returned -16 [ 639.230498][T31226] binder: BINDER_SET_CONTEXT_MGR already set 01:52:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 639.266417][T31226] binder: 31225:31226 ioctl 40046207 0 returned -16 01:52:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 01:52:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x700000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:28 executing program 4: r0 = creat(&(0x7f0000000100)='\x00', 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x8, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r1, &(0x7f0000000480), 0x100000000000029c, 0x0) write$apparmor_current(r1, &(0x7f0000000040)=@profile={'stack ', '\x00'}, 0xffffffffffffff7d) [ 639.404174][T31249] binder: BINDER_SET_CONTEXT_MGR already set [ 639.425597][T31249] binder: 31246:31249 ioctl 40046207 0 returned -16 01:52:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x8defff7f) 01:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 639.534319][T31247] binder_fixup_parent: 10 callbacks suppressed [ 639.534341][T31247] binder: 31246:31247 got transaction with invalid parent offset or type 01:52:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4800000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 639.617656][T31247] binder: transaction release 6083 bad handle 1, ret = -22 [ 639.671122][T31247] binder_transaction: 41 callbacks suppressed [ 639.671141][T31247] binder: 31246:31247 transaction failed 29201/-22, size 64-16 line 3389 [ 639.694865][T31273] binder_transaction: 13 callbacks suppressed [ 639.694875][T31273] binder: 31272:31273 got transaction with too large buffer 01:52:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x7ffffffff000) 01:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 639.734292][ T5] binder_release_work: 41 callbacks suppressed [ 639.734301][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 639.754106][T31249] binder: 31246:31249 got transaction with invalid parent offset or type [ 639.775709][T31247] binder: BINDER_SET_CONTEXT_MGR already set [ 639.813070][T31273] binder: 31272:31273 transaction failed 29201/-22, size 64-16 line 3357 [ 639.831726][T31247] binder: 31246:31247 ioctl 40046207 0 returned -16 01:52:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 639.859379][T31249] binder: 31246:31249 transaction failed 29201/-22, size 64-16 line 3389 [ 639.934118][T31286] binder_alloc: 31272: binder_alloc_buf, no vma [ 639.939252][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 639.972514][T31286] binder: 31272:31286 transaction failed 29189/-3, size 64-16 line 3148 01:52:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000002c0), 0x2, 0x0) 01:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 01:52:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0xf0ff7f00000000) [ 639.994848][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 640.010354][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 640.069391][T31295] binder: BINDER_SET_CONTEXT_MGR already set 01:52:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:29 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x114, 0x39, 0x20, 0x70bd28, 0x25dfdbfb, {0x6}, [@typed={0x8, 0x45, @uid=r1}, @nested={0xe0, 0x7f, [@generic="8775b8b2914e8c4146be92b86149f1a74835115757c03c944b1765db700c22d76711a29617c81acbf831521bbd0174b1a160cd7940ffaa6ef5d4d925eb6556a8705087164377d1b379f7ca88a784f4f0337e82c9d9f7ba08bc988fb99171460dd21202af432d937e6d500f212e8874767af4d573d7f73a6fc1651a99f7ac0c64e9b348349a36c581363292f83cbf4380ed3d1b3d45b11f38a4a868225d1fad491d2e35085aa20ce0c22ebca707", @typed={0x2c, 0x83, @str='vmnet0)(cgroupkeyring-@[,\'self,bdev#],\x00'}]}, @typed={0x4, 0x6e}, @typed={0x14, 0x25, @str='net/ip_mr_cache\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r2, &(0x7f0000000480), 0x100000000000029c, 0x0) [ 640.117677][T31295] binder: 31294:31295 ioctl 40046207 0 returned -16 [ 640.144039][T31303] binder_alloc: 31272: binder_alloc_buf failed to map pages in userspace, no vma 01:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 640.206409][T31303] binder: 31294:31303 transaction failed 29189/-3, size 64-16 line 3148 [ 640.237999][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 