et(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4, 0x2, [@gre_common_policy]}}}]}, 0x34}}, 0x0) 03:39:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r4) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r3, 0x409, 0x8) 03:39:52 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mkdirat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x1ff) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x0, @tid=r1}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) fchdir(0xffffffffffffffff) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:39:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4, 0x2, [@gre_common_policy]}}}]}, 0x34}}, 0x0) 03:39:52 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0xe8) 03:39:52 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000080)=0x7f, 0x12) 03:39:52 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x0, @tid=r1}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDDELIO(r6, 0x4b35, 0x0) r7 = socket$inet(0x2, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r8 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) fchdir(0xffffffffffffffff) write$binfmt_misc(r8, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r8, 0x409, 0x8) 03:39:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000200)="ff", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xff6e}}, 0x0) 03:39:52 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PDEATHSIG(0x1, 0x41) 03:39:52 executing program 5: openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x8, 0xf}], @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x44}}, 0x0) 03:39:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 03:39:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r6, 0x0, 0x0, 0x800000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) 03:39:52 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000100)={0x30, 0x2, 0x1, 0x0, 0x7ff, 0x0, 0x0, 0x8000000080003}, 0xf1b60c22e271324d) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x0, @tid=r1}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(r1, &(0x7f00000000c0)={0x30, 0x3, 0x1, 0x401, 0x101, 0x8001, 0x7, 0x785}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x2) fchdir(0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r3, 0x409, 0x8) [ 855.159146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13050 comm=syz-executor.5 03:39:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:39:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb15322e2df00000000000000960f53691a655eb6999d32772cf2eebb1f6c9ad54ac45a333c28785d6382fa7776ea267d32109a5633657b52873b9924f15a5b587ec8eaab2abd683c8ff8640f46e160757c496c9f56d1eb5eae74c061953c0e988937dd812989a20a85626cbcaa423d66696158375aea157f2b6553116f695819574f5b4a179f2f8d6e26f2394e14012ab1420016c952728ab80b3314a8104a92228031eef5e8546144eb56653da0b0767126e330a476a82fbbf42f71bf737e6f57f1785137", 0xe0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:39:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x5, 0x2, 0x3181, 0x1}, 0x2c) 03:39:53 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(0x0, 0x0, 0x2) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x2d, 0x3, @thr={&(0x7f00000002c0)="c52d1d0b5fd452b16c8bbf5f80ef8ac88bf48f7da6b05a5cb41aa0e6cd2e237d306208b7fb51d59babe38ff8436a4503221b64857f9bbc4bda16190a854392e9e8ae06b6fd56828b9a657e2cb0d6462e0e8fec46700c7b0842409cde36c4b7e51c7908031066fde621bca394a3887b9a69113a925cb3bdf8fd97d48756c13ea5be6ed4246e9b1954a876d8841f26809cb27348ea36581e7152f7dddd938de48826b85ecff9c487a4c8c610ca71aaa42e3dd14e32826514d686660ab31863033e6b40131f", &(0x7f0000000540)="5fee4ff75670a1fe5d11cdb01af17c36c3f2a30ce11548e745e6645fe750dcda2aea3e7d12ea18c67dc10074569715aeb9997ad348766782ea99c9be9184189b34479d74ec049573476e12324b28611a1f24c0026f23218f0022713e3649666487217206bc839f47f5cf09de4d26d57a1b00817582087ebf0a63f1aa83f40000000000000000be1c7c3c1e72380d9300000000"}}, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000740)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000840)=0xe8) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x800800, &(0x7f0000000880)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xff}}], [{@obj_user={'obj_user', 0x3d, 'ppp0nodevselinuxsystem\\cpusetvmnet1'}}, {@euid_gt={'euid>', r4}}, {@uid_lt={'uid<', r6}}]}}) r7 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r8, &(0x7f00000003c0)="2e374c34211fbe432501faad0e53c553445deb4a064ab6ee0f5b8085b6718ac246f16895d0185c9df4c9e5e69f3b4f98024d76dd5cf7279ee169ac879e7fc0bfad41188a213136d74695f81d833dba6f526072f643388437f2f01079459288907ad144798cececb2a3882d6f831714cc20cfdcea22e746b570b01256616873ea094f4eefaa2cb8", 0x87) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) fchdir(0xffffffffffffffff) write$binfmt_misc(r9, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r10, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000000100)) fcntl$addseals(r9, 0x409, 0x8) r11 = fcntl$dupfd(r7, 0x406, r1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r11, 0xc0145401, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x0, 0x4578}) 03:39:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) socket$inet(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x1}, 0x20) 03:39:53 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) 03:39:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000500)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = dup2(r2, r3) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0xffeb) 03:39:53 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) 03:39:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:39:53 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = open(0x0, 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x1e, 0x1344905508ac1d51, @tid=r1}, &(0x7f0000000240)) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r7) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r5, r6, &(0x7f0000000000), 0xffff) fcntl$addseals(r6, 0x409, 0x8) 03:39:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x41) sendto$inet6(r0, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) [ 855.636818] binder: 13106:13109 got transaction with out-of-order buffer fixup [ 855.666524] binder: 13106:13109 transaction failed 29201/-22, size 104-24 line 3525 [ 855.675137] binder: undelivered TRANSACTION_ERROR: 29201 03:39:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:39:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a0000000800050004000000"], 0x58}}, 0x0) 03:39:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:39:56 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) open(0x0, 0x0, 0x2) sched_setattr(0x0, 0x0, 0x0) timer_create(0x4, 0x0, &(0x7f0000000240)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x41000, &(0x7f00000002c0)='t\xa6\x0f\xc1\xbf\x1d\x16\x0fLx\xe3\x86\xfau\x15\xdb\xa1\x88\x9fH\xec\x18\x85\xbd\xa9\xee~(,\xfe\xcb\x93\xdc\x04+ m') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) 03:39:56 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x0, @tid=r1}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x10000, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) fchdir(0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r3, 0x409, 0x8) 03:39:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r5 = socket$inet(0x2, 0x3, 0x29) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 03:39:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:39:56 executing program 0: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000000)='./file0\x00', 0x0) 03:39:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') r1 = socket$inet6(0xa, 0x3, 0xb6) sendfile(r1, r0, &(0x7f0000000040)=0x15000300, 0x7ffff000) 03:39:56 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388", @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd88748b7c4872bf5b65c87e940b30eecd4f9ad03000000dfdaf3d0fef215586de3c101e4f8d1b12b1894e2983d0cfcdfbb1118c518c8543bd74f8bb524fab8aa41a7"], 0x0, 0x14e}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 858.590798] binder: 13139:13150 got transaction with out-of-order buffer fixup [ 858.602352] binder: 13139:13150 transaction failed 29201/-22, size 104-24 line 3525 03:39:56 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x22ed00, 0x8) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x0, @tid=r1}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) fchdir(0xffffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r2, 0x409, 0x8) 03:39:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:39:56 executing program 4: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, 0x50) 03:39:56 executing program 0: [ 858.639766] binder: undelivered TRANSACTION_ERROR: 29201 03:39:56 executing program 0: 03:39:56 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x3}]}, 0x28}}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in6=@empty, 0x4e20, 0x8000, 0x4e22, 0xfffc, 0xa, 0x0, 0xa0, 0x3b, r4, r5}, {0x0, 0x80000000, 0x170, 0xd1, 0x4e1e, 0x7fffffff, 0xd2a, 0x81}, {0x2, 0x4, 0xfff, 0x1}, 0x8, 0x6e6bb4, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4d4, 0xff}, 0x0, @in=@multicast1, 0x34ff, 0x3, 0x0, 0x7f, 0x4, 0xffffffff, 0x7ff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x0, @tid=r6}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TCGETX(r10, 0x5432, &(0x7f0000000440)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) fchdir(0xffffffffffffffff) write$binfmt_misc(r11, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r11, 0x409, 0x8) 03:39:56 executing program 4: 03:39:56 executing program 0: [ 858.754444] binder: 13186:13190 got transaction with out-of-order buffer fixup [ 858.772556] binder: 13186:13190 transaction failed 29201/-22, size 104-24 line 3525 [ 858.785214] binder: undelivered TRANSACTION_ERROR: 29201 03:39:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:39:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:39:57 executing program 0: [ 859.397967] binder: 13202:13204 got transaction with out-of-order buffer fixup [ 859.405505] binder: 13202:13204 transaction failed 29201/-22, size 104-24 line 3525 [ 859.416465] binder: undelivered TRANSACTION_ERROR: 29201 03:39:59 executing program 5: 03:39:59 executing program 4: 03:39:59 executing program 1: 03:39:59 executing program 0: 03:39:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:39:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:39:59 executing program 1: 03:39:59 executing program 0: 03:39:59 executing program 4: 03:39:59 executing program 1: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240), 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) open(&(0x7f0000000400)='./file0\x00', 0x200000, 0x0) mmap(&(0x7f0000a52000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000040)={0x0, 0x2, 0x9}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 03:39:59 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) open(0x0, 0x0, 0x2) getpid() sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0xffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r1, 0x0, 0x0) close(r1) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7}, 0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) 03:39:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) [ 861.679570] binder: 13212:13216 got transaction with out-of-order buffer fixup [ 861.716529] binder: 13212:13216 transaction failed 29201/-22, size 104-24 line 3525 03:39:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x2, 0x0) sendto(r1, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 03:39:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 861.743914] binder: undelivered TRANSACTION_ERROR: 29201 03:39:59 executing program 5: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080), 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r1, @ANYBLOB="02000012000000000000040009000000000000080001000000000008000100070000154200080001f77319d2dd16ce010007000000080002"], 0x3}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000030}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x10000804) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) creat(&(0x7f0000000000)='./bus\x00', 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x2, 0x7ff, 0x10000}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x4) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380), 0x1, 0x0, 0x0, 0x2084}, 0x84) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) shutdown(r2, 0x400000000000001) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "7f183f84c088fbde", "6dcf502661ba0ddf767d93f44dfc7e2132f99d85d2d6c26ad1e4d62d43c2a7e1", '0{\r)', "f3bd2eec4847165d"}, 0x38) statfs(0x0, &(0x7f0000000140)=""/65) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000004180), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 03:39:59 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_STATFS(r3, &(0x7f0000000000)={0x60, 0x0, 0x8, {{0x0, 0x7, 0x1, 0x2, 0x2, 0x30b2, 0x20, 0xbf26}}}, 0x60) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) [ 861.801536] binder: 13237:13240 got transaction with out-of-order buffer fixup [ 861.815399] FAT-fs (loop1): codepage cp437 not found [ 861.860450] binder: 13237:13240 transaction failed 29201/-22, size 104-24 line 3525 03:39:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 861.867626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13252 comm=syz-executor.0 [ 861.902953] binder: undelivered TRANSACTION_ERROR: 29201 [ 861.948337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13252 comm=syz-executor.0 [ 861.963106] binder: 13265:13266 got transaction with out-of-order buffer fixup [ 861.963135] binder: 13265:13266 transaction failed 29201/-22, size 104-24 line 3525 [ 861.963320] binder: undelivered TRANSACTION_ERROR: 29201 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x160) fallocate(r4, 0x0, 0x0, 0x2000002) read$eventfd(r4, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {0xffffffffffffffff, 0x4000}, {r3, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x9) r5 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r7, 0x4, 0x2000) r8 = socket(0x10, 0x3, 0x0) pipe(0x0) dup2(r8, 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, r10) r11 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r12, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r13, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) dup2(r12, r13) r14 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r14, r15) poll(&(0x7f00000005c0)=[{r1, 0x22}, {r3, 0x8018}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x8080}, {r7, 0x100}, {0xffffffffffffffff, 0x800}, {r11, 0x10}, {0xffffffffffffffff, 0x40}], 0x8, 0x0) fallocate(r1, 0x800000000000002, 0x6, 0xffffffff) r16 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r17 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r16, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0xe2c061bc67043f8b) r18 = dup(r17) setsockopt$inet6_tcp_int(r18, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr="4e1172294a5ce0b22754a8d883b5c0bd"}, 0x6) sendto$inet6(r17, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r17, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r19 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setgid(0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@dev={0xfe, 0x80, [], 0x1a}, @in=@broadcast, 0x4e22, 0x8, 0x4e24, 0x7f, 0x2, 0x0, 0x80, 0x32}, {0x0, 0x1, 0x100, 0x800, 0x10008, 0xffff, 0x8, 0xffffffffffffff7f}, {0x0, 0x0, 0x1, 0x2}, 0x5, 0x206e6bb5, 0x2, 0x1, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0xc}, 0x0, 0xff}, 0x2, @in=@multicast2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xe8) ftruncate(r16, 0x800fe) getpid() setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) sendfile(r18, r19, 0x0, 0x8000fffffffe) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xffffffffffffffec) 03:40:00 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x1020, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70ca24ff, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) getpid() clock_gettime(0x0, 0x0) symlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000280)='./bus\x00') open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1) r0 = getpid() ptrace(0x10, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r1, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000000)={0xf32, 0x800}) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffff) open(0x0, 0x8401, 0x1d1) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0xe4c182432c41bde9, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r3, 0x0) getsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace(0x4208, r0) r5 = socket$inet6(0xa, 0x6, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) 03:40:00 executing program 4: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) syncfs(r0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000500)={{0x62, @empty, 0x4e21, 0x0, 'wlc\x00', 0x2, 0x4f4, 0x3f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x0, 0x0, 0x3}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x27) timer_create(0x1, &(0x7f0000000380)={0x0, 0xc, 0x4, @tid=r2}, &(0x7f00000003c0)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) creat(0x0, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3fffe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) syz_open_pts(r3, 0x80000) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000400)) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)={0xa, 0x7, 0x1, 0x0, 0x0, [{r1}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000000440)=""/34, 0x64, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x111, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 03:40:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) write$cgroup_pid(r3, &(0x7f0000000380)=r5, 0x12) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r0, 0x0) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ftruncate(r6, 0x208200) r7 = socket$inet(0x2, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000280)={0x4, [0x0, 0x0, 0x0, 0x0]}) prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0xfffffffffffffedc) r10 = dup2(r9, r8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$EVIOCGREP(r10, 0x80084503, &(0x7f0000000440)=""/201) setsockopt$inet6_int(r2, 0x29, 0x186, &(0x7f0000000040)=0x7ff, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x7a05, 0x1700) r12 = socket$inet(0x2, 0x0, 0x0) bind$inet(r12, 0x0, 0x0) connect$inet(r12, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) chmod(&(0x7f0000000240)='./bus\x00', 0x80) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000f77ef6f5e2947c44627c1536938f0000000000000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf250300000014000900fe8000000000000000000000000000aa0800040001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4820}, 0x8004000) sendfile(r1, r3, 0x0, 0x8000fffffffe) 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 862.529000] binder: 13275:13280 got transaction with out-of-order buffer fixup [ 862.536649] binder: 13275:13280 transaction failed 29201/-22, size 104-24 line 3525 [ 862.556091] binder: undelivered TRANSACTION_ERROR: 29201 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:00 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x1020, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70ca24ff, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) getpid() clock_gettime(0x0, 0x0) symlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000280)='./bus\x00') open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1) r0 = getpid() ptrace(0x10, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r1, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000000)={0xf32, 