01:52:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c00000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0xf0ffffff7f0000) [ 640.261287][T31295] binder: BINDER_SET_CONTEXT_MGR already set [ 640.293499][T31303] binder: 31294:31303 transaction failed 29189/-22, size 64-16 line 2995 01:52:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580), 0x1}, 0x9}], 0x40000000000001b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x2) socketpair(0xf, 0x8000f, 0x2, &(0x7f0000000080)) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') 01:52:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 640.347991][T31295] binder: 31294:31295 ioctl 40046207 0 returned -16 [ 640.368998][T31318] binder: 31316:31318 got transaction with too large buffer [ 640.393817][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 01:52:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7400}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 640.424265][T31318] binder: 31316:31318 transaction failed 29201/-22, size 64-16 line 3357 01:52:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x100000000000000) [ 640.487875][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 640.496442][T31331] binder_alloc: 31316: binder_alloc_buf, no vma [ 640.502759][T31331] binder: 31316:31331 transaction failed 29189/-3, size 64-16 line 3148 01:52:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xf8, "2df220675f7b5badbb2eeb1807b521a9e2d4765f531a66ee0623f3720d679ecf73c5bbfec91545256e6a59c94a9e4ea512f72583a0202164c4128a09356e4e8f9a3fbc95824fb4d6eb4b8d6e0b1d526c9480ae905aeea86127c1801317a24185029df5c988cc78d8928584b2e53f93f1abfcf87bcc3eff08d511831a083f20f391ae9d6c5569c86bc2b5993915c5736d0b079e17f6c9f587aec3e3862890598ed320cfaf492eec1498783e4775533d8ed33c3562baf571fecffca955d6639fa36eafbf5974f96b056af069f173dcf99c899f9b6ae81fb69af96a3199b30c62729422006fb5dad86f3717964cb0d299e7ce0e8eede52d1d4c"}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, 0x4) preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) [ 640.582776][T31337] binder: 31335:31337 got transaction with invalid parent offset or type [ 640.607660][ T5] binder: undelivered TRANSACTION_ERROR: 29189 01:52:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6800000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 640.667282][T31337] binder: 31335:31337 transaction failed 29201/-22, size 64-16 line 3389 01:52:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x200000000000000) [ 640.752281][T31352] binder: BINDER_SET_CONTEXT_MGR already set [ 640.795382][T31337] binder: BINDER_SET_CONTEXT_MGR already set [ 640.801956][T31352] binder: 31351:31352 ioctl 40046207 0 returned -16 [ 640.828113][T31345] binder_alloc: 31335: binder_alloc_buf, no vma [ 640.830008][ T5] binder: undelivered TRANSACTION_ERROR: 29201 01:52:29 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x4e21, @multicast1}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r1, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 640.834482][T31345] binder: 31335:31345 transaction failed 29189/-3, size 64-16 line 3148 01:52:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 640.928280][ T7985] binder: undelivered TRANSACTION_ERROR: 29189 [ 640.945706][T31337] binder: 31335:31337 ioctl 40046207 0 returned -16 01:52:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x3f00000000000000) 01:52:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c00000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:30 executing program 4: lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 01:52:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 641.125078][T31386] binder: 31385:31386 got transaction with invalid parent offset or type [ 641.139328][T31389] binder: BINDER_SET_CONTEXT_MGR already set 01:52:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 641.180256][T31389] binder: 31382:31389 ioctl 40046207 0 returned -16 [ 641.215661][T31395] binder: 31385:31395 got transaction with invalid parent offset or type 01:52:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x4000000000000000) 01:52:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000240)={0x0, [0x5, 0x100000000, 0x33d, 0x8001, 0x80000000, 0xa7, 0x3ff, 0x80000001, 0x0, 0x5, 0x0, 0x2, 0x200, 0x2, 0x5, 0x1, 0x4, 0x0, 