0x800}) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffff) open(0x0, 0x8401, 0x1d1) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0xe4c182432c41bde9, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r3, 0x0) getsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace(0x4208, r0) r5 = socket$inet6(0xa, 0x6, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) [ 862.595428] binder: 13292:13293 got transaction with out-of-order buffer fixup [ 862.603110] binder: 13292:13293 transaction failed 29201/-22, size 104-24 line 3525 [ 862.618542] binder: undelivered TRANSACTION_ERROR: 29201 03:40:00 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_STATFS(r3, &(0x7f0000000000)={0x60, 0x0, 0x8, {{0x0, 0x7, 0x1, 0x2, 0x2, 0x30b2, 0x20, 0xbf26}}}, 0x60) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 862.661836] binder: 13301:13302 got transaction with out-of-order buffer fixup [ 862.673967] binder: 13301:13302 transaction failed 29201/-22, size 104-24 line 3525 [ 862.685302] binder: undelivered TRANSACTION_ERROR: 29201 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 862.722159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13309 comm=syz-executor.0 [ 862.730544] binder: 13311:13313 got transaction with out-of-order buffer fixup [ 862.730573] binder: 13311:13313 transaction failed 29201/-22, size 104-24 line 3525 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 862.730796] binder: undelivered TRANSACTION_ERROR: 29201 [ 862.779465] binder: 13318:13322 got transaction with out-of-order buffer fixup [ 862.779496] binder: 13318:13322 transaction failed 29201/-22, size 104-24 line 3525 [ 862.779973] binder: undelivered TRANSACTION_ERROR: 29201 [ 862.830702] binder: 13325:13326 got transaction with out-of-order buffer fixup [ 862.830733] binder: 13325:13326 transaction failed 29201/-22, size 104-24 line 3525 [ 862.830982] binder: undelivered TRANSACTION_ERROR: 29201 [ 862.878193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13309 comm=syz-executor.0 03:40:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12142, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) times(&(0x7f00000006c0)) lseek(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 03:40:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='d'], 0x1) fallocate(r1, 0xc, 0xfffffffffffffff7, 0x3) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="dd"], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x108, 0x2a, 0x10, 0x70bd25, 0x25dfdbfe, {0x3}, [@generic="d988212fb9d00dffd86ecb0e75730ee531782be52c2c23168b543168f8721b8f1dc0bffe5b1274c0883eb605d4424b68acaa15d9f403213f1f3bea9495ff784a4af95a9a9a9bc0db5047a6d4074f10398d8f1d35353455f37fc0019df5cf78dc8e40a65f470e504cee567946add9dab09712f3fcfe5027300f0ad778414f07069abac75a042ccc0cc3960919e6a7e2c2a766ad782e0f3ddd117015cebeed5edc50ed73102b077286f5e2cf7bbb41447981c4bff8189038b918bc28fa028f3a806db960765033dff1e3aad0f63d7d15cafb9824788f5ea0922d6b1616e311a0fb4eb4b2a89858ef7465527ced0cc5e9a124f5"]}, 0x108}, 0x1, 0x0, 0x0, 0x902c}, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000080)=0x68) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000004c0)={0x6, {{0x2, 0x4e22, @rand_addr=0x1}}}, 0x88) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x12, {0x2, 0x0, @rand_addr=0x800}, 'caif0\x00'}) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1}}], 0x400000000000170, 0x0, 0x0) 03:40:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLCREATE(r2, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x84, 0x2}, 0x10000}}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @local, 0x23}, 0x1c) exit(0x8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) connect$unix(r1, &(0x7f0000000400)=@file={0x3, './file0\x00'}, 0x6e) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa2) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fbd500094e6dd0d82f98cd9be82ae247ba7d970e9ca9a447f0ff0a1756905dfa09fffef3e886a0f46266065815fe9758189dedf2c1609e052bf5b97095fc39eb3151d770ea39d55e200a90c81771f305a0d55c9c419eec1765e6a3cbfc4314b94dbb661daadb8cbf727fac10cd9cc984c31b6d23b88a015eb8884faf046cab4035a7ad40d1e55d1ce1578219e387ffa738860216a19a16ddf75325a987d195ba308bc57599485ec11321a1752ca6b8a1d2cb8349a831ecbb6befdaadf81123411301000000f15bb3e58f744002fceaef2788b4a1b0e018a3489c753ab1474b8700"/238], 0xd5, 0x5) io_setup(0x1000, &(0x7f0000000300)=0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/context\x00', 0x2, 0x0) io_cancel(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf, 0xb2b, r5, &(0x7f0000000580)="2dbd05679374e82b476c7e14338a21ff5008e4741dbfcec3a94a9dcfe781db35b576c85def0add3c08882f44616e6eb0f2faf4bee5fe819e04f14eb64cff676455ae928ae4f9532a4df2c1eaa4eb92259beb5e560a959d4ab7cc7405bcc37bb6bc5a9f62d3ff8e48a7d14fd18dcc78746605062d0b6c7d6d06c7c85d931375a54924a2b726c18170b911d1c40d195f69b44857bfdb15ddf4a1635a8f39b3e937938dc7596b0fb3efca22a94e450d85fdfc97cf6bd128f471aea1b0cec0317e1abb8616ed94c37c", 0xc7, 0x8, 0x0, 0x2, r2}, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RCLUNK(r8, &(0x7f0000000680)={0x7, 0x79, 0x2}, 0x7) 03:40:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 863.346486] binder: 13341:13346 got transaction with out-of-order buffer fixup [ 863.359219] binder: 13341:13346 transaction failed 29201/-22, size 104-24 line 3525 [ 863.371225] binder: undelivered TRANSACTION_ERROR: 29201 03:40:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x20000000000}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, "8fc97cf6103b10741c7e9b181ed2e56f199f5687c9aa9b6d6fe60230a9dec68e29a59cff69031c757f59308f58cd9760dd6f013f60075633e06a091777df75346ae62308cd0964ac9e5c4b31c8ed5ccb903d30723cf591bd6ab5d1af24b984c381d77390544e50e83dbf6e3cf34c31e2019a29c3a706f5c2c195b4c4173fe9617080836df5727281f734abc70cb7f247a61d26dae3b201895716ac97988f7182dfad8ebb5121d99dee0a3640d530d0e7ca05bb5fd9bdd1a1ca900c72206542116e74fb39dc8ee2486b959b1d2a353dc34f84c174f8dae9517543a0011dc40dca45ddbccd9e4127ed93d117c6c8c4e43af965688c695f3aa1362fc6f6ba2e20dc7087093a0fecce2c398269bfc8159fa884c5408a974ffe59c0a265dddd74632141fa76c2e61d756804cf2cdfad69352a6d65d5242e6a10f2c67fd6fcb1e0efc1152d0943963a72bb1565676a44bde9e5406a86dfffb347b703fd8bec6a94915dbbbafb62930fd12bf8f93c8bb5cbe55818ad1e6098a78fa9d5f43f48bc9d5a27202fc64875a277edc7a6e18b3ac4170e843b5d4a4d21aee135697f1c94e41017cc882c1d21aea28ead73f11d7f5be6cb50b709e7e9e596819d42770e5133421e9b7f3b55efe2b2d8a7ccf903f8e90e928b7166f16f37b03af9b0dca567e3d4be766472845ff3a73e0eba96615dd9aaf4e852fa20445e0b0ffb193f9f6601724add21cca7af73f14bad4461410c0d044daea8ac2ad9dc93cab5ba532eabbe2d71c199a3e8412a367e80e854068c0bfab38832d2401ce3a3108f77122b9ee6849facf56038b1a88897bf2af619ab336e174f0245cb9b44af13f6b807e2a4ae6179aebc61971a102763359e15a9bf5004aafc1141c50c2f7c4111fa29e66a7c5a0efdb4ac8763b41c0f030684971654fe3897226f2750cbd65858d0be596aaff881f4a7432b54b2ce4d3d819a480af0afa054fdfa6813b26c0d447f2215d7041f67a2c4485d3639ced3400b7e6b5b831644b8c442e25ce4a5746e5c911143e14a7f120ede5b64e2b8a86fa577e85c5a2a7adc9d3f5537617dfe55ba512ef0cf5c8aa2760d4c411efcf91a325915cf37e83c4f9881a5648014bbdcb9b781a74e1f72c2a9e189b9bc25fe6050d87d64e9827cf5820d9cc22a7cacc221ea71ca99d640904500718244d137e1a63edbef83217e041582c998eb49bec78620b148cc10de9e593c54b76971e8955f77d0f74357e63eee46f9e61869e7069b7cf21e237146a473d428e3829781113ed9d74fa0a7c873d2d8dbf174a7e38ed903357806151366a0650561c387ebbebf3b0216549439ec7b8643de9c69d14bc86e05dd9c4e6a5a505f8e77e5de6406810ad8e1bc5c3714c125e005c5e3a4c880543b09b5aa37737f0db785d3d26c1a50e8cbd55af0cfba6f582c7c13c3ee11efc20bcd6c71f70208bb6003d9ef2a7146d8d08ad69aac42ab5ef731d89f993c9240ab49125684bc8bee70881759bc88d5bdaf6bb5e1aae3289b51c06af61faf3df5406138a7f9e167066d8f6a698a665982484b758ebf928b6545d08d54cd502145a4dc61cdfea0d1bc313c8937f60328c72dbe4c19be874b8416314b3426a3e88d228f24b41880e2d787231d97e9d05ba109fe18d6fa7977b4f10b869326f8236978bed43f53bdd40b8983790b670d85f2ae68e61d6516ab6b014a10d67da3c5a1dfb178cd43f54d13a15306009e7060722d55e2464b7c9c166cbdf427f05f306775543bcb59ebc048889522d5e6aa4c186a9007ee4259e3a65e835b2c2a3dd9a9527bcedce476fe9badde4a61016fac37cdfc7c0cc5f4fd71ce1370e633a9945cafd5a93e3d718a099430ffacdfa5bafd9c2e5f560f49fe6e4a552d8bc7191ae70091b634f3b8c283ff33781365c42726529a8bb3849720bc3dce0d69bf44b8877317a7003136a0d7a763cc876fffaa3615dcc59e1d97217621b2514513b0baaa6e7cddbedc6869d43dd2564a95777b66f20b11a1a99a8e7e9ab29fc9590abbcc6ca2d559673f79e93635ddbd75cd37fe59fbdf5344683f9da375cd37d3ed2e363b7b79c4bcbf5300236abbf86bdc1b969922095f0c323b47fababcee0639ed539051c728ebbe51c5f9ef5475382e3907b715fc043f2cc49c39fc3d0563bfad819070a61b54e3bfe808210a46eaea78dcc0a61007c860fd427949471caccaddb115694ae76716548be8b4f1d5ecb4b46d3e6c31e152ff966b0f5a14a47460f9f60651d997ca8e57b6f31e2899a61701e6bc5b8186ef6311ee0013f76624558733f3bf0b83b58c5281c017bd37db061c88124ab25442dd949709800265c30140557f2832495aa88592fe380c0ecde96e6a16245d88a20403ba94a8c975fad26dbbc72ab30a8211a1fb0e041c2a30b28d0318e13094ebf2a5beb9c48aaa0d9612dcdbbac9def3152571da2dadc33bfbb55cf58794374c074369316f9fe29b546a3e25bdd622e0ee09c36b1751a5be61dbf652a927c2a1637242d17f827b6e5c98b1c58b544fc213374e1fb308a412e9b25cea768e0c31004fc03318f787eab08c578d397453fd16749f957f49e68c0d3c0b07f7b09564042cc049dcdbe2341d1b29c27a378bcd13471f00312ffa4ec17864870e401bf0ad34b53a4f4a53d680c153618b3766fdeefebfcd4b74f9d6d18c542f70ccd178b3fd219431fdf0e16f63cc5ebc88f0c5cce629c8092de20b7effdc83df7e41925917cfe72cc4d327e8d16efccd595141658803ee0dbb2f3a21f9bf5553dd37a1a3cddec91b6ddb6ee83a011abfe161ca8cca4d21854cf9a9b7cd28b8a059e775148c46242c72c074f5a624d8d34670a0b5dc813c87b9345917ba5c4a365f80bc6e6da3760ae1aab0792e479827028f021b4ca978ae3df748a55bf1ada5de98b802b1dbc3edebdb924120edd7643b4acb8500722bee1163640546257997998186385e6e59516e50207961cc5ccf1f9b54b5c925b09d5213106d24d23fbe7e76b791af811b3d3693bafc4208d52d2a95feb0963dd64496353d4e5c82fa729300c7fa307808146721c3b383a1be7a5733e7cc3fe6d58606eaa596dda1388f9ddbef5c38f684dcada2420575062e5d7649d0e9100bed10c56aeb29ce8eca7d5349b453548816e674e084c154ec7e61d693c4f4248ef5865248e28b714c4ccc13233e5f23d3cd24eb0ffbe90d4c50ebe9b48ffba68b7e303a40aae260bc49365ce875a370712a06fdb307c6d28286fd41e2915e697ba89235115d3e7d4629c9bbee82a7d9066e02584b8e5a8136ac7783d1addd738b0870b126d7489d16746c9c87520fee31e2cad0adb7ce436be350b9796f90fcc986aaf72db1fb6fb3768391c1ffc6f79aa53218c070a81fea5e930e4089efdfcf3424e2497c6c582d7f633a5b954e70c955cecc80e5c9a5eabb6fc690173b9ac6f851fbf32fffbe8a996e0fbb37138d88c3b0693a08c0c09f1b6f1b6aee367b3827b3d7fb63bb69fc146e7967f6059f4a5a38639beaad7d301902e45037b31221d48bdf4ab11116835c4a324e46c215b9bff37734b84558cf09d4bdd9f02588ecdcfb07f78efac5912bce2c7c0ea7cb8eb7420462287b515c89a2879d4efea65e7fe53637d5008528d56435e3855f3c3396166da3f9974097060a2a867a4cf5fb8cbafc01035b8339d6055ef9e6392397b87a31251c7d6c76e9badd3c3d2e912bb99bff29c5722a8da242d176e7dc3372d46755a8a7e04308da781393dc4c707048e32a6165cb99cd8f3d2cc6423bcaa3bc1fff758b9c5a3091bbad05e096c09bb8673130862cef1f8154f04cc975aaf31766a11b6d90cc1b5ab80a637101393d2515c479a82c93ff5e99e6d2fc9db896765e4791f8a6c33e2a3e0478178d42758ff16da0ea472f77a3ac02ab4b682b1a363bada2fe34b3d5fdb47e191b86a9ea3fc5de1dcb96e6905fa6afac35281b0dc9899d49fc0300f4eea217fd661eb2b89e7cadf08bf70a1bd9dceb3cf0a287bd45f3c5bbf829ed0489acf7fad7a9ed32bae95e502f6ae48c641a2e69e69e1fc32078caf7eb10a7d324c0baeef58dc5a2c7f3badc087c39b5ad46a352dfada0bb32b64f06f097f4b18be32462d45158dc040978b3e624276cd19666953bb552de73a12eb8bce6024544130fd9a4b6c7d3136d46d7bd29b3cf9c2d430015cfc8a3658915e9ffc998d2703ace60dcc53f309e0f935317dc43429eeb79092a689bdf6f3ed53422c716f1936cda70c2db6decba59a8c4fe51d343a1649a9ac6875798435b71536a9031ebe6693d1ae7e52e236c312fdca2bdbf4c430d70b62da80e6c9aa800e6dd8b3602ff7a119ee3b06143c1a18500046500156367090e0205690cf10218989d0828231ebe2c23ef02c45b49243e77cc0fad4a4fbbfa3ebdec62ad26311d17958739ed6121f41f8f6e8afcbe276f59f1b1a1d3a2513cc895c01c7ce4cc56e35759d8c35834e3f150860c1fa068ed240776c0ca15c1c7a9c11184eef272ad724a26bb2e77fb1de0e230b1df996fa231133f1fd84ba20df513c74e7f4e45936254299f9d8a7969802fa6fb813e64b3da5c29573b1441b0b63d10381398f4b73a345be41ebab27f55559ad9e4c29a9f3a00bc94a62ebf331dab8d7e290cbace3361588165fe4f6a7b3087220f00748cf88059b0b23fd7b6069091d8468a0e4d9d6c6ed819054e71e1b766e634815f22a813718b949be64d0d3c9b47d8a208327da6c8a42b5367df209c457af8fd5fa203dfcd80cbd02169788b1a1dfb96f6c73dac80e4abfecdd516c466d7a272044fe9ad7b18989411ce2948ab7c54855b716b5cf2a59075ba4ea2e74779bbf891bce2da6275b2a04371d494d74452136523e64ef47a4a760dbb9e53af443fd751c2dddc2fb32048a565037f02f3d15764678d42bb12449806900283d86a167309219bdf8edf4ce32dcc492ecf612d388e6ba37250dbe21f39a3850795ec3c1c11a79d5e5bc7b6b52147ba0ba8794c85f0525b210202d8b93e99d7d47260929752918c5c14271e93414f7f4af82a8899155e8bc1182c20ec0e3792cccfc277551d61657aafb177057e589b4a534556735693456f2a631e0176560fe9a98802324acc31ce7a0c4590ee01a6a8f3ddbe546fb20d9310b867340d3b515dba3e8a2dc6d269fb6bcc28b86e8302bed2d3724b72eb2d75e37d1713a6afb2daa9ee3df50b5b76d05d0708f87fc951a750546abd112959ea03859371cd6660d759338d7652ddf0f6fb3ec905714b798bb55c6a71f5685864161d14423cc4f4720afeb2f8c7bd593fe48fb595d5ce26c29f554ee2c9ec79f5b8513781c61f1dd03bef029626b37219321bf0a4e6e265968c83dfafca83f2c41a893eb2d2022aebbc8712bc2822669b41db4e7bc633ac9f22f1afd72ab5e6b5fcb1b198fdc27f26467a69ed4cf0bab5195340619dc474a304e25b6c0c5896c05fce6c2984d4ae36233707f01291940104d092dd3493019d68d295bd017e2e8a50e00a95fa69312dcb03dd33e167326743c2f83eeb14cbe33600c8987a633ed8d385d1772a503a68a50754d16d1bfe9e007819fd60b4eb4d228290452888023e74885b70d8a06596224852c9601408266bce56b4db45f27bf454ca833e908970daa63d97da8710e06257cf6fc0de16d37cafb12510660ca0ee5e840d69321a4be474056fe478b66d3c5a4de09eabc7db6a6bf17bf29bb4f5148d0368b90d0167947c92fd5f853615dbcb5a3072a76022773ad2e417d5812cdf8edf7723b66422ae8574540cc8b685", 0x1000}, 0x1006) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 03:40:01 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000040)={0x3, 0x3ff, 0x38a}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x20, 0x9, 0x2, 0x0, 0x1000, 0x800, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xa8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x44080, 0x8001, 0x1ff, 0x9, 0x8000, 0x10001, 0x9}, r1, 0xf, r0, 0x2) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000002c0)=[@acquire={0x40046304}], 0xffffffffffffff89, 0x0, 0x0}) 03:40:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) lseek(r1, 0x0, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) [ 863.529781] binder: 13369:13370 transaction failed 29189/-22, size 104-24 line 3138 [ 863.540923] binder: undelivered TRANSACTION_ERROR: 29189 [ 863.586601] binder: 13378:13379 transaction failed 29189/-22, size 104-24 line 3138 [ 863.595310] binder: undelivered TRANSACTION_ERROR: 29189 [ 863.715751] ip6_tunnel: ã xmit: Local address not yet configured! 03:40:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x20000000000}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, "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", 0x1000}, 0x1006) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 03:40:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) lseek(r1, 0x0, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 03:40:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf={0x95, &(0x7f0000000140)="71c5409705017a9d26b427f556f7992e55abcee736f1d18d11ccd53a8f69567fe98d817789a03c82f818e8cdc0591fd28431416c93579baad498be980f09464f825ccec0788851b5bdf9b7e572b602f4f23a30d02fc0164b7c8a004880025c819796c2668021f4c3c21d4df563baf76823e7bfa59fae9df58a7b8841e30ea4bb57665bd336ad4cad37d4791015685758d85def87ac"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000280)=0x9, 0x4) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2fffffffe}, 0xc) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000200)=0x4, 0xfffffffffffffe2e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 864.197379] binder: 13384:13388 transaction failed 29189/-22, size 104-24 line 3138 [ 864.229097] binder: undelivered TRANSACTION_ERROR: 29189 03:40:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c00)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}}], 0x2, 0x0) 03:40:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000600)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x2200000}, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x1a) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r3 = creat(&(0x7f0000000640)='./file0\x00', 0xc0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0xfef9, 0x1, 0x0, {0x1ff}}, 0x11) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_type(r6, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xffff7dff, 0x9, 0x4, 0xffffffff, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = dup2(r8, r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x131f64) readlinkat(r9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100)=""/4096, 0x1000) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x202000, 0x0) ioctl$RTC_UIE_ON(r11, 0x7003) read$FUSE(r11, &(0x7f0000001100), 0x1000) 03:40:01 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0x3, &(0x7f0000000280)={0x9, 0x3}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x2008000fffffffe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 03:40:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="0900000000003639408fa3a3ba27660199783b0a", 0x14}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x191, 0x0, 0x0, 0x0, 0xfffffffffffffeed}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0xc2bb, &(0x7f0000000000)="838d713fdf56af70bdf8436eb29603dc89d0760b68") tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 03:40:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x14, 0x40, &(0x7f0000000040)="969d26b6457a62152d0d3b0aeffcfb7d8589794e4f84ba348ea161774572dd5815db0dbfc90001a847275a6d389fc9cab6ab160ae009ce22c959af5c95fd7cbb"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0xb43, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 864.361450] binder_alloc: 13415: binder_alloc_buf, no vma [ 864.367909] binder: 13415:13420 transaction failed 29189/-3, size 104-24 line 3284 [ 864.386175] binder: undelivered TRANSACTION_ERROR: 29189 [ 864.392304] devpts: called with bogus options [ 864.451531] binder_alloc: 13434: binder_alloc_buf, no vma [ 864.463481] binder: 13434:13437 transaction failed 29189/-3, size 104-24 line 3284 [ 864.482563] binder: undelivered TRANSACTION_ERROR: 29189 03:40:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:02 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000100000002000000f0000001000000f5000000000800120002000200000000400000000030006cff030000000000007b000000200a0000c4bb152c00000000000000000102001cbb00000000000000000000000003000500000000000200ed00e0000001000000ba00000000be8ab56512d0aa29c0427991bdd25f9e5680076a8b662d1cb830e4de9fdf5277c62be0070000008d4f69fc59b0f906a5796a832e22d82273130443ec4da50596c26281b42967"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) dup2(r0, r1) 03:40:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0x0, 0x2}) r4 = epoll_create1(0x0) r5 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = dup2(r7, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) dup2(r10, r9) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x815}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r13 = dup2(r12, r11) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r13, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r13, 0x6, 0x16, &(0x7f0000000280)=[@timestamp], 0x3753c) ioctl$TIOCGSID(r8, 0x5429, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r5, &(0x7f0000000100)={0x28, 0x37, 0x2, {0x0, 0x8000, 0x185397ed, r14, 0xa, '/dev/ptmx\x00'}}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)) r15 = socket(0x10, 0x400000000080803, 0x0) poll(&(0x7f0000000000)=[{r15, 0x8}], 0x1, 0x7) r16 = dup2(r0, r15) ioctl$TCXONC(r16, 0x540a, 0x3) 03:40:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x2, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) syz_open_procfs(0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x5d1000, 0x0) [ 865.089293] binder_alloc: 13452: binder_alloc_buf, no vma [ 865.097586] binder: 13452:13457 transaction failed 29189/-3, size 104-24 line 3284 03:40:02 executing program 3: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1277, 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000300)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb4291ede5e270dd3f0a272134e83bbe886c41fc6faced4210500000000000000ffffff7ffff7ef0900020000d14704000000000000000000000013003e00", "141f2b09000000000000002850c94200ffff0000230000000000000200", "00800000000000001a4809ff1f48b823eb000000000000004f6fce49370600ce"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = dup2(r4, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)) r6 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r7 = socket$inet(0x2, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000000)={{0x2f, @local, 0x4e21, 0x4, 'lblc\x00', 0x20, 0x9, 0x6b}, {@remote, 0x4e22, 0x0, 0x2, 0x7, 0x2}}, 0x44) [ 865.129428] binder: undelivered TRANSACTION_ERROR: 29189 03:40:02 executing program 3: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:02 executing program 3: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:05 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0xc0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000180)='dnr\x00'/13, 0x0, 0x0) 03:40:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x6, @perf_config_ext={0x2381, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbf5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f0000000540)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400009) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="c9"], 0x1) fallocate(r1, 0x3, 0x800000, 0x8020003) 03:40:05 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0xfc7c) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="7175060000ffe064f3a435e7a1fece9d0dd350e110fd12b0a762fffe3150ad106c5628edfb6ee5c98825c211ae6c6fd269084c3ab5d46c70a46f97cfd888e8f1359dc29b598fed17fc2840aa5b97029e347eac6bf4482f452c70d632fae48c5e069b521e1b346dd0dc5e6908d43f8ec86646d136905793b77fd9b10880f95b46b00c43335e4402412e6330402ceda7130b1b51a534c3a514db5e3a633f112443aa721ad15c25"]) 03:40:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:05 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) perf_event_open(&(0x7f00000004c0)={0x2, 0xfffffffffffffed4, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd3778287951c56ea}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:40:05 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:05 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 867.431102] FAT-fs (loop5): Unrecognized mount option "qu" or missing value 03:40:05 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB]) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000400"/24], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) 03:40:05 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000005ec0), 0x40000000000017a, 0x40000000, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYBLOB="2cc395ea559561f86491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) ptrace$setopts(0x4200, r1, 0x3, 0x100000) sendfile(r6, r6, 0x0, 0x2008000fffffffe) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r8, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 867.567709] binder_alloc: 13525: binder_alloc_buf, no vma 03:40:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) creat(0x0, 0x0) connect$inet6(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@loopback}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000100)=0xe8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r4, 0x0) ftruncate(r1, 0x48280) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x3c}}, 0x14) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 867.624524] binder: 13525:13530 transaction failed 29189/-3, size 104-24 line 3284 [ 867.686207] devpts: called with bogus options [ 867.754279] binder: undelivered TRANSACTION_ERROR: 29189 [ 867.794629] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:05 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x24001000, 0x0, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setresuid(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000040)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xfffffe2f) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() link(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000140)='./file0\x00') ptrace$setopts(0x4206, r5, 0x0, 0x0) wait4(r5, 0x0, 0x0, 0x0) tkill(r5, 0x22) 03:40:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:05 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x200, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10a}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read(r1, &(0x7f00000003c0)=""/11, 0x3d11) r6 = epoll_create1(0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x40000, &(0x7f00000001c0)='trusted-\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0x15}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r9, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={{r10, r11/1000+30000}, {0x77359400}}) r12 = epoll_create1(0x100000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r6, &(0x7f0000000140)) epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r13 = syz_open_pts(r1, 0x0) dup2(r1, r13) 03:40:05 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='attr/fscreate\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'bridge_slave_0\x00', 0x1}, 0x18) syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 03:40:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0300000014f30000000000000000000400000000fdb8ce480822abf69ef107520de0b3faec8599569d0000000000001ee87087193f795d7f3113a63bfc81a22c21d75ed305d2db0d87579fc22c0010000021ae018ac18b1ce5081f02828b4c0e2061212daada264fb9c86a4dbddedd22000000800602300588bed8b711946ec0350250f992239c99b1cf77830d03cc9814", @ANYRES32=0x0, @ANYBLOB="0400e9fffe80000000000000e8ff0000000000bb080008af5160ffba00000000000a1fa5d26b85c9ebe59fd13d01e274c7b53a2649ba0eb9ae21e76ba0771af84dbb515f1f4b68d069fb6da28341bf0c11217a7a8c3c9d8588250a67e8cbb929268dca95cdaec89ffb4ecd9bf4811887f00932a5ff8836d0575c8c9af62ffaf6d3e9bf862c9294ed41dfa4447712071c1edd4f3b976183813dab8f8ec829a5c985c4850400c2700bf73ab135a4d3dc98310b75873602ed9710b21bcac1b459942ad99b138affcd86e3f97adf6f80f2088b8690d244823d131a7e0f4a2666a69bb2a774b393e72d756005baa1b1541698a499b9128ba75da14bf902b0f1864f4e0ce431e596eb0631da208d128264db329f1c"], 0x34}}, 0x0) [ 868.318491] binder_alloc: 13560: binder_alloc_buf, no vma [ 868.324520] binder: 13560:13572 transaction failed 29189/-3, size 104-24 line 3284 [ 868.334610] binder: undelivered TRANSACTION_ERROR: 29189 03:40:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x182}, 0x1000}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x41f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='attr/fscreate\x00') r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x6) r2 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a311b47d0823bdc3948dc82da09a2f199021bc154c3d488cd1e58def01e329af6d660e798fd56aa94e4b3300354c424265a1bde55b960d0e57877ec"], 0x3e) r5 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r3, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc0045878, 0x0) r7 = socket$inet(0x2, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB="c2f1dc554967adb074bcf09c17cfcbf4c567b26977a7690b19995b94d3c8737d75da21baa5207e94b7d7b1493b5c7141dde734bb151197cbcca6cbc02a79fb431ba952cc2812805e91d4c3cf797dd05bd30e6586d005e2019d6af0802dbdacc916e966e4627045a992da160b4a988e98025bcd2e29dabe5adef869fc54ee46a8f514a31c92ee7a7321c24be5ee143b148f5d6e05ce0fc10405affa04879069098051993c8bcb3b24cba968bd300ada97e32a9e5562", @ANYBLOB="67f3d26c37030323f366a98ba3e9a12d80cf7bb2a938bf7277ee75b48e46c257b6a174352bd9785ec4ae6fd6b382b5e4bb999a8121fb6861812c6e8768fd21728809fef8ac43dc3d82b2f43eb95fb550ae85bbb7015e6ffaa7e44c9bdcecdf9d438f888c5f9a", @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="bedfb1a0152e45fabac251146d7777dd9f31557a0e837faa56f0b666e4b97a95965b1e1aa5b5354dcd28fc31798e13d663e4c1ea9e7b6eef03c906df95f323303fbce1b88f56b5d17a7d6cf0e3a0fa6be300f00bec19426d209178616847f2ece6a020706eee2864847ac741c7cbb223666c67ebf88acb7eb2810cb070a1603f78d11104c6", @ANYPTR, @ANYRESOCT=r1, @ANYRES32, @ANYPTR64], @ANYRES32=r0, @ANYBLOB="263dae6416ee1815ec1bf2f7b369a9933f32b4bb938ab9c5238c7aaf761ca7f9593db5f930481724883a7be00b310d60ef50e8a86467ff942178e9bee0d4ea6cb6b834bca3e3de03733b490c6f26e6d96b758ed13672456693295fef900270d57d879b9b21ecc3c8979af58ef3f7f1f0c5d03e9a65d4042d", @ANYBLOB="764fe80410e4cd2a75cec245da855a8e99ddbfb1093f2c377898b051c4c641e77b844de517eca0cc50ef89fa2cc6927235cd23ceaec25f9a6e0a575371148393bb87b3bb42a83bed223046a89b8360e49bac32378fbbaf3b9c398e06ca2f94e3c3e1bc422ed9e31eb360db814d692497e928acb7af952abfd37ffa554235feefc1689d", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="adf77551066024efb836c0fd"], @ANYPTR, @ANYRES32=0x0]], 0x8) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) [ 868.368346] binder_alloc: 13583: binder_alloc_buf, no vma [ 868.371882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62228 sclass=netlink_route_socket pig=13590 comm=syz-executor.0 [ 868.391842] binder: 13583:13587 transaction failed 29189/-3, size 104-24 line 3284 [ 868.401293] binder: undelivered TRANSACTION_ERROR: 29189 03:40:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x68, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f0000000000)=0x2c8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, 0x0, 0x8001, 0x0, "9d4e241504134c5f00b0a2ef0a4457e2bd35d1486204b4fb5b4dbaad4a1bb50aa7333f3e7cd1a65e2d0c27f138ef9967959b78fa948a7d9028431da16bffc9f6b8ed076a8afed89fff0a72e5c3d25020"}, 0xd8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x7, 0xd9f, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@rand_addr="614515638899218000", 0x6, 0x2, 0x3}, 0xffffffffffffffc2) ptrace$peek(0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r5 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x14, 0x36, 0x8, 0x70bd2d, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24044054) socket$inet6(0xa, 0x0, 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 868.650507] binder: 13599:13603 transaction failed 29189/-22, size 104-24 line 3138 [ 868.672880] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.742511] binder: 13611:13613 transaction failed 29189/-22, size 104-24 line 3138 [ 868.777259] binder: undelivered TRANSACTION_ERROR: 29189 03:40:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:06 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000400)={{r4, r5/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00') r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) ioctl$TIOCGSID(r6, 0x5429, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00@\xd6\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = fcntl$dupfd(r6, 0x406, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = accept$packet(r11, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) dup3(0xffffffffffffffff, r12, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40042, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40, 0x0) ioctl$RTC_VL_READ(r13, 0x80047013, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x3, {0x9}}, 0x18) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r14 = socket$inet(0x2, 0x0, 0x0) bind$inet(r14, 0x0, 0x0) connect$inet(r14, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000280)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @dev={[], 0x10}}, 0x6, {0x2, 0x4e24, @empty}, 'veth1_to_bridge\x00'}) 03:40:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 869.209012] binder: 13627:13630 transaction failed 29189/-22, size 104-24 line 3138 [ 869.242656] binder: undelivered TRANSACTION_ERROR: 29189 [ 869.679777] device sit0 entered promiscuous mode [ 869.693063] device sit0 left promiscuous mode [ 869.811896] device sit0 entered promiscuous mode 03:40:08 executing program 4: open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = open(&(0x7f0000000840)='.\x00', 0x400500, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unlinkat(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0x200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r10) r11 = syz_open_procfs(0x0, 0x0) sendfile(r11, r11, &(0x7f0000000180)=0x74000000, 0x5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b45a00000000000080ddf5000000000000400000910000950000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70) r14 = perf_event_open(&(0x7f0000001900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) ioctl$KDGKBTYPE(r15, 0x4b33, 0x0) r16 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f0000000480)) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r14, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r15, 0x6, 0x1, &(0x7f0000000240)=0x100000000, 0x4) ioctl$FIDEDUPERANGE(r14, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r18], @ANYRESDEC=r14, @ANYRESHEX=r17, @ANYPTR]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r17, 0x40086602, 0x400009) write$FUSE_INIT(r15, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r15, 0x6, 0x1d, 0x0, &(0x7f0000000340)) ioctl$EXT4_IOC_GROUP_EXTEND(r14, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(r14, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r20 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r20, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r20, 0x0, 0x4) write$cgroup_subtree(r17, &(0x7f0000001980)=ANY=[@ANYRES32=r20, @ANYRES16=r19, @ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe9dd0cd8af29c41ab6d7eace1cdde67620b02208401772ca8b6642680c1e7e438dbf26d47a550e3483c017587052a184a7e33429d287559880d251204d36465ae7cfc0e4b62185f9728e9b02fed", @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r14, @ANYRES16=r13, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64=r13, @ANYRES64=r15, @ANYRES32=r14, @ANYRES32=r14, @ANYRES32=r14], @ANYRES16=r19, @ANYRESDEC=0x0, @ANYRES32=r16], @ANYPTR], 0xfb) write$FUSE_CREATE_OPEN(r11, &(0x7f00000000c0)={0xa0, 0x0, 0x6, {{0x0, 0x2, 0xa1ac, 0x0, 0x4, 0x7, {0x2, 0x5, 0x7, 0x80000001, 0x26dc, 0x3, 0x81e00, 0x5, 0x4, 0x6, 0x7fff, r12, r19, 0x4, 0x9}}, {0x0, 0x2}}}, 0xa0) r21 = syz_open_procfs(0x0, 0x0) sendfile(r21, r21, &(0x7f0000000180)=0x74000000, 0x5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b45a00000000000080ddf5003408c30025cc50950000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70) r24 = perf_event_open(&(0x7f0000001900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r25 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) ioctl$KDGKBTYPE(r25, 0x4b33, 0x0) r26 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r25, 0x540f, &(0x7f0000000480)) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r24, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r25, 0x6, 0x1, &(0x7f0000000240)=0x100000000, 0x4) ioctl$FIDEDUPERANGE(r24, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r28], @ANYRESDEC=r24, @ANYRESHEX=r27, @ANYPTR]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r27, 0x40086602, 0x400009) write$FUSE_INIT(r25, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r25, 0x6, 0x1d, 0x0, &(0x7f0000000340)) ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(r24, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r30 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r30, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r30, 0x0, 0x4) write$cgroup_subtree(r27, &(0x7f0000001980)=ANY=[@ANYRES32=r30, @ANYRES16=r29, @ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe9dd0cd8af29c41ab6d7eace1cdde67620b02208401772ca8b6642680c1e7e438dbf26d47a550e3483c017587052a184a7e33429d287559880d251204d36465ae7cfc0e4b62185f9728e9b02fed", @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r24, @ANYRES16=r23, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64=r23, @ANYRES64=r25, @ANYRES32=r24, @ANYRES32=r24, @ANYRES32=r24], @ANYRES16=r29, @ANYRESDEC=0x0, @ANYRES32=r26], @ANYPTR], 0xfb) write$FUSE_CREATE_OPEN(r21, &(0x7f00000000c0)={0xa0, 0x0, 0x6, {{0x0, 0x2, 0xa1ac, 0x0, 0x4, 0x7, {0x2, 0x5, 0x7, 0x80000001, 0x26dc, 0x3, 0x81e00, 0x5, 0x4, 0x6, 0x7fff, r22, r29, 0x4, 0x9}}, {0x0, 0x2}}}, 0xa0) r31 = syz_open_procfs(0x0, 0x0) sendfile(r31, r31, &(0x7f0000000180)=0x74000000, 0x5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r33 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b45a00000000000080ddf5000000000000400000910000950000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70) r34 = perf_event_open(&(0x7f0000001900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r35 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) ioctl$KDGKBTYPE(r35, 0x4b33, 0x0) r36 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r35, 0x540f, &(0x7f0000000480)) r37 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r34, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r35, 0x6, 0x1, &(0x7f0000000240)=0x100000000, 0x4) ioctl$FIDEDUPERANGE(r34, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r38], @ANYRESDEC=r34, @ANYRESHEX=r37, @ANYPTR]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r37, 0x40086602, 0x400009) write$FUSE_INIT(r35, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r35, 0x6, 0x1d, 0x0, &(0x7f0000000340)) ioctl$EXT4_IOC_GROUP_EXTEND(r34, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(r34, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r40 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r40, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r40, 0x0, 0x4) write$cgroup_subtree(r37, &(0x7f0000001980)=ANY=[@ANYRES32=r40, @ANYRES16=r39, @ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe9dd0cd8af29c41ab6d7eace1cdde67620b02208401772ca8b6642680c1e7e438dbf26d47a550e3483c017587052a184a7e33429d287559880d251204d36465ae7cfc0e4b62185f9728e9b02fed", @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r34, @ANYRES16=r33, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64=r33, @ANYRES64=r35, @ANYRES32=r34, @ANYRES32=r34, @ANYRES32=r34], @ANYRES16=r39, @ANYRESDEC=0x0, @ANYRES32=r36], @ANYPTR], 0xfb) write$FUSE_CREATE_OPEN(r31, &(0x7f00000000c0)={0xa0, 0x0, 0x6, {{0x0, 0x2, 0xa1ac, 0x0, 0x4, 0x7, {0x2, 0x5, 0x7, 0x80000001, 0x26dc, 0x3, 0x81e00, 0x5, 0x4, 0x6, 0x7fff, r32, r39, 0x4, 0x9}}, {0x0, 0x2}}}, 0xa0) r41 = syz_open_procfs(0x0, 0x0) sendfile(r41, r41, &(0x7f0000000180)=0x74000000, 0x5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r43 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b45a00000000000080ddf5000000000000400000910000950000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70) r44 = perf_event_open(&(0x7f0000001900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r45 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) ioctl$KDGKBTYPE(r45, 0x4b33, 0x0) r46 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r45, 0x540f, &(0x7f0000000480)) r47 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r44, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r45, 0x6, 0x1, &(0x7f0000000240)=0x100000000, 0x4) ioctl$FIDEDUPERANGE(r44, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r48], @ANYRESDEC=r44, @ANYRESHEX=r47, @ANYPTR]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r47, 0x40086602, 0x400009) write$FUSE_INIT(r45, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r45, 0x6, 0x1d, 0x0, &(0x7f0000000340)) ioctl$EXT4_IOC_GROUP_EXTEND(r44, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(r44, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r50 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r50, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r50, 0x0, 0x4) write$cgroup_subtree(r47, &(0x7f0000001580)=ANY=[@ANYRES32=r50, @ANYRES16=r49, @ANYBLOB="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", @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r44, @ANYRES16=r43, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64=r43, @ANYRES64=r45, @ANYRES32=r44, @ANYRES32=r44, @ANYRES32=r44], @ANYRES16=r49, @ANYRESDEC=0x0, @ANYRES32=r46], @ANYPTR], 0xfb) write$FUSE_CREATE_OPEN(r41, &(0x7f00000000c0)={0xa0, 0x0, 0x6, {{0x0, 0x2, 0xa1ac, 0x0, 0x4, 0x7, {0x2, 0x5, 0x7, 0x80000001, 0x26dc, 0x3, 0x81e00, 0x5, 0x4, 0x6, 0x7fff, r42, r49, 0x4, 0x9}}, {0x0, 0x2}}}, 0xa0) r51 = syz_open_procfs(0x0, 0x0) sendfile(r51, r51, &(0x7f0000000180)=0x74000000, 0x5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r53 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b45a00000000000080ddf5000000000000400000910000950000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70) r54 = perf_event_open(&(0x7f0000001900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r55 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) ioctl$KDGKBTYPE(r55, 0x4b33, 0x0) r56 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r55, 0x540f, &(0x7f0000000480)) r57 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r54, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r55, 0x6, 0x1, &(0x7f0000000240)=0x100000000, 0x4) ioctl$FIDEDUPERANGE(r54, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r58], @ANYRESDEC=r54, @ANYRESHEX=r57, @ANYPTR]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r57, 0x40086602, 0x400009) write$FUSE_INIT(r55, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r55, 0x6, 0x1d, 0x0, &(0x7f0000000340)) ioctl$EXT4_IOC_GROUP_EXTEND(r54, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(r54, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r60 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r60, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r60, 0x0, 0x4) write$cgroup_subtree(r57, &(0x7f0000001980)=ANY=[@ANYRES32=r60, @ANYRES16=r59, @ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe9dd0cd8af29c41ab6d7eace1cdde67620b02208401772ca8b6642680c1e7e438dbf26d47a550e3483c017587052a184a7e33429d287559880d251204d36465ae7cfc0e4b62185f9728e9b02fed", @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r54, @ANYRES16=r53, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="9917d4f39cf6066ab6f70a276323272075f27426575d1c3e606d8140ff4ffbd9d2845c397d342b71d0aa22cba7d35a141b894eb2c5f4251479c2f55a476914f826f9ab43fde5075b0ee480e3e061a838d87e6f158d49e417991228f2b0b016d2f6e78f820e9c093ee7e5e1d04d0eeaea81b6fe3dbfc60f24f0bb7f480b907d8f06cd0cfb709a41fe030f388b55a8968e59d2705872418d2d14dfdcd36a8a7fee8c574b10212acf2c891e1fa16e7696befc57066819e721b9382f492091455a70bdf2ac1651986eee0194982eddb6390e79c5d86465a5cca4f71702066a5459d3128481734108b66025e9374125068fc141bade9c4a7b7ef2f9ca6eb33732c56b9ed7e665411cd33d324877a8ab43c8cab1deacaa21a3a9ad5b9a10ebc0a496525fffe8c1401a79ff40f6e52849e2038a6c34889a66a970d183c5a075b956aa732879a47719d944dcde30b73200cb7dd14b31db0eef71262bd9048b351ab7611f6acc1d57f55b559af54e08e48fefda5877ae3d98d0b781f6f6cd5c3cf4558e166327d7f3c921d6ab78c4378d96db6c8e9f1163e8f4000f4bbd465241cd5c29af5a8254439b11e86b798dd593148d00558f93656e57b41d695c3f60b42db4e8d0223f09960f3d469c0017ee51473736bd0694cbbfafd85b6b68b300b1f238fa54b6f659e32bbe6e50a9cdbdd1e65afce859ed371e40b319de5ec3ba05cb18a2d16daf398a7d175ae55505cd8e3838a9f113553b0ce50303b8750e3ae5ef5093ac13eedf223126cec1f7d9cd5388e91aefdb6d25fbc5137fdfadbdf3f373abfa6322941d38c953fc0d96c6a6962cbd1730badab7a4295a52efe18f20b7f49b0917e81f257805f6dbdd23e32bef5941d7d612dff374b51299b507768e07338bc9adddd4e7bbccfb2852a0189903104f6aa99fb1d99de7ee364f6e6e1e7ff7aad492874a5561cefc5c1d303e2a32a37595022eca97e18d7f29817da28085432b5ff73d1e15730b61f3054e3d0fadc3179e6986207dc85c1f6236587f60f9e1c5c63d8b128f3c59f0d65f7aa03f555a89c75327264ecb25b9eb833086a0285b6649893fa5fd58480fdfa2fc7d65287b62d69f28731852719fd192159f255ed493a967e4c06c8da454f1054c0e3d189b295f0d72eb5345c7fecac6d9fae038a7e2bc2c745ce166037c74a4c9e4fe18fa036d3c1d003067b44746f5d7057addc8f228b608a03ff9c1fd9785375937cbfabd66bbf595c9461baea4367734cfec94ef9437d6fba0338e2e11daacec9ed8ea371535e1656e4e653cccac17418d525abac292234429f3762cca148025a01f4a747c1fc4635844d2f4283521bc7344ea0595ffce4b218d3de2191ed0868610751e83d7a67ab6e52b8c57e9d2ab7a0403512d02905e1446ea33cbdafb900df7d44e53654eeefb843c683c94a5cce20cb2843821d57b6ae9dd0d246511051ab4b55bbbd81ca513550d66793ce15d3292dd6332f8de320a278fb73cd1aa03f06d950b50affcaf7f1b6600c059b84dbf3051957d1603cbcf7e03364e749396cbc692a4ca161aac7b211a1c5bd26883eaca309dd4dbeb578aad7f0f2d9bfaa493b21571e33b0b44ac24fdc5b60d94723e271c8e697aa9d5b7fb6dea709c10448757d5aedf6fa5fbf666470d0ebf979fe01284e59a37c9ff9e38a161496372bdd7ba0f71eb7c6cdae9524dc91baca3a1dc94bb548c653ee9db5d3badd24b194daccd85c2dca8dec1bfd7a0d79721945f8eb99b3ecb61ac8d3683e154def8026baf8a536dfbcdb469fbfc3420833948191004a2a8e0dbb0a34fc98099866cd3cfff8682478666eb6d5df769068fa207918b5ddf1553f8f631191eb6006bc879f10bf5a97cccb9185bfb6647f1ee94510afdd2335c48dbc18bebd90b3d5f3bfaf8a31ab918e9a53d5197f537efb97efa33bf272ddb2d09bb1804c431fabf5750cdab652c073cfd4f04a9fb4c50a1433a20036845bfd8c8fb78d25179eeca031bd18ada507c9bdb66fc1a7ff937b04996f17c2e3992db54cc8662fae3bbb2d7a496b8db15f221b838f967537fe7572168ec9b9fad3727f41cabd4aa50e54f5305db6dd751220f81fa0830f70cdfe4497fe83a40bd1afab2a47ff54e05b1b1430e333878f0b173adc61bdc9bbfad00f53990bd094416001e11dd5d7228ff35035fe8395b791ec8a53f09e822bea8cea8284713ea8b174655b20dfb9ada832460288ea2007c63edf973ad1744aa0eea3e73f3f60f47d77e5c182da1e59a12cce9255f01d22086c297cabc10284148d10508dd04559ef239be20a73b74035c54ca8415e87483e8b349afce6d122baa36a1b5836088c85fff1b2f592b39b389224b462b8d9873966ed5777b93385239478350db01db6fce939fa7357b1eb648ac43e062b80fd204a8f50047a77c173e8e1b5a8e60e878eacd0d0fc2a6e662ad8351c6fc9fb11191733339c9d0d26f07f2e3c544038966bb9cb956b2039de17c7bf58e064010ef9c8a9fae9ae63d5c137049e3ef45bc5d8be93dad65537dfd091172b2114bcd7a30926df9fb30ab3b43abd8a43c7df5af0683078f1a6723d090f3e8f6d51499ac67c0251671e49b7172a4b9bfb7473d3f47c49986aa31f8988906ecaa227d497d42a432c61429d6051d4c15033564a47b0162723b1a8690c1c8b4a5d50863869c2459252c7d9fa57a92fe5c5c0f72c889d6e1aa7bc8ed24139673af92c1790904951918762bbf722ba21e745644fec0f5bc71306063549f75b275427bf4f5bbf45973d0f13e2ab20e6fc7a7779f8ae5ea000e630d050cd877d696dee906f38defb4e71c11b9bef33704f0be71c964e470ea596fab0b1b4ac0390a0db4501e5406029702b67032fdd591c612e60a347aa2cbf156261095c9f90feb14df9bca5baf7f44213614b8d365542b795f4eb0f804a224af19cea580908a96b1b41113cf17bf877d0fbf117303b5d972d13016d1b4a61a64a40cc0ea4d23b6b2ecf72f38efb3f58bb46345f1a6987e407d682cc2607d61b610248651d53a20abfe3d90dec243a7a17b233c44399070ddece8f2ef9ee3790b3228187a289ff227eaff10ef2c76cf5458920c9832fdd5e7a389d0c0e083f2314518105a85f78b43d458161f47b7533cec718b96e747b77d1f804993ad2d1894782cb22e0e623a4bbc5f130dcd9e4abd327b173783ad774b62498ebcecefcf16753cf2717c5a4f37eaff62d77adebfd0ea3f436d8408bd5be9b62c8e2399a13f38318fe84581d5a6759e1a077e4ac0f19ece8dad07872a45a2408442457c8c53e3ddfb1a80e9a6f275feffc28977d65d79e9a01488826e5cf6b79b798bb379dd30135df3f07eaa67791140056e3e46c8ff8a4a1cfebe6d99a231b48dc4d8f0a2f008e043fab70a3151c835a7f2f2ea5ab240cfc2948013c5e77b3240e4454a36bbe2470dd52c7866b201829e565f09907d16c38aeccc58b2de323c5037f01056ff898aa42139ea800a21d24d0385b6b9466eee1677d10d8f7938fc9120a92a8e5773014d5e9cec8c858206e6b80652441218d12dc00dbf975b2f279de4af49c5851f9f2acef75d0a0ddb5393510507464235af1d139acea67be8bf5794ec0e20343fdfb920f94a384fde7120e7966a927d63e49d580d294c46ff8405078daecef7aaa704839e66134b96cd73f62c999d0ca1d1331e71a718bbdae26face2e781699434604e929022ad150ca27c22b62f4e62113285b6919172ae8be3d05f946cd89454432be9d24d346c8d630c08f927b6a8db46972631697f02c03a4917a2032857c1604d2b32c8d7fb4a49ff6bc359f6cd564ac2af9f4997c9d2374571c3ad9d3d0011ada27f44aa0e6a2c042c7cc5b9457a303ca07967e836e432cb643cc6ddcdc0c451987c0bcc0a16bed4c84ba6b194b73bdecf79d9757771a5ca3212846d2a92f9ccb334a9966b1e5314b304a15792b7d228a3de0193dd9c331743374d5f538f35159fdea2ff9207070fe729fb91c0d5c700d8766ab899721f4eff2be3be2f91f3009258e5ab5a0d51a4514ae0490ee22ab1fbe9c95dda52ba62c6430edaff134e8d6ea992171eb25d4e6cb3d1c1ac02b8680ced7ad8daa42f3b1d61ee61de4b57b45a5d06308db50a2e9151333b66415ccb562e758db8aed2e0985cdd05b2c35c2f3d18a6687fc54ab21f751cedc86c49e2bb8828807275d5fd7849f46d53c146c96d17195bd7ce41758b39c238e759fecf1a3b21765e9b2f04f4ce6ccd9a8875e747d1cb301eddd625b6bfee07ad8f5445655e6487ff4afb041ffe0689f9a18c6756362cdaf816c804d3c28f9b30b47ec6246613dcd3bc5544250a032be236d80b1324e822662b9fb9cdfd7dbc4e690706222f58dbfc2328b13a75806e930d3463ed64fbedbf7f2b26a1443dfb905c5100bf2ab314d3f7f100ed17d0ffe939b0220f06f7a4b06ea4c06a0d85448a1d26e95c15247ad77646495d8ce811a06523b1b3443d584afb8cc6a6afdf51457ba364dda6a306b492bd97dc6048dee26ac5fa326a7a0c5b2ca4fe7936697ed6e5e2ced755d4814aef722c99a1deb12129bbdc73de363d8c14f1f8b4a898567e8546fd5bff89c7e7bb9fa10af812578d2b85e8a267708e03c2a737fd1c8515a8e01f9b19b151cef05827eec8bae746c90ddd80772e355fd1494a67c778f4d4df43633b07a0cdf5ad2f5b39c88160cc9c4262204669102147ffc081c0eac348a6127378857a0c1e0699f704f694da4b7c12bba0822efc62f2bbf8f0fce0271426ceeb04ddc6da735f65495d3826b1688e8a29053569c01f33270ca5048f6e62b7bb615400109ad540e485e8f7b76cd8d4bf32c6c7fe14b782de852d72591ea8e76866fb271dfdd6cb69498cf1896e0fe2397c36bcc252fe1406360fe2bcaa57c00d1cc1e4fbc7555e158f6b4188106892247351776a6df233a73edee06b638bb3da92c7caedb711e2bb500e5aa30976a2d539a15b612f177cf1e931f23d347899e9f7db1717f5293cd5a24093da2138d805105db3bf19d0933b0b4664e4a8b0b312ef9909a0aea7d4a746c3b0bce64796260dd05320fba5c4eea5e7738bb948269b117c5c68e06fbc7603b5502db75dd01bfabb4a51ab2bfcddbfadc3e59b87dad05721fee6b5fbadedbf17ef036920b6b336423b0aa1d389276a1d20c7c1e21d0c514d6b494593db886b31af08ba519990c77478e8320100e09d53e57573ba42dcc555f51fd910daaa90c0a3f3c8b2b61bcb5360230abd56f78febd02f85ff6b343a3b606fd726f606072326b2bc9390702f2bc8dba077c402d5fa78c7cd9b85b80ecf669ce4456879f19b6bc87c04f0d78b460c0746010c6e81f7be39f44ff245391748ff68e4a93a89c5913b1b16e35fe32a4591235055e1d41c76fc59f81ebbd3e8b3874164c00568a5e84295cada6eef63773fde3abcc5a0fb6c491264cddc2468cfdde7e260648fafe085e24773ac83b3e4cdf6e33164ad01d1d542603ef0b7136d9c1f9c8323cc8768aa2b6494b851cf4f33468744f7548790e4d7496419ef3ee308004f03e561329e80935d247f2d98b77b6a8d939b0a2c1c735060640d094def8507399af8e494e7bfc0f0cdfd7c4883f182cbcbd39b8ca0ca07ee80a220a91a3a966923a054c71182981389953a70a5218f0a4d02ab0bb39515734ff2c52f3b62b0e15b49eacdb2e59fa15ab87fd6cd7b536624eea664f58971636c57d2b2630ade126a56fa72802c48d7896e7bf5da9afd7deae0496b823b92dc24ff21c7260de78265e54c15a48765", @ANYRES64=r53, @ANYRES64=r55, @ANYRES32=r54, @ANYRES32=r54, @ANYRES32=r54], @ANYRES16=r59, @ANYRESDEC=0x0, @ANYRES32=r56], @ANYPTR], 0xfb) write$FUSE_CREATE_OPEN(r51, &(0x7f00000000c0)={0xa0, 0x0, 0x6, {{0x0, 0x2, 0xa1ac, 0x0, 0x4, 0x7, {0x2, 0x5, 0x7, 0x80000001, 0x26dc, 0x3, 0x81e00, 0x5, 0x4, 0x6, 0x7fff, r52, r59, 0x4, 0x9}}, {0x0, 0x2}}}, 0xa0) setxattr$system_posix_acl(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x4, r10}], {0x4, 0x5}, [{0x8, 0x1, r19}, {0x8, 0xc, r29}, {0x8, 0x4, r39}, {0x8, 0x2, r49}, {0x8, 0x0, r8}, {0x8, 0x0, r59}], {0x10, 0x6}, {0x20, 0x4}}, 0x5c, 0x2) setuid(r7) quotactl(0x9, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000440)="5477b711e5dabcfae5368bc93c5a7217aae490e2e4c3819d57cadf008e5e8fa6024bd08a33dc4cd00dc64fd865e6cbf78ebad3e8d283f9d9e40cd41cdf33eeebe4f9e73daa5e69955622558abf52ee49feaf06961f4be76e44a6435367879dc694d4da70cc1335a64773c6c4db9e5a8eb9729a0569dbde5947fdeb34381ac1889f38390d5d89eeb2d96a109b74dde61e72aab67e70f727") 03:40:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:08 executing program 0: add_key(0x0, &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81a0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf2f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup2(r5, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000000)) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 03:40:08 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r4, r4, 0x0, 0x2008000fffffffe) r9 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r10 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x10000) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f00000002c0)) 03:40:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x284) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@empty, 0x53, r5}) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 03:40:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 871.337091] binder: 13661:13666 got transaction with out-of-order buffer fixup [ 871.346162] devpts: called with bogus options [ 871.357301] binder: 13661:13666 transaction failed 29201/-22, size 104-24 line 3525 [ 871.377446] binder: undelivered TRANSACTION_ERROR: 29201 [ 871.399540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13673 comm=syz-executor.5 03:40:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) [ 871.471021] binder: 13680:13681 got transaction with out-of-order buffer fixup 03:40:09 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003340)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000003440)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000003c80)={0x3, {{0xa, 0x4e20, 0xfe, @local}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x1}}, {{0xa, 0x4e23, 0x400, @rand_addr="14c90286f3d2bdfa7d597ca41d6302ce", 0x1}}]}, 0x190) sendmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1ca195415252ea2b23c4156a7cbbf635be51bf84d7607d236fcd697ed27b23ce5127dbe8fbb8f014aea6d5a61a0a0fe2918a594c0f067bc232710d1b8aecf170ef2fb8b5938e2c2ae283d0b1e8f861799f1e516b9922f944a8dcaf2422cf2682da8cd426ac4dd42242f626dc0f2e62873fd9415caa2edf3080708692d6ebb238ee81d7d6a01a20fc8c5af84ad0232c00dc86eebdfa30075c7bf45873cac627e6439c808a3e60e65a788798136218d9c041864496d70752b397dff701987d97ebdea596136030373b51cbf6eb4829f71d44a084d2bad18e356826eae38b6809e68897fb", 0xe3}, {&(0x7f0000000240)="e4ba7f82b1f5ca86070aa4ea9e25c3d795317eecf07b470451bd3eaadd391fd7d60fe9880f5ea890c3b7643463ac329993b5c5a23319540a5ed87e1e57a0556b2444e3ba47f84a239d41196a4ea0e82484d2b1ae81", 0x55}, {&(0x7f00000002c0)="11ee461aabfee7895a6c64a3a9cca309bd03a7600b3a8bc3b4e84c21657a916250cc3fb9bbfe7534f44f6d94c6915a5a528f48ce8897da158d1e0c394a596c0ac8a3ea2d7f56a322007b48d67d0ca25bc32c179f9fb37c884577c24e19d83aba296c5baea6a8aa8434a20409fa59f43098ab915c05e8032f7f2d779e9ee5517c72", 0x81}], 0x3, &(0x7f0000000480)=[{0x20, 0x10e, 0x0, "1f8c0b769e12464e0dec"}, {0x20, 0x84, 0x53cf, "872b0ecab793366b3db4"}, {0x98, 0x10f, 0x2, "340b0c160b43758d9ef30dc66b6cf1944acdefe3cef5c436dc52b96646f87e1deab034c88ea7d11c832b7535af6231be37011336807b3631e242a43897f58b906258a59a5a1db482c156dac389172993c307c69958b04dc48e6ccd7301469423d39241b5bbc7edd9a53ca25e8d75efd8ad618ce13688980e1dff3d935ef358641dd612990c"}, {0xd8, 0x10a, 0x7fffffff, "e2e065637ced5a2d44798f5d1ee532ec55f208f993ccb35ccf553241a9b227fa93ff02d09c33c88aad193fcaa4c9dc7fb32e1c281ab372386682b236d751c2239d7bad13b303b22a2f02750e86751e246fd6d5f6d1c5faf875e8e6692ee83fedf6a49c55926c5a8da6ec1a3a8f888abe10070131659bd6075991b05dde212e0ccc1e6e2fe504b613e28ae4cdbe20897341cf886165e1a3dc73651a977d33d0e9e19b7df186c515bd08fd30073e979ae522e59f9f8962bec9ddeab18d7baf0b12134d702162"}, {0xb8, 0x0, 0x6, "7fb3820e9da96d8c6e6ca5ed4ad7567eace3f0e9467e7f520e09e8d5f7212bb57be07be1ec9460162d749f93ff83373b1f64ce5dbcaabf420e05c59fa8d49cdbeb467793e6746b3374d9426018b78b49d696229512b7977314670ae0f6f691fe49600d91652069738246ac8f74bff43671454589777aaafb41c0fe5cc7c3f65efc6ef6e8b8dc56eddfaa86a5980e02bdf5a27b7830bafedd999729656faea5ab8e07cedf567efec8"}, {0xc8, 0x119, 0x9, "69fb32ca102c320d4295dfdd0c99cdabb16feaa236f25bdec2312a6b7308cd724cee146cdc80b522c273064a113129b51201e8708c7d44de12855b15084e2d1c8e225432f53bc53adbe2784301e4161f2959b396efc64c7a26e70a8cb392756f97510461e04ade28d3ebe5c8f5412ee0ab7e91179b037d833e983729e063b68f17fc5d22c64359d1ad37888b139993c5fe297b712c8198e8c84fb6d26760e3b2dfcf443339f99f424c43a7addb5fdb174bde5dff913cb0b6"}], 0x330}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="1893e5390bb5b57692259f9df14b514be4e46dbae0ced6021be95853357adc941a716296", 0x24}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="2c82936d26821d129ea24fe5c7ec9d590d64598871e3464a7ed038d246d58b383807c0cf0b59440fc6ae4e2eedf113caa7d9a29d07dade8f8e27460026fa8bc5beb1f14848fb359d8913f3e3d02e991cd5cca72368b936a6065b7e13ef74312153b6c3f0b4478d8e303804ac3d2d93b9ad5e36d8d19cbee0ccf5d8c9ed33f80f9f06ec727da74c685599c52ba9675515d25601ec1842ee79800ff65e1a4c70184f0b82ba61e2ca4a5eb276988135ce6075ae816a68653556a1ef9c7a6819c3025901ffb8c0fa3d1042107193479767e7931fb2f3f5f0", 0xd6}, {&(0x7f0000002900)="3117e073c8e2465140d441618213a4e7dd922dd1cc0203ece160d15721742f80dc0fc4e1fa2ec9c36b51e8c6f8de698f745f5fa28ce74a4e96082f5b94b87c575ee0331e7c7b397e7c0fef88f1b22e2dd229dfdbc6ac74fe9e04060d45513e5201d428632bba8bf5ac5f4ddddaed3dc9748e33322d1e1915b9c63e3fc6221b122ed2a0752536075b", 0x88}], 0x5, &(0x7f0000002a40)=[{0xc0, 0x84, 0xff, "00fb28fcea330a47a041ec321ff022e06f328e53e4636516bd528aa2e76fe9adbdd75bff098fc0ecf4e399b8947154f911348f9fde3d02f7b3009df745c8b4b83eabd5bbacf7e2920c1cd71e9c2cf5d21eb2f97725f136a8ac40c12f632443015bfda324cb3facf6787518f9cd8d256acf20ee047cc6c78b45918cc69c1b2dcb19a57f36af23cf3f636bebba7eb2d8e798ab3a3748c4a7c175bf4f3771dd3454afd770e18c95ae55d487"}], 0xc0}}, {{&(0x7f0000002b00)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002b80)="f6dee3f4c35afec572ee78f538bedbfbbd30081a369d88dfe7363bb49cff02c03ca4ba12ced47e4813cc1774d07c279a32b7511d53044a9ca826edc15cd9c0bd61139a8d127e446bb4e5a90b7c85c7033214aac84c97c0b2c1cb34552e42d0f5ee6fda2333bacaba11cf962ec2f3f43d0353b19d7335a85fae20a3fb3e2d4900e7c76ae62e8e29c5b957f75914e3085231138d6b77ea076f019b8a023a8612ca10c8154b30e5a231558bca14e4d2039d850aae625c34e307476f21cc18a801903da0c16122a3f7c0d10c07476a40489b3cf0a7120c337cd69b5fe118796d2ef2d9", 0xe1}, {&(0x7f0000002c80)="4d134e951a15a39d7d1a49b11239b75034df8d56af8f30dbc9a5f065461a529b74c0cd5fd3586c0b7c571083f8d752acd609ab3e9ab450fb08dca5b98eeb01d41c398a6940b98d5c28cc80decf0085b5409798e999fb931053390c9cf99159dd059d52e1a5d8828179d8301f9e943217084cfdc17ba46e9abeaab29a2d11ef7174c1965fb6c8d979a76c94d1ca16d206debfb0771a5fac701bffbd69cc3685debc8d4a6126ed5f6a1d5a3f78d2873d8f1d35e986fde18c31a248dd4ab725d4ecf421ea0397fd86bd0d812753b743e8066d1054d4bfa96f2e79fa8f562827f21e4b09f1bb634778b18c049ce529f535", 0xef}, {&(0x7f0000002d80)="b52c5071ea454962f34838333570c7c47228ac560cd8fa0c7a4aca", 0x1b}, {&(0x7f0000002dc0)="e51f31008f913b95d426c78a72429ddc94363b8bf9d45a6f88c01e667e3fe8e0c1de8fed4ed8d432d3079da210bf736ddaa22351bed06373ca483f11a44869b4ad03d135a477025204ea413f2e077262ea95476f5a7a8728bfa80e93a8fd9d321745beb757c0416109cbba26fd8288f671061170b0f49aa65999a570ca352c250ffca17e95f17c7579a92dd0768529a0da5d07c34432d47c", 0x98}, {&(0x7f0000003bc0)="ef201d54d8e20729f38813aebc43de18a08c6c144f0e62a19e6ba7ec08b6694b10445923777726de6294c75f62ed2183b5d3accecb53b500dd7716c391671cc138ca66a455d732226e3893a9dac46553f369a0db0642b7ded50483ad94dc63c1dfe16f8347caff2852b5245cc59fad5acf3473c43658465f0dd78b12e043d07e8750878b59a61f67d9c44c9421a5f910773e83fb1ba072178a505b073fa00b84b99f61fa", 0xa4}, {&(0x7f0000002f40)="721ba2da92b7d180a15778beb19fe8dde1f83b19141138b6c7fb98ec4b4815806c4e9b5479e658a74277ebf6ff8b5651ceaf0e54aefa9911f3e4a49110c3cb", 