0x1, 0x0, 0x800, 0x8, 0x3, 0x800, 0xf0, 0xc8a1, 0x0, 0x5, 0xffff, 0x7, 0x2, 0x20, 0x1, 0xf98, 0x0, 0xffffffff80000000, 0x85e, 0x9, 0x9, 0xac19c7d, 0x81, 0xfff, 0x3, 0xffff, 0x2, 0x3ff, 0x2, 0x8], 0x7}) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x80) semctl$GETNCNT(r2, 0x2, 0xe, &(0x7f0000000300)=""/239) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4000000001ff, 0x40) getsockopt$inet6_udp_int(r3, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0), &(0x7f00000002c0)=0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r4, &(0x7f0000000480), 0x100000000000029c, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) r7 = getegid() getgroups(0x1, &(0x7f0000000640)=[0xee00]) r9 = getgid() fstat(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x5}, [{0x2, 0x2, r5}, {0x2, 0x4, r6}], {0x4, 0x2}, [{0x8, 0x0, r7}, {0x8, 0x2, r8}, {0x8, 0x4, r9}, {0x8, 0x0, r10}, {0x8, 0x1, r11}], {0x10, 0x3}, {0x20, 0x2}}, 0x5c, 0x3) [ 641.217501][T31397] binder: 31382:31397 got transaction with too large buffer 01:52:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 01:52:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 641.343057][T31389] binder: BINDER_SET_CONTEXT_MGR already set [ 641.381532][T31389] binder: 31382:31389 ioctl 40046207 0 returned -16 01:52:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 641.410347][T31397] binder: 31382:31397 got transaction with too large buffer 01:52:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000085c0)=""/4096, 0xd238075a947d06c6) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x24, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r2, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x8defff7f00000000) 01:52:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7400000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 641.534436][T31424] binder: 31423:31424 got transaction with invalid parent offset or type 01:52:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 641.582543][T31426] binder: BINDER_SET_CONTEXT_MGR already set [ 641.611949][T31426] binder: 31425:31426 ioctl 40046207 0 returned -16 [ 641.627200][T31424] binder: BINDER_SET_CONTEXT_MGR already set 01:52:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0xffffffff00000000) 01:52:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 641.665896][T31424] binder: 31423:31424 ioctl 40046207 0 returned -16 01:52:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7a00000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='net/ip_mr_cache\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='vmnet0\x00', &(0x7f0000000140)='net/ip_mr_cache\x00', &(0x7f0000000180)='net/ip_mr_cache\x00', &(0x7f00000001c0)='net/ip_mr_cache\x00', &(0x7f0000000240)='net/ip_mr_cache\x00'], &(0x7f0000000380)=[&(0x7f00000002c0)='*vboxnet1userposix_acl_accessselinuxGPL\x00', &(0x7f0000000300)='net/ip_mr_cache\x00', &(0x7f0000000340)='-security+@\x00']) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) [ 641.852764][T31456] binder: 31455:31456 got transaction with invalid parent offset or type [ 641.856793][T31458] binder: BINDER_SET_CONTEXT_MGR already set 01:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 641.907655][T31461] binder: 31450:31461 got transaction with too large buffer [ 641.929822][T31456] binder: BINDER_SET_CONTEXT_MGR already set [ 641.955577][T31458] binder: 31450:31458 ioctl 40046207 0 returned -16 [ 641.990221][T31456] binder: 31455:31456 ioctl 40046207 0 returned -16 [ 642.011863][T31461] binder: transaction release 6138 bad handle 2, ret = -22 01:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 01:52:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 642.088855][T31461] binder: 31450:31461 got transaction with too large buffer 01:52:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="66643dd154084ef62e040e70ad5b44b3c3301a250da0c46c40190f959717afa2200800d94127fd98fbcd6b4fa83a15f47cb3be11ac8cbe06dbce657893", @ANYRES32=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='Net/ip_mr_cache\x00') preadv(r3, &(0x7f0000000480), 0x100000000000029c, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f00000003c0)=""/160) 01:52:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x2}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 01:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 01:52:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0xd1d3, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff\x00'}, 0x3, 0x0, 0x5, r2, 0x2, 0x0, 'syz0\x00', &(0x7f0000000100)=['Leth1\x81=)\x00', '\x00'], 0xa}) preadv(r0, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 642.236972][T31484] binder: 31483:31484 got transaction with invalid parent offset or type [ 642.298011][T31492] binder: BINDER_SET_CONTEXT_MGR already set [ 642.333258][T31492] binder: 31490:31492 ioctl 40046207 0 returned -16 [ 642.339870][T31499] binder: 31483:31499 got transaction with invalid parent offset or type 01:52:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000029c, 0x0) alarm(0x6) 01:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 642.353949][T31502] ------------[ cut here ]------------ [ 642.359444][T31502] kernel BUG at drivers/android/binder_alloc.c:1139! 01:52:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r0, 0xc0045878) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r1, &(0x7f0000000480), 0x100000000000029c, 0x0) 01:52:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 642.420132][T31502] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 642.426258][T31502] CPU: 0 PID: 31502 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #86 [ 642.434673][T31502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.445010][T31502] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 642.451823][T31502] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 cf 5d 23 fc 4c 89 e6 4c 89 ef e8 e4 5e 23 fc 4d 39 e5 76 07 e8 ba 5d 23 fc <0f> 0b e8 b3 5d 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 c1 [ 642.467416][ T3876] kobject: 'loop0' (000000006a5aa2b1): kobject_uevent_env [ 642.471537][T31502] RSP: 0018:ffff8880966674e0 EFLAGS: 00010212 [ 642.471550][T31502] RAX: 0000000000040000 RBX: 0000000020001050 RCX: ffffc90010a8d000 [ 642.471558][T31502] RDX: 000000000000048b RSI: ffffffff854d2f36 RDI: 0000000000000006 [ 642.471566][T31502] RBP: ffff888096667560 R08: ffff888056c5a500 R09: 0000000000000008 [ 642.471584][T31502] R10: ffffed1012cccf15 R11: ffff8880966678af R12: 0000000000000048 01:52:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000293, 0x0) [ 642.494480][ T3876] kobject: 'loop0' (000000006a5aa2b1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 642.500990][T31502] R13: 0000000000000008 R14: 0000000000000050 R15: 0000000000000000 [ 642.501001][T31502] FS: 00007f10c7423700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 642.501009][T31502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.501016][T31502] CR2: 0000001b2f124000 CR3: 0000000093d78000 CR4: 00000000001406f0 [ 642.501027][T31502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 01:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 642.501034][T31502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 642.501038][T31502] Call Trace: [ 642.501061][T31502] ? find_held_lock+0x35/0x130 [ 642.501082][T31502] binder_alloc_copy_from_buffer+0x37/0x42 [ 642.501115][T31502] binder_validate_ptr+0xcc/0x1d0 [ 642.501131][T31502] ? binder_get_object+0x210/0x210 [ 642.501151][T31502] ? binder_alloc_copy_user_to_buffer+0x312/0x480 [ 642.579262][ T3876] kobject: 'loop1' (0000000019bd69fe): kobject_uevent_env [ 642.579515][T31502] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 642.584474][ T3876] kobject: 'loop1' (0000000019bd69fe): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.590276][T31502] binder_transaction+0x3e02/0x65c0 [ 642.590302][T31502] ? binder_thread_read+0x3d30/0x3d30 [ 642.590315][T31502] ? __lock_acquire+0x548/0x3fb0 [ 642.590337][T31502] ? __might_fault+0x12b/0x1e0 [ 642.590362][T31502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 642.590377][T31502] ? _copy_from_user+0xdd/0x150 [ 642.590400][T31502] binder_thread_write+0x87e/0x2820 [ 642.666644][T31502] ? binder_transaction+0x65c0/0x65c0 [ 642.672040][T31502] ? __might_fault+0x12b/0x1e0 [ 642.676830][T31502] ? lock_downgrade+0x880/0x880 [ 642.681700][T31502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 642.689947][T31502] ? _copy_from_user+0xdd/0x150 [ 642.690300][ T3876] kobject: 