0x3f}, {&(0x7f0000002f80)="4eb2fd502e5f001d45ab2400efa282ff53345bcb09485e9966e1", 0x1a}], 0x7, &(0x7f0000003040)=[{0x48, 0x29, 0x9, "7247a1bfd74227b6f9df93817afa597635e8cfcc0a95279474fdb635be831d9c0c231d43d942aab2690478224ed361e31a148a74a845fb22"}, {0xd8, 0x6, 0x1ff, "50c5f232dfd704ca2eb880f29d558f8d3b7160111d4ed70bea23f999aa65df500f796c47069d6c4931b194ce45d3cb714af465c786618fcffbe6b1e0d35c0f30fb88201af72eec74863ff1030232a1cb74cd2c77b3707a513c71552639e5efd2e49a69a26564db0ec8289945137f2514bd78e3ea5b430511b4aa1dd6f8fc277d86dde9a734d90e9716c2eddd7e02e5ca59fadf11ed168c9497da5af082d2f26ae5f69fc557bc5f7171bd0901236e047c8774b9ebc210f87cc580b64b30cf0b593a75538f8339"}, {0x10, 0x104, 0x1e}, {0x100, 0x102, 0x200, "3f8f0d6c9ff24e9afb38beb5f424ad7cd411dd809b4458dacead4e74e25e8499a97bf11dbfa44f6525c6563772a2e235f3179acdb235cccef8221e079b871c91dda23cf7b53e29beda43203a325b3b49d1873d1830d69216fdce37523549a2f2a297c5fff4433f9c25213617a7e9ab390065072eaa8e538ad7c639ec93e56ca20ea70d2bab027c371d0e2ea0323508a968379de3c3bc578ac0a0ad7582687987435c6d04d8f1c1e756e5548428a52780888124a644c06b816e303c10d3641b01fd016bcc126961481dcb34a25f1390e4cc48892568bb68314f1743f15f607ae120a4646555b226db2409b57b47"}, {0xc8, 0x114, 0x10000, "9c5deba19ceb75e12c7398cfb2df193c822a30a0f643c6fd035bcb26b94101984b671eb5116a59a0d50080029a988d369ab796d37cc565d1ccca965eb82d4c362101c06fe5ea83f4ca5ac284ac146050721c787ed170eb5de838638c293ce0f499c73dd63e7f598cabcae8cb9ada0b394ba19935505d2c664adcc02189f380c9bbb87bf2199890ff512af96089655754067fbade303afb3049196d3cc950534207322739dd9ae8fa78b00a2ac95ac3d4f252"}], 0x2f8}}, {{&(0x7f0000003480)=@xdp={0x2c, 0x0, r1, 0x38}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003500)="593d8ac898f880b6b1e3f2c7ce1f433f173fdc3773df9ff6de1d484fb1f52becd9b3d35240ae0c9aa1315762177b396fc95f4ac81f9ed1403b2752aabcc86cadd35d842123c93630e3f9fa917d76a1730a09701fd8806ed62849ba6bc4ab9009fb1a6de2044bd0bf0c421d25e1f2e3507a8026c0eec78b9f3bcb5c93493a9cf26f202e17b3beaf7b6b54d756dbc33718b24ebc6184bb536a692b", 0x9a}, {&(0x7f00000035c0)="74a9b987c084f7bae907a858679b6570ee194720f22b1ed44e8ca79a1fdd2e2d585d7973", 0x24}, {&(0x7f0000003600)="fbc1179e6c41ceac66872a976341648375266c6f3791e1e0bde057920b45888be7badddcbe8d45170bfb7871ec6873ef1035039cb7b1b3d214c6c61f2fe103138078", 0x42}, {&(0x7f0000003680)="9d7a9ac0fdf7eac8fa70bfd14161b75395a6ae1e58e0e4ed8dc145b0fa23fc63e2f53a11994b11405ddc7879c0368ebe487518cd98e96aacda32aee4219cd2ab0739bc0c05e538e275bc98b107967eba0862b5f9afc6b8b6fb69d09ab9a1133b8e9f6c929fcf9abf77611fc72066232dc724bf50b9a580ae6622c2ac64a9b812d49a0e7263771f1c9fc0255b7abcb3d6367b9198dc5c8380d003cecbde5b286be92d00c5b1ab44701e9300bc20bad472eec55492bd253b48e0621108584357015da38a438da8d096eb8cecb2e71fffd7cfcdf7e8467cc45fa018", 0xda}, {&(0x7f0000003780)="b21739205c7bbbc919a234a47ad8e8132128b97fafce0a8bc5332a685b8d87a13454c6b0123d386c1acc9eeac0344d7ca8ee7d48d943ea1440ff1cf0334d5ab93cd9685dc07008e22cd2372fd28981f5f3b14c36ae548d61509cdd46c2d87bb070b9980309b107268fdedadaed0845a1ee0ea1434b0096e79f3f756c3e559131be4861accf30d53defddf79332dcb03aaf7f3083de5162be8ca84d92caa2cdd4bb075485293b3a8a286edff82f41617da5e4df657e56d6df114b7ca1c0e4ef91ab9fadd1c8f9083950668df0f0db", 0xce}, {&(0x7f0000003880)="84722655f2ab56bba75ede01974c8ddfc7169013a747760ea0bb6fa151d894f87f225ef0edc5df7f17f0c5033faa62628a54af26a8bb205f2e121b029c5e56391c439f4d81f06582a162b89c35c2efbc798f55e520bc23d3e626568730dc1449cf74a4de3f9596e68edaba2cbbf6651b14304cf440cb15aca4418073a973c629736a493e7e505f753817bfbab9435fd2b23f924db95005d33c055135d30d7e4c276b4bd51e78cd45bebfdeed6e80ea06c9ab1bdd", 0xb4}], 0x6, &(0x7f00000039c0)=[{0x18, 0x100, 0x8001, "5bee89b521dc6bb9"}, {0xc0, 0x115, 0x401, "cfcd062a0b436203627a4fca9df7d423f4d44811a71363fe5050ec19228b5cbb17f3c1393972eb861065a70f87c2a8cef10662f6c18a95ef4def131193e7927bf07a1ec0fec9b8b2b10d8e3a4f6461ecf6bc06dd314db5824c0b54bc6c63503cff9cb7b1eb5eba661538c1cf41be8517a4dfff15e9ce7aba7fa50671a013329ba9f3c0f6b959557dc32e6755aa77dde25f1bc6886790881f6b4b2c172e21cd3e667d7967a6dea21564f2e4fd43"}], 0xd8}}], 0x4, 0x0) [ 871.603265] binder: 13680:13681 transaction failed 29201/-22, size 104-24 line 3525 [ 871.687447] binder: undelivered TRANSACTION_ERROR: 29201 03:40:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x1, 0x8b, 0x1, &(0x7f0000000080), &(0x7f0000000100), 0x0) socket$inet6(0xa, 0x0, 0x3c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) io_setup(0x0, &(0x7f0000000740)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000140)) socket$inet(0x2, 0x1, 0x77) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c, 0x800) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000480)="1a2d65a836e6de0ddb70234bc4bd1bcaaed4624f0f14470ac58f7d8c0c3d700fcb7d528c98be6d5c4965e0c5dccee4754aea533c26c6e41c67fd282719ada49f212de177dce6181e92d2c998a54382e7e79c4ca9392c1064af57") r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r4}, &(0x7f0000000400)=0x0) timer_settime(r5, 0x0, &(0x7f0000000200), &(0x7f0000000240)) timer_delete(r5) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @broadcast}, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x4}) [ 871.920590] binder: 13696:13699 got transaction with out-of-order buffer fixup [ 871.977702] binder: 13696:13699 transaction failed 29201/-22, size 104-24 line 3525 03:40:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 872.029084] binder: undelivered TRANSACTION_ERROR: 29201 [ 872.154282] binder: 13708:13709 got transaction with out-of-order buffer fixup [ 872.234988] binder: 13708:13709 transaction failed 29201/-22, size 104-24 line 3525 [ 872.301138] binder: undelivered TRANSACTION_ERROR: 29201 03:40:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 872.478336] binder: 13723:13727 got transaction with out-of-order buffer fixup [ 872.520401] binder: 13723:13727 transaction failed 29201/-22, size 104-24 line 3525 [ 872.553888] binder: undelivered TRANSACTION_ERROR: 29201 03:40:10 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x101}, 0x8, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = request_key(&(0x7f00000005c0)='cifs.spnego\x00\x1f\xbf\xd1\xed\xc4C\xab\x88\xa2\a\xd8G\xff\xe8\x82\xca\xdb\x91$\x94\xcdF\x82\xf1\x10\"[\x857b,8', &(0x7f00000008c0)={'\x00\x00 ', 0x1}, 0xfffffffffffffffd, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r2, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x8, 0x70bd26}, 0x1c}}, 0x0) socket(0x9, 0xfffffffffffffffd, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) r10 = getegid() setgroups(0x1, &(0x7f0000000200)=[r10]) getgroups(0x40000233, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, r9, 0xee01, r10, 0xee01]) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100010000000000040001000000000008000100", @ANYRES32=r10, @ANYBLOB="10000044cca181198d4d00"], 0x2c, 0x1) dup2(r6, r6) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r7, 0x80003) sendfile(r1, r7, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40, 0x32}, {0x8, 0x0, 0x1000000000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x3}}, 0xe8) 03:40:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x80000000, {{0xa, 0x4e20, 0x5, @loopback, 0xffff8000}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x8001, @mcast1, 0x9}}]}, 0x110) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x431c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1602, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) r2 = socket(0xa, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast}}, {{@in6=@initdev}, 0x0, @in=@remote}}, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:40:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000100)='dev\x00\xcbh\x80\x87\x1d\xf6\xbe\x8f^K;\xf0z|x}\xdb\xc7\xc2\x1c(\x05\x91\x1f\v\x87(\xe8vB\x87\xb7U\rhI\xb3p\xc2\xd8\x809\xbex\xee\x97e\xe9\x93\x85\xe4\xc6g\xcb\xed\xeak\xdb\x96%zx\xed2m\xe7\xdbK\x93\xc7\x96BL\xe9\xeb\xb5F\xc7\x85\x9cwe\xf8\xb4\xcd}\xf5\x89W\xf9\"\xf8\xba\xfc;#\xa7\x18\xa1\n\xd3\x9e\xd9\xbfO\xff\x00\xc8=\xb9A\xd69\xf6\xca\x80\r\xe9\x01\x88H\xa9\xf4\x05\x00\x00\x9b\xa0\xb7\x1e\x1bp\xe1 \xaf\xae\xb7\xade;\xab\x19:TU\xf9\xe8W\xf9\xc0|\xc6\x03\x05$\xe2w\xbc.\x17\x03\x91\xaf\xca\xe9\x95\x82\x7f\x03|\xe4\x0fhT\x9a\a\x92o\x98\'\x84\xedP\x98\xbf@zo\xb1f\x9d\xef\f\xc3\x8dp,\'\xad\x14\x1e\t\a\xfa+q\xd8\x1f\xf10#\xc3\xf6\xdf\xf0\'Fl@\x00\x00\x00\xbd\x01\xd6\xd0\xa4w^c\xde\xe1\nx\xb9&\x12\xf4\v1\xd6R+\xca\x9e\x9e5\xdf\x81U\xd5pT\xdaK?\xc2o\xceW\xf5iK\x03\x9f\x9c\x9fh\xe1]~\xab\x05\xb5\xa7T\x9cQ\x1a\x84\xbb\xbe\xec\xb2&D\x81\x81\x8f\xbe\x1eG 4i\x81\xb6\xbb\x1d\x9d0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000fdf19c0d12e81933857b5990d567780014b658dfeb80a4adf38132b85042d696d88a12135faaf04738d6cf3a1e3ae29912dc1172f4a76682dff35d75e1ac8093f675f0e7b9df5b35c7516668c32e6399eefc38e42441dd96e281d8cbdee2e9652d9a86a57aa8950ae2aa38e30ab0941e50bc3423aa54037373a7bb1ed7aae3c1b47f85cb492cbd00", @ANYRES32=r7, @ANYBLOB="08000200e00000011400030069703665727370616e30000000000000"], 0x34}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="08002d0200"/14], 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x44001) 03:40:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x21}, {&(0x7f0000000180)="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", 0x135}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xf10) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 873.234769] binder: 13756:13759 got transaction with out-of-order buffer fixup [ 873.270129] binder: 13756:13759 transaction failed 29201/-22, size 104-24 line 3525 03:40:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 873.293903] binder: undelivered TRANSACTION_ERROR: 29201 03:40:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) keyctl$get_security(0x11, 0x0, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$FUSE_INIT(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 03:40:11 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) fallocate(r2, 0x100000003, 0x0, 0x28120001) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0xfffffffffffffbff) r3 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) socket(0x0, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="2307002e2f666b0600000057536b16b2a5ac73b29f4650ab188ddb2f6007bff42117381cf51a0f"], 0x27) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) close(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@broadcast, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000e40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x43e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'\x03\x14\x00\x00\x00\x00\x00\x19\x03\xff\xff\xfb\xff\xff\xff\xf7'}) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket(0x5, 0x0, 0x81) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000280)=0x20001) 03:40:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 873.346946] binder: 13773:13775 got transaction with out-of-order buffer fixup [ 873.365734] binder: 13773:13775 transaction failed 29201/-22, size 104-24 line 3525 [ 873.387863] binder: undelivered TRANSACTION_ERROR: 29201 [ 873.505411] binder: 13782:13786 got transaction with out-of-order buffer fixup [ 873.604516] binder: 13782:13786 transaction failed 29201/-22, size 104-24 line 3525 03:40:11 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) getgid() [ 873.727299] binder: undelivered TRANSACTION_ERROR: 29201 03:40:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 873.888796] binder: 13801:13808 got transaction with out-of-order buffer fixup [ 873.914961] binder: 13801:13808 transaction failed 29201/-22, size 104-24 line 3525 03:40:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000bec41c6d09a38000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000180012000800010076746900f2ff02000800020001040000"], 0x38}}, 0x0) getsockname(r2, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x80) r10 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r10, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x140, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x841}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcf5}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe8}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf80b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5fa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x8001) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x318, r10, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x20, @rand_addr="6f314b96f3fc14bd05b07213624aa554", 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @empty}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'nlmon0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x13c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @rand_addr="3a5f589f1d816cb233e234169dd51fdc", 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9b, @remote, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x3}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x824}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1821}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x127ef8ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfa7}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5894}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x801}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b4e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x125480}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10000f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x8004}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @local, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev, @multicast2}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10876100}, 0xc, &(0x7f0000000500)={&(0x7f00000015c0)=@can_delroute={0x8c, 0x19, 0x200, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x9}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_MOD_OR={0x18, 0x2, {{{0x4, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "289a62adeff2bd35"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r11}, @CGW_DST_IF={0x8, 0xa, r12}, @CGW_MOD_XOR={0x18, 0x3, {{{0x3, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "ba0032c9d96d4bb8"}, 0x4}}, @CGW_MOD_AND={0x18, 0x1, {{{0x4, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "36ad306eb7eed51f"}}}, @CGW_MOD_SET={0x18, 0x4, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "18cbaba8c9718e85"}, 0x2}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c040) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = socket$inet(0x2, 0x0, 0x0) bind$inet(r14, 0x0, 0x0) connect$inet(r14, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f0000000a40)={0x1, 0x840, 0xfffff801, 0x3, 0x67}) bind$inet(r13, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r13, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000a00)=0xfffffffffffffee5) [ 873.981892] binder: 13810:13812 got transaction with out-of-order buffer fixup [ 874.012418] binder: 13810:13812 transaction failed 29201/-22, size 104-24 line 3525 03:40:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 874.149933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60427 sclass=netlink_route_socket pig=13816 comm=syz-executor.0 03:40:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'nlmon0\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x7a, "80aeac69c5b65aa4f08f4d401bdd43b1974ea4097eeb9a545b72e3c5cd05014f6a8d3034224d3ac0730cf6f51fc68425838b0a59b418e40c111c40f8cf585978be3df5c5a88c9c08903fcb572e2ba1223e4b73da8b8d15626abb521ad12b4729548ec5cbc924fe3005966a64e591794f40b0d5ccd13866341fff"}}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) dup2(r5, r4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x815}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x3c97, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 03:40:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) keyctl$get_security(0x11, 0x0, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$FUSE_INIT(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 03:40:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) keyctl$get_security(0x11, 0x0, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$FUSE_INIT(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 874.612260] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.621202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60427 sclass=netlink_route_socket pig=13814 comm=syz-executor.0 03:40:12 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) munlockall() 03:40:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 874.683257] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.689583] binder: BINDER_SET_CONTEXT_MGR already set 03:40:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 874.689593] binder: 13854:13858 ioctl 40046207 0 returned -16 [ 874.692489] binder_alloc: 13801: binder_alloc_buf, no vma 03:40:12 executing program 5: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @dev}}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xd49, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000001030100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x90002006}) [ 874.692510] binder: 13854:13858 transaction failed 29189/-3, size 104-24 line 3284 [ 874.754787] binder: BINDER_SET_CONTEXT_MGR already set [ 874.754797] binder: 13861:13864 ioctl 40046207 0 returned -16 [ 874.837281] binder: BINDER_SET_CONTEXT_MGR already set [ 874.837296] binder: 13870:13872 ioctl 40046207 0 returned -16 [ 874.882769] binder: undelivered TRANSACTION_ERROR: 29189 [ 874.909569] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 874.924590] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 874.932491] EXT4-fs (loop5): bad geometry: first data block 50397184 is beyond end of filesystem (1080) 03:40:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:12 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x212) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0x6, 0xffffffff, 0x93d}) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4f23, @multicast2}, 0xffffff4f) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r4, r5, 0x0, 0x80000003) 03:40:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) read(r1, 0x0, 0x47) dup2(r0, r1) creat(&(0x7f0000000240)='./control/file0\x00', 0x0) 03:40:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 875.153251] binder: 13899:13902 ioctl c0306201 0 returned -14 03:40:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 875.314774] binder: 13909:13910 ioctl c0306201 0 returned -14 03:40:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) rename(0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xedc0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) r7 = socket(0x0, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) splice(r11, 0x0, r12, 0x0, 0x80000001, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000980)={0x0, @local, @multicast1}, &(0x7f00000009c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000a00)={@empty, 0x0}, &(0x7f0000000a40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xfffffffffffffef0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r17, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_misc(r17, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockname$packet(r17, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001400)={0x6c4, r5, 0x0, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x108, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xf800, 0x74, 0x5, 0x4}, {0x7, 0x5, 0x1, 0x5}, {0x200, 0x20, 0xff, 0x80000001}, {0x8, 0x9, 0x7f, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x168, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xcd8b}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x268, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9f}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x6, 0x3f, 0x8, 0xd}, {0x3, 0x66, 0x8}, {0x8, 0xff, 0x7f}, {0x6, 0x80, 0x0, 0x9}, {0x1ff, 0x5, 0xa3, 0x3}, {0x800, 0x1, 0xd, 0x2}, {0x9, 0x1, 0x22, 0x2}, {0x1000, 0x1, 0x4, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r15}, {0x1b8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x80}, 0x4004842) 03:40:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x22, 0x0, 0x3c7) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000032) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e24, @loopback}, {0x6, @broadcast}, 0x18, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 'bond_slave_0\x00'}) 03:40:13 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) munlockall() 03:40:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 03:40:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x5}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x1116811, 0x0) 03:40:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, r1, 0x0, 0x89}]) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000200)={'vxcan1\x00', @ifru_mtu=0x1}) 03:40:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r2, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, r2, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) write$FUSE_INIT(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x15) 03:40:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 875.925731] binder: 13933:13940 ioctl c0306201 0 returned -14 03:40:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:40:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:40:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"]], 0x0, 0x0, 0x0}) [ 876.434148] binder: 13965:13967 got transaction with invalid offsets ptr [ 876.481466] binder: 13965:13967 transaction failed 29201/-14, size 104-24 line 3330 03:40:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"]], 0x0, 0x0, 0x0}) [ 876.521829] binder: undelivered TRANSACTION_ERROR: 29201 [ 876.573417] binder: 13969:13970 got transaction with invalid offsets ptr [ 876.590428] binder: 13969:13970 transaction failed 29201/-14, size 104-24 line 3330 03:40:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"]], 0x0, 0x0, 0x0}) [ 876.614253] binder: undelivered TRANSACTION_ERROR: 29201 [ 876.675142] binder: 13972:13973 got transaction with invalid offsets ptr [ 876.694588] binder: 13972:13973 transaction failed 29201/-14, size 104-24 line 3330 [ 876.731635] binder: undelivered TRANSACTION_ERROR: 29201 03:40:15 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) munlockall() 03:40:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR], 0x0, 0x0, 0x0}) 03:40:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"]], 0x0, 0x0, 0x0}) 03:40:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r2, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, r2, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) write$FUSE_INIT(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x15) 03:40:15 executing program 1: r0 = open(0x0, 0x2000, 0x20) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) sched_rr_get_interval(0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_ro(r3, &(0x7f0000001700)='rdma.current\x00', 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000200)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="05010000000000020011e510843a13a96205ee0749be2a178cb847eb49d25d5e99c0cd9dc9171eed5f9eb52aeb0eb21526a4184bbd9e372613245b7dea6d8de82f67dfb1731a71518e3c60c3c948b830798914778cd191937068d04c281029d08ff00c682504f27874ed9b1748f8c69156691422d189ff7e725307f74f8a1a0e9e98b4846cab1645509b4802bf651a12f95d38570f19a7d1e11539843c0bc25d302e4ddc6e09edfb8980369c50151781e5014358e3bc0a2842f1edead3a831d223c9f8138652179988f13cf21282aab6a427c6243a23b46d111d3df3a64d9aaeeb1a8f5950688b23a333131c7d05bc755d16c2787fd6f1914263afc3e695b6124167ef8920c48df39e1969ae44e687cf723022c85af85a3fbace56ba96117c5785ae8c0e20187faa08bde96800f7bcb74a5ab902bbb469dcb8ace67b624553e0cc75d19e882263ead0146736441314bab8983421fb5e8d29411fa87dacdc104b57e7998880815b13f550ec50c7fb220c"], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0)="aa280cf742ee25749518c62e5e7732e66d2220f51e44709ebc17621a1074af9139116dac5e3cc4f5d76e77b5932c3a8154e4569305cc", &(0x7f0000000540)="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"}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001740)=ANY=[@ANYBLOB="000015005bf28a4e7b7f2a5700012dbd7000fbdbdf250a38a100", @ANYRES32=r5, @ANYBLOB="0800080000020000140002000000000000000000000000000000000014000100ff010000000000000000000000000001140001009736f85b6f5136c76ab4ca5a9b77ebd51400010000000000000000000000000000000000140006006d5d0000010000000500000009000000a7ff06002000000006000000060000003b49000014000600ffffffff040000000500000003000000"], 0xac}}, 0x0) r6 = accept(r1, &(0x7f0000001540)=@xdp, &(0x7f00000015c0)=0x80) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000001600)=0x18) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@mcast2, r5}, 0x14) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 03:40:15 executing program 4: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000940)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) r4 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f00000008c0)=[{&(0x7f0000000340)="038781db34bf928f4a9f6968a214fd0a1292e4237d0d30a06ba619988a6b90eb4108c2ddc4176da596fc8a9246674883af7e4935e6e4f8aa57e63e844daa893aff40a8a57d1534cef26d60ec5d9723ed286df4280668c0fa3e9d1f3e30f4e3b73b19c1f75955915e34a9707c4484024579b2a9c45aa89417b776dbc7021f16186f92f823985dd81e2e68768936069e1491a145bdb6ee83a2006cd775d6c8b1162b577940238d7b75d9947d5879600314884c8505ad95d3d058e8a1a4b2c51fdf8dc584fc2db2f3d74b4f0bc2b129a54820fe71de8dfcc76cee223a9a0efada9b9d4f235ea8774259115d105d7c715b69ad07d2", 0xf3}, {&(0x7f0000000440)="c57385a4a6a62c55c69a2fe54fd934ffde39da4c70b8ce58fabd660f7d77fafa43b813d5aac31dbaf90a1c2fd2dcf3d667a85ea89bde401708987b80d31a0befb890e3e170651dd37dabed6bd06407122b22fee6ab094e71a8ba3f95ab0c8b0f8e840fa2432dbd96fe580d28b3146847314989280d6f546ed1214e1a3e143b08bcd390cfd8c81d682c2262a4aa47d2a4d6837d920cad30cbd37f06c563cd23f2195edaf0c68dc31f6d8a8a22e52cb109d56a6238c7f45203019dcc17354096dca47e827feb78fbbeca27", 0xca}, {&(0x7f0000000540)="ee8e42d303bd47df7f540482b1d9874f17bfe476e881623f31e7d2fc81028279298d04e4ff94c5e002cae8114f41fa1cd66146bd4b280ced0d5d18ff6bf5ce9da7a2750e69343df6ab6f7039bea41cadbe1ac687cfcce97576a906906cb0dbc1d5f090d3f1d7a385ef8347ac123cbd5500cdd166160c525f56df06d3801d2443c09bccdd0e928090da9164a8f01701d2cb41f082eb628292b6c94a65ab42c171dfcb1d9ed823790be641bba011eaf14b312199e89cefa2c097dbe45a122911f8032ba8ad52cf1a621e3066ebdca0acda912ccb4e2e6abb165957ba06d3bf", 0xde}, {&(0x7f0000000640)="e258c00ccb3adc2425e70d95f77f4bec94710414078177f8e835bb3cb78e0f8f95273bd927f2fb30fcfe0344d9f2143997235a8a79980ee29f6b1cf243d1aae7759802a450f7ec753786e78d23483f2f1811a7e56c6b3bb6cb7bfe3ca6ba3a4064ddbb96dfa565676e602d87b77bd34b3d75466752d6e2a9708e50c6842819da700e9dd31fd7ac279f4e4eb16b22b94fd2b7fdc214113d93e95ee34a61601bfe770f2a78741cafdcc73a708188f00e238b614062b33827bd3057fed8d667db07ca202a5d38d33a600fc408cbbbc0386cda0fd5b1aecd3d29a03bc5bc40bcce3f", 0xe0}, {&(0x7f0000000740)="47458b8101afe37dd592fd2b03f2e43890343f8080f2ae11d8487110e1a357ee4c1415c564cb007546696abaf7ef71dcd0af0f679abb243f1abeab94b434c5bb8d3c", 0x42}, {&(0x7f00000007c0)="67b9560a57f5a24a9751facba900bb1998292066e88439e7dd6da7d71c86463fad73ea23b8a69eced98ff6dd951785b095a51072b00975f139ed7b091d34608dbacc19cb54dcfbd11d095b3e16cb1d6026388876d89669628e107904ae325537adf33f294dd340d8bfe7f61f365e0993fa9cd05133e54b4753b7b79188f414087bfaad24447e367d44355a5284612a0df5c7a5664f2597b0999aca75a0aae3972d6a16a2f48325f5cd52f0f646ae49e3679f31b9a77d9528fdae00ac5533bdc1704d4d027996bc9b106e9f", 0xcb}], 0x6, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 877.520505] binder: 13986:13993 got transaction with invalid offsets ptr [ 877.525270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62043 sclass=netlink_route_socket pig=13989 comm=syz-executor.1 [ 877.531343] binder: 13988:13995 got transaction with invalid offsets ptr [ 877.531373] binder: 13988:13995 transaction failed 29201/-14, size 104-24 line 3330 03:40:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000380)=0x2fced154) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) r9 = socket$inet(0x2, 0x0, 0x0) bind$inet(r9, 0x0, 0x0) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) fcntl$lock(r9, 0x6, &(0x7f0000000400)={0x1, 0x3, 0x1ff, 0x8}) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = dup2(r8, r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$TIOCMSET(r10, 0x5418, &(0x7f00000003c0)=0x8) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90200821}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1e0, 0x0, 0x204, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x43, @ipv4={[], [], @local}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x39, @rand_addr="0e7113198c7361907816e71578eb1a83", 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa48b}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x180}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb78f}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x10000000}, 0x8d58e958cc046297) [ 877.532281] binder: undelivered TRANSACTION_ERROR: 29201 [ 877.575867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62043 sclass=netlink_route_socket pig=13997 comm=syz-executor.1 [ 877.708844] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 877.831481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31090 sclass=netlink_route_socket pig=14002 comm=syz-executor.4 [ 877.951130] binder: 13986:13993 transaction failed 29201/-14, size 104-24 line 3330 03:40:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR], 0x0, 0x0, 0x0}) [ 878.024960] binder: undelivered TRANSACTION_ERROR: 29201 03:40:15 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xfffffffffbffffb9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 878.434476] binder: 14022:14024 transaction failed 29201/-14, size 104-24 line 3330 03:40:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR], 0x0, 0x0, 0x0}) [ 878.483197] binder: undelivered TRANSACTION_ERROR: 29201 [ 878.620305] binder: 14030:14036 got transaction with invalid offsets ptr [ 878.715782] binder: 14030:14036 transaction failed 29201/-14, size 104-24 line 3330 03:40:16 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="264e0afb60eac56a9d49fb530cfa81c779bd3ca417ef58d3f4a84196193932ca79670309af0e38dd7d4be68f09f8dca8b9fbeea53f1831807d47b29b36c1a60fa62006ffa065e394bddc5ae4c99461df7df0a8b1a05864f8005653f7b15db2e890f6825e2e035d7cbd5054755037f017de6c4bdc9cecebf1e2b5fd201ad3e046c456169daef4ebc5e9f6e0ecd8a5f7ab1077869d5051fdb6a7850e4556b8955fa399b7c75af79cd3eb5c3be3cf3d6690b960ac01fc0a430f47e3f757028dfd685d752d9b281fca0983c5bb0f9ff7dadbe0814b4982836db4b79d7a3ddc98db947a06033be869e23b6aaef7abb07df88b8043740d4fb502e28e01caeb70f74e46c06763cc6df1066418aadec3a14db04a4e762d4014b6d1fbbc17ba67eef22a0c0afe8f22d3294800c22ad318d579939d6dbc21ac3ce4a9e0b0a6c4b4d9f3d78fd7371eb6c8584b6a3edda4ffc7d207c0e48b9ab50e8eb1767053ff7da7ddea2a607b04b325e5da56b228031db1d786e6c56f8ecfeb70b772bc477f395ca9c3ea431f5a6db62b380264a6854ace538722153bc3d0f7a0970c321636fe31b2afe04a1daa7db859786f49f3eedc881f08ab9d1df63f6f441f1124b8d689ed56416c62434dabebd3d6aa6693fd97f2f55eb5c8e9c5c197e66bd71c6a9fab087575ae92490eb36ca97ded15e0bcc9a0002eab8eb38f48c378fd02239aedd7419c2a5b98c9a357ea58663252675bafa9a867952b0c2137ad6cb679732fe0fffe29a9b2168580f60f02113b69975b0e01c56ea3a5ac9c03e078080387b352949d48d587f042cbf0108398cf7d5ae314b1c8f7f69c215650fea03f1eec99de5f0fcedf2d0fef87faa0d4f84ec06ba60b7829a464e89d201ba37db8cefff4bf1c56e3a2ff4ec9793ddd234e35bda3d7883239517de531c49a86e7abb5491741bc0b74632d431b3a6335da3555e88cfbff9292922dd0f3cf4ad61d5278c69cea9f393a0798a21f7b2542cdc1dd62792e26c1de6e20d8ae20e997d7c4b95f63b3176bd23b220bdf8674b682ac54cdfd567750ff21852518e75e046a60247323261382355fd144457bea405f4ce95e5f7dbc15a82de3bc45caa0612d68ad154abe5d3ca610c50b58a749567775393e2f3e7ff7d804893461cf027a7cb7c8d8e4d438a7dd59e9a9a8e8846cc2b472b27e5f021195d356ca644f1ba6136527d14746540c000fb75d00eec341050558c9ca5d7fadbf182da33c2f9cb171d0b4667bd395fea235af6277bff344eb7e7af8d20c9495e98110bc6f75b6228703fedc8157b17c0ac929b504e78cf2d152ea92ee17098e133548b9ded149f1e651a6a8e809a2dd7dbdf3a8d5a7f530b07405a1c9b99c77c020cd0830ef6695fa3f7e24e1b28bd084c8b140331cd614cfd9295fe5ae826bf2f4515eceaf7d154d8fde6b03fb882a00df6ca3cf96a0b87ddaa9186100ae328ae0fdee3b85eb2f607170a235e86b1256158f2709f0b57338d8cf4112e1b1539b5bd9aed11a3e30c14f92a4deda47f56c8696d342143cacf769cca994ae7538d588e79d39f1abfd6ac5d80c9f55a09f3bf16c1f6ebb39730c45b88f2cf7effc73963ac47e379b30f87f7887a9ca5ba856722eb324333f9fc2ad394cc189d45a6c45da5bff7a9f6c4def052e4a66a9dc6a707152875f8539ba578058c09609797300664b0b54e62c32f03e84714e26d76e40453740d9721eea3511124ff382cb81e1a590c9f14a72e87f73f961e50f8019c06e97816ecc89e330fd21fc6ae5c42202aee304cda2bec0852341a1a1b9f7ce1f386d9832e4584ba3786b66038e1abc2db05f721a6dbd0bf5a045030139e83a23821d6a60c7b8f03dd3e9d05caa498177ed3d47f3888c38f23833f42a4d838fbe67b93445d1c1dc161d8ffb552b4716f2abafbaa119a60d1cddf0cfa830ab98a7cd2d1824310b4a5324378a5b6a48cd1fadb1ea0e1d67dbba5a024e8a34960d38a1936bc88e13a632bda8c629c134ace0a7908327adbb568b851d20f931b2b456ef834483e76221bfa1848d4d773eb0c13bd6a2a206989ee128c89e14a30a892b5d663acf96ec328ab909e1f0fbe5f09ce48267dc8ae4ee9e9b8de5e5f2240130441d4fbd3536f163774606f57bf901297cdd0c3890548de20c7f79ade6ef8d4cb7b2ca91bf7410aa181158aa30cc2c16d9163ee223caa9f14c607508e00bd8afd68507674a1e32119669ff9f79fa09082bb30cd0f6c2f86f61b59c5b2d2e1133b8215a1d07586661511de176953f78e01c3568b15b1e50ba81208b83802b2782957b465a599680b6343ef07edabb8b959609b20353917dbaf55920f56ec15e5d46b7a2a081563fabfb6de4ffdecff2e7e672aeaaf8506239d69c820d1e2dbb43b3eaa5bfd3a52522341acc9531063a9cf32974f0815127f9cc40d92eedb32f1de0a991dc1612dd567055c08e1117a0c3efdc9ed5008f6bab1163d33d9951581f5009b5a67b4c9128ea5c16ba405f6adc8c4397ee2a8325f792c2adb0d2e669727c043d92714aab0e3bcc1682275aeff398c207b1bef2654f2e895f7e829f0d724e19efb1000d00bb039c54f7d462ed7d3fa07651da339da60bf74f0e2093ba789fad21d95adaf2f5905e20811f4f31bf16bceefcdcc7dd89a2f3bf9b6d645fb04db5674c0aa6c2c925e724199e3c59d7e20895b318658c21fc38402a6715de0eb2006a7abc43cf50a4c6b5ca3fef394c9a8daa2a2db94878def09831836d8d59a01bb87f6bd4667fc9d1f2ad54341f66f26d8bbf66e1c1021304c3fc40caae08ca0b4da6fbcba44b31579c4477bad2ddcecbb8af43f2cd3858bedff4241e4f41575ba42ce9a6c12953d78c94714531ffafd3306362d2d817460b56486cf5b55960d0c77f504b42c77b200f25ee83a7a5481ea7432b0f2cd4d7d9e1b98db0864d59d2929e9df07c1f59107a5a64723bf2f4b5f67996efac9b48e981471bd692319a8f5dac88cc9714ed11edca0821bc3756ace5b12de8bcff75090b0671ac9ce872e14dae71ec72f69afb9ef0689a7b38c68c978b17b3970e2a9bf0042576ec305de970e0d24a76238afbd8ba24701d0ac2bed0613cb5b331064021e2f95022f16df5abb282931b9a96bf672e70fb4da98e09cd139ebc8fe7a0545472d97bb7b5e239c7e556e797f64104839db8cc5f44127d0fa03878869aa4524c0a06d5171895716c3a06839dc8a63cbebdc3160636b405059c7c4be097c5d6e5aac22c89e4e95592040888f50c3212a1884fa791a983d4c049d078450f08544efcd81ea0884edafabe5609669d299768f2d02d747629f8a7922d099b8e822c4d13acbc918bfbaa5b71c6281797f85fa3c2a685b21f75327e872fadc329d79ac1c0b07294393b933e56fcd9f6f7cb8b8c326161a034ab79930ba0d63ca17ffa792090750cc951b63d9899176f9baa7f92c56712f42bd0d43a4b146ff1811bd90af84ddfe9bdb7e3972b3b2fab438f26c141322a1039ae5cf1877a601dbe8d565ad592d0ac9b5ff655d7b96085b5cfc56ef2ae335399bd77ece04ae208942f822eeab397db12447cf7cce407c92a605a1d8bfa3f21b2a63f9c9af44efb7bb93e6e412b5170a7526c847070e3cba968b7843adfe2937c527414f8e5ca8a0811f50fe252fdaf5bb5d07bbc1475c37667a499c6b7abfc6f54078a3eb02341bf5b088c8c11206fcbd1cd259039ee32ef660ec1be59debb415f2b0dbd449e3f5da34ea710b75bdf12ef3cb1cfd372753f49e6c0b0445817dd58e3d7696629adcdd1ad4419e2e8aefa063d1830fc1df595b2f955de92cb68017e4830d48746b3b7842cc6ad9bfa448ebb2d81c317ab84de9309a4121a0a163f699d95c513f72e204d9a2d32eece13821afb0b6274ed56b8b92b46c26f0d087327f7826d8b516eb050bfca93699a63b1822d58be2ac106928f073c535bd1a19ed115dd34819738cf6a823d16dc1d318fa751f21f2e0fe9923b206cdf3c78fbfeb01f7f232d00cb6cfebd295db6979775b51a5a6adf7cc1cc0c9493c7afb241c2d8c471b3359b1068c9b3af9f9ccec391e0c04190c24eece8fc19c64fa3175723d1d769a2dc1986f7c54bb984ebe2c3a496f12f164639ab727045d6f6b7480563e7b086824718827d9498e398cfe5e066b852a12e72cdc6d665399f1547565ed7f2aed0463997ab77c2ff0c019a245764abd9baf6fc9fdeab1727ee6c334e19b9c139b5b170dbd45b7854ca5585af4352d3a7f4929f0aeffaabdacd8e938e02befcad07ab39b18ed6b2334bd6387cd65a29658f1b85faec182fe28531a65dc63385bd796c2e1c42216c9aff8932448e5981694019632ddbc8f52cc37041ed56dfeb99d96d7f4bce77e895f5feafe8135af506f73983b3b59a316cafd890093055eda2faa54de711f04e3b7f475e8bc4853ed09156bbfec570c3e63faadebe816ad17d5b35dfbecaa5266a5bf1a113bea98f5648da85a8c3eeae498699667e5f1519abea15e1d142bd687f2728f367a4ba33636d9af70b8fe9222d5e9a44cc54356d43915251b48c21dff1c6b135b6222fa5173f09346c87118684be65df5665b690b897fe953bfc81f9be38a5c8136109f673088824e61a1d4239050ead9c8c9b36aa115bbb4cd8c1a7f0f4af76428809fc14de03c92e4740cf0711dea2a17e54a25939176238b27045f590202beaec826007809017b2fad52a10ac1a934984f7f6172e5410924d2962225fb13e556f71dbf6fb4e5ad60387a22f58650cb75b3b517773828af263055afb001973f3bbb38345612566537aa0f78b8edb18ff29959a1c0412eef4ce2ff300fd1cc7104d28bcc49c8945c95005c59349976a9d126fc90f7975da5115c1abd8a73c30fef3142f7316c992a29d4e51fc46d7da35297d7ea516a2350773589dd2ccfb69075d35f5aed453a03e9c883ba64169c88ddaf3070fba1c23bb634c5d3f08a948a2fafca8bfcfdd3741ae6dc6cfb5efeecd7648ba7cf550a0a663aeb626d1d4f38e0245eed7d8832881233dfb47053b06d41a7ab7cc5a189b74a60a40dc08ac02fa05292e5d4f35b640e3c9983362c46e44a4adbb16b8f16cec0d732af46532c9d69c579eebaacd5e008df9032fb1f34041136c1fe2a234ffe9acb5baee0591e2e21285a0e193f97c770b92e7df2da67639274071fcb28f41a975e63af714c120a659abffdb356840cabcc35cb7703e091eef39c196311bd41340389bbb92f8807ef70875c049fc288feb462e5bb038466053e1b7291864b1a393ec8ad143a4629fba684d0ffbd2a1fb78363edd7cabb9ea722fb250e4b4116be3c3f29798e27d87366a494fe940c4e6aa1296e3d86f28a7b714a892d5b0ae79fe16eceef8a9579387aaab2717ec5b309086db15c015a048c370887f2a2a38b4a3032fc1f83bf22804bf92f7d68f8422862c8eff41e80267b195e2c65be571b3c1dd88d0d92bd7cf4e9a20c49edcd7860a50ac2f0313ce5672d201b046661a36c235e9f8df2835c84a0f80fee66b63462a7cbdcccda8326037b5ded9f8f5312fe850887700589162bb8847f28cc9413b7f9ff7e711a80ba49d50c22d2f46fb8df31fe6bb69af937990ca2fbde48bf2d89be367f4209eb0dcb9497fe942d4ee8b9546422e74232c0114d626184e7eb82c438a7719ac5ba48b3555845222e9c66f2b6b373bf944bb07132ef34eda2a7d6270a9563b2f037f8ff6ff79c2c4c491daa755ea3d1f086d1cbce787be5c67534cc8501232c5d3de8011064fc2ca4df3ce882e58a8102a1dfe7eb91f", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) munlockall() 03:40:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r2, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, r2, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) write$FUSE_INIT(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x15) 03:40:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:17 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x5, 0x8d}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x4, 0x3, 0x80000040000000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, &(0x7f0000000540)=0xffffffffffffff3d) socket(0x1000000010, 0x400000400080803, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r5, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/221, &(0x7f0000000100)=0xdd) socket(0x1000000010, 0x1, 0x0) [ 879.333935] binder: undelivered TRANSACTION_ERROR: 29201 03:40:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 03:40:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000003c0), 0x12) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x800) accept4$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e, 0x181400) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000340)) r2 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffe, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000300)="9333df9df9b446aad1238681269a9bc218", 0x11, 0x4d}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="036b4ad27f0bf7cfd6bdf9b486af2acf1eca3e977d609403198061c7fbad03e2f4238b83ec2a93447f9065e6a2d4ad6e2dbfb879e3fcc2688dee9e2999c69445689e215f9cd269e62a54d9fc0f644d51d403b9585d5165ac9e458b31da51dca3b53ee205164aefd1f69827f44b86fee59fe4b04fa1ba024865a77d6d0be61d7dfa8a5b6ed886d0850308848227a81f1f968cf909d29b43a1cd78dc2d9912d869058c6a759557767041dd541224b993e3f286d351e6d0afb57f8568f8b6acf05962f3c9296dee6f7b8571a3e50d6744d39597942c8b4855e3321d920ca2755953dddefe4e181206de15ca91353b0d23bca5f6", 0xf2}, {&(0x7f0000000380)="b9386a6e7575de00f24857f3e848da4a26018a60112f043c04b506c729615304ffc904913bfc4732c9fb3b434a1155cf9a9bb0c0c9a04787be", 0x39, 0x200}, {&(0x7f0000000600)="28fc0887d90a3e53eb5881f676ae38bfc1b01bec2fe02bb7929b47690c213247d4f219c78b53578f4e85a614dbb66f9fee9d6a4a3486386ff30031a8194e580114c34c0ce68193816e63965ecd2ee7a27528c158de0942a17d4219a0b2aef6a2f7968c0019bbba89bdb4b21fbdd821575bec346cd9354085543e2ec599bf9fbe7783f9df73e50fd157a63af52de5195176564caf5b7e71c1bcfe562025cc224d04b175", 0xa3, 0x8}, {&(0x7f00000006c0)="3267a97be18028a0d7209439f04948cfc2ae7ee20256992f853533ef4cf81f1f70e2531fad4aee8d75e771617b16525fce3c00d7b29e40d186a61a4334d23deb5e0e7c6c7ae5a34d767a8cacda00ad3a9ffb3fec2e18e103ab7bcb1c60c87124b3723a759971c6cbb4c52852ba65ac84031f65705e4e4bdc260df09a2bfd369e931740ca1be6cd841ce8e55692ee0caf19a92e5b17369a9ca04c3e5812bb5b1e947528a9b43ea3e871bb3aa6390c646a25feecbbcc113c3bbd07c07d2aa13e50acffcb0787f3b15ce4ddd51d7513e70e1a5fbd03635331acc8d8221818459b9e2d00bb31e7930afe82df7f57965f7312a8825a", 0xf3, 0x4}], 0x10000, &(0x7f0000000880)={[{@fat=@check_normal='check=normal'}, {@fat=@fmask={'fmask', 0x3d, 0x495}}, {@nodots='nodots'}, {@fat=@discard='discard'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}], [{@fsmagic={'fsmagic', 0x3d, 0x81}}]}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'veth0_to_bond\x00', 0x2000}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 879.460970] binder: 14052:14053 got transaction with invalid offset (0, min 40 max 104) or object. 