'loop0' (000000006a5aa2b1): kobject_uevent_env [ 642.694822][T31502] binder_ioctl+0x1033/0x183b [ 642.694842][T31502] ? binder_thread_write+0x2820/0x2820 [ 642.694856][T31502] ? tomoyo_path_number_perm+0x263/0x520 [ 642.694877][T31502] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 642.706712][ T3876] kobject: 'loop0' (000000006a5aa2b1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 642.712151][T31502] ? binder_thread_write+0x2820/0x2820 [ 642.712169][T31502] do_vfs_ioctl+0xd6e/0x1390 [ 642.712192][T31502] ? ioctl_preallocate+0x210/0x210 [ 642.748917][T31502] ? __fget+0x381/0x550 [ 642.753089][T31502] ? ksys_dup3+0x3e0/0x3e0 [ 642.757546][T31502] ? nsecs_to_jiffies+0x30/0x30 [ 642.762418][T31502] ? tomoyo_file_ioctl+0x23/0x30 [ 642.766107][ T3876] kobject: 'loop3' (00000000f2f12656): kobject_uevent_env [ 642.767374][T31502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 642.774515][ T3876] kobject: 'loop3' (00000000f2f12656): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 642.780741][T31502] ? security_file_ioctl+0x93/0xc0 [ 642.780757][T31502] ksys_ioctl+0xab/0xd0 [ 642.780771][T31502] __x64_sys_ioctl+0x73/0xb0 [ 642.780787][T31502] do_syscall_64+0x103/0x610 [ 642.780805][T31502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.780816][T31502] RIP: 0033:0x458da9 01:52:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 642.780831][T31502] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 642.780838][T31502] RSP: 002b:00007f10c7422c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.780851][T31502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 642.780858][T31502] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000004 [ 642.780866][T31502] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 642.780884][T31502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10c74236d4 [ 642.809631][ T3876] kobject: 'loop4' (000000001cd2917d): kobject_uevent_env [ 642.815357][T31502] R13: 00000000004c010e R14: 00000000004d2468 R15: 00000000ffffffff [ 642.815436][T31502] Modules linked in: [ 642.829394][ T3876] kobject: 'loop4' (000000001cd2917d): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 642.841977][T31502] ---[ end trace 03171691971f63ab ]--- [ 642.865690][ T3876] kobject: 'loop2' (0000000037dd0fe8): kobject_uevent_env [ 642.886991][T31529] binder: 31528:31529 got transaction with invalid parent offset or type [ 642.888407][ T3876] kobject: 'loop2' (0000000037dd0fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 642.919912][T31502] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 642.951900][T31502] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 cf 5d 23 fc 4c 89 e6 4c 89 ef e8 e4 5e 23 fc 4d 39 e5 76 07 e8 ba 5d 23 fc <0f> 0b e8 b3 5d 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 c1 [ 642.974960][ T3876] kobject: 'loop1' (0000000019bd69fe): kobject_uevent_env [ 642.975193][T31502] RSP: 0018:ffff8880966674e0 EFLAGS: 00010212 [ 642.982551][ T3876] kobject: 'loop1' (0000000019bd69fe): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.989083][T31502] RAX: 0000000000040000 RBX: 0000000020001050 RCX: ffffc90010a8d000 [ 643.007702][T31502] RDX: 000000000000048b RSI: ffffffff854d2f36 RDI: 0000000000000006 [ 643.016024][T31502] RBP: ffff888096667560 R08: ffff888056c5a500 R09: 0000000000000008 [ 643.024036][T31502] R10: ffffed1012cccf15 R11: ffff8880966678af R12: 0000000000000048 [ 643.032168][T31502] R13: 0000000000000008 R14: 0000000000000050 R15: 0000000000000000 [ 643.040244][T31502] FS: 00007f10c7423700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 643.049245][T31502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.056072][T31502] CR2: 000000000070d158 CR3: 0000000093d78000 CR4: 00000000001406e0 [ 643.064065][T31502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 643.065013][T31492] ------------[ cut here ]------------ [ 643.072190][T31502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 643.077555][T31492] kernel BUG at drivers/android/binder_alloc.c:1139! [ 643.080830][T31492] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 643.085759][T31502] Kernel panic - not syncing: Fatal exception [ 643.092328][T31492] CPU: 0 PID: 31492 Comm: syz-executor.5 Tainted: G D 5.1.0-rc6+ #86 [ 643.113814][T31492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.123896][T31492] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 643.130408][T31492] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 cf 5d 23 fc 4c 89 e6 4c 89 ef e8 e4 5e 23 fc 4d 39 e5 76 07 e8 ba 5d 23 fc <0f> 0b e8 b3 5d 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 c1 [ 643.150120][T31492] RSP: 0018:ffff88805b2d74e0 EFLAGS: 00010216 [ 643.156197][T31492] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9001088c000 [ 643.164178][T31492] RDX: 0000000000000428 RSI: ffffffff854d2f36 RDI: 0000000000000006 [ 643.172161][T31492] RBP: ffff88805b2d7560 R08: ffff888058a3e280 R09: 0000000000000008 [ 643.180146][T31492] R10: ffffed100b65af15 R11: ffff88805b2d78af R12: 0000000000000048 [ 643.188143][T31492] R13: 0000000000000008 R14: 0000000000000050 R15: 0000000000000000 [ 643.196138][T31492] FS: 00007f10c7444700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 643.205068][T31492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.211666][T31492] CR2: 0000000000000000 CR3: 0000000093d78000 CR4: 00000000001406f0 [ 643.219643][T31492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 643.227613][T31492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 643.235577][T31492] Call Trace: [ 643.238972][T31492] binder_alloc_copy_from_buffer+0x37/0x42 [ 643.244805][T31492] binder_validate_ptr+0xcc/0x1d0 [ 643.249834][T31492] ? binder_get_object+0x210/0x210 [ 643.254962][T31492] ? binder_alloc_copy_user_to_buffer+0x312/0x480 [ 643.261376][T31492] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 643.267128][T31492] binder_transaction+0x3e02/0x65c0 [ 643.272357][T31492] ? binder_thread_read+0x3d30/0x3d30 [ 643.277734][T31492] ? mark_held_locks+0xf0/0xf0 [ 643.282500][T31492] ? mark_held_locks+0xf0/0xf0 [ 643.287263][T31492] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 643.293101][T31492] ? binder_get_thread+0x1db/0x7c0 [ 643.298243][T31492] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 643.304484][T31492] ? _copy_from_user+0xdd/0x150 [ 643.309338][T31492] binder_thread_write+0x87e/0x2820 [ 643.314633][T31492] ? binder_transaction+0x65c0/0x65c0 [ 643.320024][T31492] ? kasan_check_write+0x14/0x20 [ 643.324961][T31492] ? do_raw_spin_lock+0x12a/0x2e0 [ 643.329986][T31492] ? lock_downgrade+0x880/0x880 [ 643.334835][T31492] ? __might_fault+0xfb/0x1e0 [ 643.339515][T31492] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 643.345768][T31492] ? _copy_from_user+0xdd/0x150 [ 643.350621][T31492] binder_ioctl+0x1033/0x183b [ 643.355298][T31492] ? binder_thread_write+0x2820/0x2820 [ 643.360753][T31492] ? tomoyo_path_number_perm+0x263/0x520 [ 643.366556][T31492] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 643.372361][T31492] ? trace_hardirqs_on+0x67/0x230 [ 643.377397][T31492] ? binder_thread_write+0x2820/0x2820 [ 643.382858][T31492] do_vfs_ioctl+0xd6e/0x1390 [ 643.387447][T31492] ? ioctl_preallocate+0x210/0x210 [ 643.392555][T31492] ? __fget+0x381/0x550 [ 643.396709][T31492] ? ksys_dup3+0x3e0/0x3e0 [ 643.401130][T31492] ? nsecs_to_jiffies+0x30/0x30 [ 643.405986][T31492] ? tomoyo_file_ioctl+0x23/0x30 [ 643.410923][T31492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.417171][T31492] ? security_file_ioctl+0x93/0xc0 [ 643.422283][T31492] ksys_ioctl+0xab/0xd0 [ 643.426443][T31492] __x64_sys_ioctl+0x73/0xb0 [ 643.431039][T31492] do_syscall_64+0x103/0x610 [ 643.435661][T31492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.441557][T31492] RIP: 0033:0x458da9 [ 643.445451][T31492] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 643.465057][T31492] RSP: 002b:00007f10c7443c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.473489][T31492] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 643.481471][T31492] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000004 [ 643.489470][T31492] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 643.497451][T31492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10c74446d4 [ 643.506871][T31492] R13: 00000000004c010e R14: 00000000004d2468 R15: 00000000ffffffff [ 643.516327][T31492] Modules linked in: [ 643.521163][T31502] Kernel Offset: disabled [ 643.525497][T31502] Rebooting in 86400 seconds..