03:40:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 879.533108] binder: 14052:14053 transaction failed 29201/-22, size 104-24 line 3379 [ 879.562087] binder: undelivered TRANSACTION_ERROR: 29201 03:40:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={[], [], @rand_addr=0xf3}}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6f68fde88b508405c8647c0700000000786fb8803ba97fb519d80e8577cb629e000000000000fbfffffffb998cf5000000007d004029588171101000778bc81236f698209bbe0bde0016003800018bd200ff030100029ebd6c"], 0x46) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000), &(0x7f0000000180)=0xfffffffffffffe44) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @mcast2, 0x8}, 0x1c) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$FUSE_OPEN(r4, &(0x7f0000000280)={0x20, 0x0, 0x7, {0x0, 0x3c}}, 0x20) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0xffffffffffffffc6) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @adiantum, 0x1, [], "06fc97b03de5532d93e80541bf01f8cf"}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 879.830089] binder_alloc: 14062: binder_alloc_buf, no vma [ 879.855883] binder: 14062:14063 transaction failed 29189/-3, size 104-24 line 3284 03:40:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 879.894850] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.014419] binder: 14068:14070 got transaction with invalid offset (0, min 40 max 104) or object. [ 880.059727] binder: 14068:14070 transaction failed 29201/-22, size 104-24 line 3379 03:40:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB]], 0x0, 0x0, 0x0}) [ 880.114967] binder: undelivered TRANSACTION_ERROR: 29201 03:40:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r2, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, r2, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) write$FUSE_INIT(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x15) [ 880.203492] binder: 14073:14074 got transaction with invalid offset (0, min 40 max 104) or object. [ 880.230899] binder: 14073:14074 transaction failed 29201/-22, size 104-24 line 3379 [ 880.267450] binder: undelivered TRANSACTION_ERROR: 29201 03:40:18 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 03:40:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB]], 0x0, 0x0, 0x0}) 03:40:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 881.110419] binder: 14095:14103 got transaction with invalid offset (0, min 40 max 104) or object. [ 881.113105] binder: 14093:14104 got transaction with invalid offset (0, min 40 max 104) or object. [ 881.113144] binder: 14093:14104 transaction failed 29201/-22, size 104-24 line 3379 [ 881.121436] binder: 14098:14105 got transaction with invalid offset (0, min 40 max 104) or object. [ 881.121468] binder: 14098:14105 transaction failed 29201/-22, size 104-24 line 3379 03:40:18 executing program 5: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x5, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@initdev, @multicast1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000200)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x8000000004e20, 0x6bf}, 0x1c) sendto$inet6(r2, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) rmdir(&(0x7f00000003c0)='./bus\x00') ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000440)=@fragment, 0x8) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r4, 0x7fff) sendfile(r3, r4, 0x0, 0x8040fffffffd) 03:40:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x10, 0x29, 0x43, 0x17a}}], 0x10}}], 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, @local, @dev={0xfe, 0x80, [], 0x19}, 0x4, 0x0, 0x0, 0x0, 0x100000001, 0x4}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000003e80)={0x0, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x4c}, 0x2c) prctl$PR_GET_PDEATHSIG(0x2, 0x0) r1 = creat(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) write$UHID_CREATE2(r4, &(0x7f0000000480)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x8d, 0xff, 0x2, 0xdf78, 0x9, 0xfffff68a, "ceb9380eb2ee9a3d07755fe33124b5ee173c70c2a2b570999e9598ab1a9d5434a1d7a7e987fd34feebc93850adce8bc3e8bd853ef10bac2d7f1d072125613aa697ac8bb0455af924b659050061da49324b2d0482f0547cbbfc48452612db8fe1e8ebf5f46b3dc0ea9e89db244635ecf7dd1c685ed0fc07af77d53523163cf7126cd2e47d11f9732e83ba5ae09b"}, 0x1a5) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000180)) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETX(r6, 0x5432, &(0x7f0000004040)) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) r7 = memfd_create(&(0x7f0000000140)='&ppp0\x00', 0x1) connect$packet(r7, &(0x7f0000001440)={0x11, 0x19, 0x0, 0x1, 0x80, 0x6, @random="a038badc52e5"}, 0xfcb1) getdents64(r7, &(0x7f00000027c0)=""/4096, 0x1000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') gettid() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r9, r8, 0x0, 0x4000000092d8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r14, 0x6, 0x19, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r15 = dup2(r11, r10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f0000000440), 0x131f64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r15, &(0x7f0000000240)="95a9a9b0a812ff6f4cd8e274293ec6c74bee4924fbebf78146bf55e237a1538264b87db91e1da767668acfdcee3545f6ae9c2e403a0e98cb1298895c285957cbb2ea732613d3054f447b5a489fdc24ddeaf89a9c4fb282360d12e5c1d8d1870aa2abd2ba23e9a873df4e1b2c3f88758b654af40d", &(0x7f00000002c0)="d046a9fdb68bd205a5497e186e43aeb0309556a49b8eee76808614f3ff1631cfeb457e4cbf52f6df69a96fe4d84cabb387b15fad51fbc17a93c19bddb1b76e43642c97b05d617ee7132137e7e33a648a18dcccb1890794c71ddb686032afd1504ac56a9abb4af76e70ab"}, 0x20) openat$cgroup_subtree(r8, &(0x7f0000003fc0)='cgroup.subtree_control\x00', 0x2, 0x0) [ 881.161089] binder: undelivered TRANSACTION_ERROR: 29201 [ 881.161117] binder: undelivered TRANSACTION_ERROR: 29201 [ 881.443393] binder: 14095:14103 transaction failed 29201/-22, size 104-24 line 3379 [ 881.484856] binder: undelivered TRANSACTION_ERROR: 29201 03:40:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB]], 0x0, 0x0, 0x0}) 03:40:28 executing program 5: r0 = open(0x0, 0x2000, 0x20) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080), 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="78808320c933512a85d62b7be3f08594a6568873522f5c37363af27b67") fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0\x00'}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[], @ANYRESHEX, @ANYPTR]) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRES32=r6, @ANYRES16=r5, @ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYRES16, @ANYRESDEC=0x0], @ANYPTR], 0xa6) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x4009, &(0x7f0000000480)=ANY=[@ANYBLOB="0000fb", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,defcontext=unconfined_u,smackfsdef=lo,subj_type=/dev/loop-control\x00,subj_role=vmnet0selinux^,\x00']) socket$inet_tcp(0x2, 0x1, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x7, 0x7}, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) sched_rr_get_interval(0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000000000), 0x8c, 0x0, &(0x7f00000002c0)="1e60f75fdc458750ced87b7efc79bbe5127ea67a4d3debee8d6f224675493fe18446788a1da44c8aecd4d94c4b40fe9f1dd418b8cea1f52ebe29a8ca8974bb9a3575b2c7b6dadb1828491949cdcef80a0be6464c0a6b3d9dbdc0fb798b9f474edbf23a9bd8bc72f50a0f9cd0ecbd558ebaae777187bdc9d3af989b146dae0ab0fe7f4701da8083dc4dd10e24"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 03:40:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:28 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r3, r4/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) 03:40:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600ffff07ef0a00000000000003003e00cc000000fb02000038000000b9010000800000000900200001001d0906000000000000000200000009000000000000000000803c0000000000000000022f030020010000000700000006000000f3e939e769e74fd500080000000300000005000000000000000000000000000000000000000000000000000000000000000000000100"/201], 0xc9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup2(r5, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r11) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x9a6}], 0x1, 0x0, 0x187}, 0x100) r12 = memfd_create(&(0x7f0000000440)='eth1]self\x00', 0x4c6b7c8191661569) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x11, r12, 0x0) 03:40:28 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x0, 0x64da}}}, ["", ""]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4004800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}}, 0x800) fcntl$setstatus(r3, 0x4, 0x3c00) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r6, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x11, r7, 0x0) ftruncate(r0, 0x10000) [ 891.054328] binder: 14293:14299 got transaction with invalid offset (0, min 40 max 104) or object. [ 891.072671] binder: 14293:14299 transaction failed 29201/-22, size 104-24 line 3379 03:40:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 891.100100] binder: undelivered TRANSACTION_ERROR: 29201 [ 891.250875] binder: 14315:14320 got transaction with invalid offset (0, min 40 max 104) or object. 03:40:28 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) sendfile(r2, r0, 0x0, 0x10000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB='security\x00'/82], 0x58) rename(0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r3 = socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 03:40:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 891.505731] binder: 14315:14320 transaction failed 29201/-22, size 104-24 line 3379 [ 891.515221] binder: undelivered TRANSACTION_ERROR: 29201 03:40:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xacc4e2, &(0x7f00000003c0)={[{@delalloc='delalloc'}], [], 0x700}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='\xff\xff\xff\xff/net/tun\x00', 0xa06901, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0xfffffffffffffec1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r4) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x200, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="936a85d1007959214160f9b0fe65d7c530085b2df8700a5dcd985b9a5d2da7755f278eafcbb7341a7882647e30aa8ed64634226b21a0b53093c1920cb3f19fb2021ab2e8e1804e10d0b4a5acc5b1c0397b01f55834b7613ce3d788e98048d851f26b0238e38b77ea7c9bed82b7a085cae154194e789790ce30ed6d9c4156adf9dbf01cf1c87ce2c810fee14cf1c30a83c266a46f8cd03a4e7f618a68dad7519af5c17a8cf1a2ac818b2da9adc5bc71a48f3ab939f8bfdb565da220f6960383ae629c", 0xc2, 0x401}], 0x2, &(0x7f0000000400)={[{@noquota='noquota'}, {@noauto_da_alloc='noauto_da_alloc'}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@abort='abort'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@grpquota='grpquota'}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable='init_itable'}], [{@pcr={'pcr', 0x3d, 0x2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}, {@euid_gt={'euid>', r4}}]}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080), 0x4) 03:40:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 891.616094] binder: 14334:14335 got transaction with invalid offset (0, min 40 max 104) or object. [ 891.637433] binder: 14334:14335 transaction failed 29201/-22, size 104-24 line 3379 [ 891.646301] binder: undelivered TRANSACTION_ERROR: 29201 [ 891.718206] binder: 14341:14343 got transaction with invalid offset (0, min 40 max 104) or object. [ 891.735802] EXT4-fs (sda1): re-mounted. Opts: delalloc, [ 891.754295] binder: 14341:14343 transaction failed 29201/-22, size 104-24 line 3379 03:40:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 891.764331] binder: undelivered TRANSACTION_ERROR: 29201 [ 891.787162] EXT4-fs (sda1): re-mounted. Opts: delalloc, 03:40:29 executing program 5: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = gettid() futex(&(0x7f0000000100)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x420b, r0, 0x8, 0x807100) [ 891.827630] binder: 14351:14352 got transaction with invalid offset (0, min 40 max 104) or object. [ 891.847662] binder: 14351:14352 transaction failed 29201/-22, size 104-24 line 3379 03:40:29 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) write$P9_RREAD(r3, &(0x7f0000000100)={0x1a, 0x75, 0x1, {0xf, "16610ac3118c581c8229ff65e17bc1"}}, 0x1a) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_load(r4, &(0x7f0000000340)={0xf97cff8c, 0x8, 'SE Linux', "554ef0d946275ea4444d3a141cb59e00ea60d804d7b5b7d1928db21afed117bfb5ce90817f4da948524cbea799a2b786a9a00028294ec91977f5ef58ac1ca49d219762d26f7dbabc65a6c02967de1fdf7afe9933e1e227ecb06f3d4caa508baed375c33d690966544a4c75d8332c91ce57d970d4e32ec8de37bd40d36e9cb8b035b43e45576345479d5e5642a000804f89c6ef30124e1f6e0c039a73ae19f8c8df8d0e3e3e65"}, 0xb6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x0, 0x0, "9d4e241504134c5f00b0a2ef0a4457e2bd35d1486204b4fb5b4dbaad4a1bb50aa7333f3e7cd1a65e2d0c27f138ef9967959b78fa948a7d9028431da16bffc9f6b8ed076a8afed89fff0a72e5c3d25020"}, 0xd8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x7, 0xd9f, 0x1}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f0000000000)=0x2c8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000004c0)={@rand_addr="61452763889917ee7538e7ef42af2180", 0x6, 0x2, 0x3, 0x7, 0x0, 0x1ff}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec", 0x4b, 0xc, 0x0, 0x0) 03:40:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 891.885326] binder: undelivered TRANSACTION_ERROR: 29201 03:40:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 03:40:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a) getsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xffffffffffffff37) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000000340)=""/187, 0xbb, 0x100, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="006d656d6f7279207b2d0415336b2dd4d2c16153264b20ac8cd6338390e2bd4e0b37fc546118bd2e16015e1196113bd92530fcd5201296ad89226f04f7ad12132ad7669075ee064064d72cbd05d21b45a51c7c541013baafbeb69c8a58b6b56283c2bb7af7ffe35195"], 0x3ff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00mEmory '], 0x3ff800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xb000) gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 03:40:29 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r3, r4/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) [ 892.193727] binder: 14377:14381 got transaction with invalid offset (0, min 40 max 104) or object. [ 892.280235] binder: 14377:14381 transaction failed 29201/-22, size 104-24 line 3379 03:40:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 892.335054] binder: undelivered TRANSACTION_ERROR: 29201 [ 892.473315] binder: 14386:14388 got transaction with invalid offset (0, min 40 max 104) or object. [ 892.499471] binder: 14386:14388 transaction failed 29201/-22, size 104-24 line 3379 03:40:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 892.526688] binder: undelivered TRANSACTION_ERROR: 29201 [ 892.581337] binder: 14390:14391 got transaction with invalid offset (0, min 40 max 104) or object. [ 892.607252] binder: 14390:14391 transaction failed 29201/-22, size 104-24 line 3379 03:40:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 892.628894] binder: undelivered TRANSACTION_ERROR: 29201 [ 892.671229] binder: 14392:14394 got transaction with invalid offset (0, min 40 max 104) or object. [ 892.696655] binder: 14392:14394 transaction failed 29201/-22, size 104-24 line 3379 03:40:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 892.718786] binder: undelivered TRANSACTION_ERROR: 29201 03:40:30 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_']) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x8, 0x101, 0x20, 0x0, 0xeb, "0877cb85b908f64d91659d022395241793ba0f", 0xde73, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x90240, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x110600, 0xd0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_']) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a9890000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204b8de607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914fb6ee79d501a7aa400000080000000005268f7ee158864d444d4bf66e8d85cc74a000000000000000000"], 0x10}}, 0x0) ftruncate(r1, 0x12000000000) 03:40:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 892.781443] binder: 14400:14402 got transaction with invalid offset (0, min 40 max 104) or object. [ 892.835120] binder: 14400:14402 transaction failed 29201/-22, size 104-24 line 3379 03:40:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 892.882545] binder: undelivered TRANSACTION_ERROR: 29201 [ 893.002144] binder: 14420:14423 got transaction with invalid offsets ptr [ 893.111992] binder: 14420:14423 transaction failed 29201/-14, size 104-24 line 3330 [ 893.194861] binder: undelivered TRANSACTION_ERROR: 29201 03:40:31 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x4, @perf_config_ext={0x1, 0x800}, 0x6469c, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000240)=0x80, 0x400) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000280)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 03:40:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="25bca274769e620aa734fa0095e0612687463915e3a702a9d8aea872943afd874e2f98b579a7186270146d0e02c06cffa8c63cd7dc46760253ef0b2a20a602210318f8104a27ea57b012d31c34951dc119dac04eab9c68842086234a45fbe204000000000002", 0x66, 0x400}], 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{0xfffffffffffffffe}, {&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000140)=""/118, 0x76}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/63, 0x3f}], 0x5, &(0x7f0000000380)=""/238, 0xee}, 0x20) 03:40:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 893.416037] binder: 14444:14448 got transaction with invalid offsets ptr [ 893.437151] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 03:40:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 893.466964] binder: 14444:14448 transaction failed 29201/-14, size 104-24 line 3330 [ 893.492088] binder: undelivered TRANSACTION_ERROR: 29201 [ 893.538316] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 893.562650] binder: 14466:14470 got transaction with invalid offsets ptr [ 893.582477] binder: 14466:14470 transaction failed 29201/-14, size 104-24 line 3330 [ 893.631183] binder: undelivered TRANSACTION_ERROR: 29201 03:40:31 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x145042, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x2}, 0x43c5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000000c0)=""/179, &(0x7f00000001c0)=0xb3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x12) fcntl$setstatus(r4, 0x4, 0x6100) fdatasync(r2) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000a80)={0x0, r2}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x4100, 0x0) sendfile(r0, r5, 0x0, 0x8000fffffffe) 03:40:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x53f03598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r3, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, r3, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r1, &(0x7f00000003c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) write$FUSE_INIT(r2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 03:40:31 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r3, r4/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) 03:40:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 893.764616] binder: 14520:14524 got transaction with invalid data ptr [ 893.782104] binder: 14520:14524 transaction failed 29201/-14, size 104-24 line 3316 03:40:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 893.807922] binder: undelivered TRANSACTION_ERROR: 29201 [ 893.856269] binder: 14533:14534 got transaction with invalid data ptr [ 893.887315] binder: 14533:14534 transaction failed 29201/-14, size 104-24 line 3316 03:40:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 893.932470] binder: undelivered TRANSACTION_ERROR: 29201 [ 894.099631] binder_alloc: 14542: binder_alloc_buf, no vma [ 894.184316] binder: 14542:14544 transaction failed 29189/-3, size 104-24 line 3284 03:40:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 894.307543] binder: undelivered TRANSACTION_ERROR: 29189 03:40:32 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x800000000001, 0x1124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KDADDIO(r2, 0x4b34, 0x3) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000200)=""/15, 0xf}], 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) [ 894.417668] binder: 14550:14552 got transaction with invalid offset (0, min 0 max 104) or object. [ 894.437188] binder: 14550:14552 transaction failed 29201/-22, size 104-24 line 3379 03:40:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x53f03598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r3, &(0x7f0000000280)=""/27, 0x1b) keyctl$instantiate(0xc, r3, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r1, &(0x7f00000003c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) write$FUSE_INIT(r2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) [ 894.779166] binder: undelivered TRANSACTION_ERROR: 29201 03:40:32 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x145042, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x2}, 0x43c5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000000c0)=""/179, &(0x7f00000001c0)=0xb3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x12) fcntl$setstatus(r4, 0x4, 0x6100) fdatasync(r2) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000a80)={0x0, r2}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x4100, 0x0) sendfile(r0, r5, 0x0, 0x8000fffffffe) [ 894.940377] binder: 14577:14579 got transaction with invalid offset (0, min 0 max 104) or object. [ 895.081119] binder: 14577:14579 transaction failed 29201/-22, size 104-24 line 3379 03:40:32 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='cmdline\x00', r0}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) r6 = socket$inet(0x2, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f00000003c0)=0x3) r8 = epoll_create1(0x80000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r10) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r12, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) sendmmsg$unix(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000000)="b4f3a095a1547ffc898e9633c4692d229011f87a7a24960f7088f47e702f669db37d06a6c897b59d6f2bdc50f7b9a160151e22efb19bd04efd7008", 0x3b}], 0x1, &(0x7f0000000280)=[@rights={{0x34, 0x1, 0x1, [r2, r3, r4, r0, r5, 0xffffffffffffffff, r6, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r12]}}], 0x78, 0x8000}], 0x1, 0x8800) tkill(r1, 0x1000000000016) 03:40:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 895.158649] binder: undelivered TRANSACTION_ERROR: 29201 [ 895.252816] binder: 14591:14592 got transaction with invalid offset (0, min 0 max 104) or object. [ 895.290078] binder: 14591:14592 transaction failed 29201/-22, size 104-24 line 3379 [ 895.323220] binder: undelivered TRANSACTION_ERROR: 29201 03:40:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:33 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r3, r4/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000009810100000d01000000000000000000000000000000000000000000008b15b25419b1f9e057198c1b94921e6eea5e6c012de335c6e3dc404862240695492d9f4d0b9ac90ca92d9f99d88e7bc70cdb7cb78d1a5cb5811ac651119650c94fc3251dbbffc093422c4d16797ee70ddd43798de1b9b36b15f6607d38576e39e6918b50828ad435381af64a6461e6a002d59ae8fcb882d0bae037a30a77394a6db4431a886088548395d0aa0007698953e41f7aff2a68df9581b509cef609b32fe878c1f352d739ef7db93f31918b0a07000000000000003edecc7b349113a9752fddeca6be4b70b26997a5e08fb3b177452b391c4aef204d22af8e37a29317a9837171646a8cb80448990ca2abe128c630a3fa35fe6df3ef90bd2f1ec892ba647bd80dd8d27f1450ebd19aa600312fc778dd63e96eb048290a7123b2fc0aa0ad5bc9083b35cae992a7a51230e81b7894d5e90fa9b6e05f0d48799d2d3a80d805c6fe676aab99aaea8fe93b7bd2589800a12914bccce30610fc1a3fac49276f81dddc7895eb85756ff5864c0aea4a141fbb54dd15fecc0684770ece5132c64087820c75db0e867b80af0ef93b6c639b77b23b3a7f1fff65c88985afdd64025a88fc91228be0bf0f6cc1cf980a77b570312713ce9672bd8670cea632140e885663d515e6d57105801d9c19504c25dbba53f452045627131c0a92d743123639715e9940ae6f0338bb8ab5f6ee888f204fee3b7f5dc866969927bebeec"], 0x865) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 03:40:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 895.406564] binder: 14601:14603 got transaction with invalid offset (0, min 0 max 104) or object. [ 895.416616] binder: 14601:14603 transaction failed 29201/-22, size 104-24 line 3379 [ 895.428995] binder: undelivered TRANSACTION_ERROR: 29201 03:40:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x14000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x37, r4}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='bond_slave_1\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)={0xffffffff}) r7 = syz_open_pts(r6, 0x2) sendfile(r7, r5, 0x0, 0x10000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x0, 0x0, 0x0) write(r8, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) tkill(0x0, 0x19) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x23, 0x0) 03:40:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 895.519222] binder: 14610:14614 got transaction with invalid offset (0, min 0 max 104) or object. [ 895.556208] binder: 14610:14614 transaction failed 29201/-22, size 104-24 line 3379 03:40:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 895.633884] binder: undelivered TRANSACTION_ERROR: 29201 [ 895.680070] binder: 14624:14626 got transaction with invalid offset (0, min 0 max 104) or object. [ 895.715510] binder: 14624:14626 transaction failed 29201/-22, size 104-24 line 3379 03:40:33 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x624000, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x35, &(0x7f00000001c0)={0x3f, 0x7, 0x6}) unshare(0xa79e05eae29cef91) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="400000000000000008001b000000"], 0x30}}, 0x0) ptrace$peekuser(0x3, 0x0, 0x100000000) inotify_init1(0x141800) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/fscreate\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x123c4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/ipv6_route\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7, r3, 0x1, 0xff, 0x6, @random="b8907e27a47c"}, 0x14) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000ed", @ANYRES16=0x0, @ANYBLOB="000b25bd7000ffdbdf250800000008000400040000003c00020008000300040000000800030000000000080009000700000008000d0000000000080004000300000008000e004e24000008000700f50c0000"], 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) [ 895.787880] binder: undelivered TRANSACTION_ERROR: 29201 03:40:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/23], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:33 executing program 1: setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0000000000000049d623629a95026b9fa74cf0061f4a31a652dab01fb9c9ff4f6740ab37e79b92c9b55b228c3629694a0b75662fda67286a05ac483aad0b6d600274f829166c59415fc6a2c716962d251b518c6c2bbee0781aabd8efd44c952c18cf749f4dacee495363119f68d672a13d8feab3ff801afba623df0b6c4baf6a09ef2c3bcaa2f3b42134") r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x3, 0x0, 0x100000000, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x410700) dup2(r1, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000002940)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f') r4 = socket$netlink(0x10, 0x3, 0x0) getpeername(r2, &(0x7f0000000440)=@can, &(0x7f00000004c0)=0x80) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000100)='user.syz\x00', 0x9, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000380)={0x8}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r6 = socket$inet(0x2, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) r7 = socket$inet(0x2, 0x3, 0xc5) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000400)=0xfffffffffffffffc) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="2808000000000000000000000000000000000000d451145c504a7fcf1eadd48fd7867b419d16565c873f52fe6a5c16862ffcc9876c360e969480a05b073222f369affc5624812049427251929519fce7a0f5a48afd76a2138632efe7c62fbeaef3534646aa68bfb301a27e504dc5b4106af9b814cc43ad1354a5ee469444ed03d43b29944a157516ba98786e51030bfff7006ad6e982e3d2dca7783214f0477baf43ccc61fc4167418d904f03b95a48c89ab1dc7ec6c9b2f626e60effd8e2091be6c6dcda8b300a492502dd961a2271bab6766e3685452bf9fddbb9685dcc5ce94575eeb098591af6f69bc02dd", @ANYRES32=0x0, @ANYBLOB="00000000001b00"/16], 0x28}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) r8 = socket$inet(0x2, 0x0, 0x0) bind$inet(r8, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000340)={0x4, 0x100, 0x4, 0x101, 0x1, 0x8001}) 03:40:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 895.909165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 896.077400] binder: 14638:14647 got transaction with invalid offset (40, min 40 max 104) or object. [ 896.095006] binder: 14640:14649 got transaction with invalid offset (0, min 0 max 104) or object. [ 896.095039] binder: 14640:14649 transaction failed 29201/-22, size 104-24 line 3379 [ 896.135943] binder: 14638:14647 transaction failed 29201/-22, size 104-24 line 3379 03:40:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x80000005}, 0xfffffffffffffee0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 03:40:33 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r3, r4/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/23], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 896.760422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000001c0)={@loopback, 0x34, r4}) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0xffffffffffffff8f) [ 896.769772] binder: undelivered TRANSACTION_ERROR: 29201 [ 896.770302] binder: undelivered TRANSACTION_ERROR: 29201 [ 896.890242] input: syz0 as /devices/virtual/input/input40 [ 896.930822] binder: 14676:14681 got transaction with invalid offset (40, min 40 max 104) or object. [ 896.953531] binder: 14676:14681 transaction failed 29201/-22, size 104-24 line 3379 03:40:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r2 = socket(0x10, 0x803, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) unshare(0x73bc832d515f4001) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00') r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) getegid() ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x80247008) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4002e, 0xa1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x40, 0x0) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1303e2ff01f18b38}, 0x9, &(0x7f0000000340)={&(0x7f0000000300)={0xfffffffffffffe58, r9, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000884) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x0, 0x80}) 03:40:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:34 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r3, r4/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 897.661997] binder: undelivered TRANSACTION_ERROR: 29201 03:40:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/23], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:35 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80002, 0x0) write$input_event(r0, &(0x7f0000000040)={{0x0, 0x2710}, 0x0, 0x8001, 0x6}, 0x18) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x205, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}]}, 0x38}}, 0x0) r2 = accept$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x19, 0x1, 0x7, "8fa392e7e59224f602c1378c5c2bfc1e", "78e7aca6"}, 0x19, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x2, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x500, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)={&(0x7f0000000400)='./file0\x00', r3}, 0x10) fsetxattr(r0, &(0x7f00000004c0)=@known='system.posix_acl_access\x00', &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x15, 0x1) read(r0, &(0x7f0000000540)=""/40, 0x28) poll(&(0x7f0000000580)=[{r0, 0x6a80}], 0x1, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb8, r5, 0xa00, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x747}]}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x45) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000bc0)=0xe8) syz_mount_image$vfat(&(0x7f0000000800)='vfat\x00', &(0x7f0000000840)='./file0\x00', 0xaf, 0x4, &(0x7f0000000a40)=[{&(0x7f0000000880)="3752dd66f9407fbdaf12bc1e4a761a9ea91e10715cde05fad91a9906f7e67bd972711b9fa4b5c290f21002c3d014a853e942a7fdbc75b3d64f394492f76d672cddea81e54b86062456584095ef1c0d91de75ec07bdd3fe44fd049f8d997e9cd073bc70863d687fc322a9c184026f2cab6b7da00fb75876809a221d2357720ad4f5fa594aaa834eee6b599ff6052b8faa6ddf4606d3db0090690a71325c77fb974759bccccfc27262ee9877818d8e0e28e4651562", 0xb4, 0x465}, {&(0x7f0000000940)="0dcf8650c5e0da86e827874e2244b49fa489baf45077b5d575d3a5da57234ef5259b5ac961f040696319d3f9e533f4faf4987ec6cf9cdc5a5ac5402fc8d997b1a626ff069cb8f5922e0579", 0x4b, 0x7}, {&(0x7f00000009c0)="030b10541ffdeb", 0x7, 0x90f4}, {&(0x7f0000000a00)="e0be0c710d2177c58801f64034810832d3f67e0ac1", 0x15, 0x1f}], 0x2, &(0x7f0000000c00)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}], [{@uid_eq={'uid', 0x3d, r6}}]}) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000c40)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000c80)=r3) r8 = openat(r3, &(0x7f0000000cc0)='./file0\x00', 0x80000, 0xeb63f7549a4042a2) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000d00)={'mangle\x00'}, &(0x7f0000000d80)=0x54) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/self/net/pfkey\x00', 0xcc572253142884ad, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000e00)={'vlan0\x00', 0x2}) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e40)={0xffffffffffffffff}, 0xc) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x20010, r10, 0x0) quotactl(0x1, &(0x7f0000000e80)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000ec0)="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") readv(r4, &(0x7f0000002100)=[{&(0x7f0000001ec0)=""/137, 0x89}, {&(0x7f0000001f80)=""/166, 0xa6}, {&(0x7f0000002040)=""/170, 0xaa}], 0x3) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000002140), &(0x7f0000002180)=0x4) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000021c0)='/selinux/status\x00', 0x0, 0x0) write$P9_RSTAT(r11, &(0x7f0000002200)={0x89, 0x7d, 0x2, {0x0, 0x82, 0x1, 0xffffffff, {0xd1, 0x0, 0x8}, 0x10000000, 0xcde0, 0x1, 0x2, 0xa, ',\'&wlan0}-', 0x2b, '}loppp0(vmnet0keyring%trustednodevcgroup\\:!', 0x15, '/proc/self/net/pfkey\x00', 0x5, 'cp932'}}, 0x89) [ 897.727077] input: syz0 as /devices/virtual/input/input41 03:40:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000bc70000000000000950000000000000099e941a413f864c78b07d9ffaefc3cbf11bc9031ba7a0af86bf4aa35339f6b382c4caf9db6fa7a9b85"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYPTR, @ANYBLOB="53c50021c2e0fd8617743bad45c31e2205b7ce3fd6edf00cb2f41fa5a7ccaa014b4e938fa5ac8ba03de5ec7bb566d38f654cd544373de47d4a74dce046f31222ce8e2735caec3bc2cde6631a78e1f21ddb059bc4ea35afad7aa8a08df8f8dc94b76e0e73d0b1008d5b236ede2faa9dc31e1c34b68a3bf44b0babee0b07a6a5512beb521e391320dd06fc166425e5cd963f57145d8c8440b879aec05e927860a7af30d073c839213589767af7ddeac86847d20050a7503c665c89222a170dd6ad0b6743dc75505ac85d31cb6134669e3b1e934323a43498beb0b6bcb0ef0d7a2b9a17ef2e9ae60a27973156a56b5b", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x10e, 0x98ce331283d69f8b}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x3bb77de84190fb35, 0x0) write$P9_RLOPEN(r3, &(0x7f00000002c0)={0x18, 0xd, 0x1, {{0x8, 0x1, 0x8}, 0x7}}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x120, 0xffffffffffffffae}, 0x20) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:40:35 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) getresuid(&(0x7f0000000380), 0x0, &(0x7f0000000540)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='G\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0xfffffffffffffffe, 0x4, {{0x4, 0x3, 0x8, 0x1ff, 0x7, 0x9, 0x5, 0x304b}}}, 0x60) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96ddf99074199c7f0abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a28b0d9ac144fb2f256f2cfc9ae2a1b09a618317fc1a9e5d2633185e40decd76146ec97853cce25251208", @ANYRES64=0x0], 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2c63536e7465d2f4894ed7ebd5b842aa0cf843ef"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='/selinux/checkreqprot\x00') ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) [ 897.873143] binder: 14705:14712 got transaction with invalid offset (40, min 40 max 104) or object. 03:40:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/34], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 897.933852] binder: 14705:14712 transaction failed 29201/-22, size 104-24 line 3379 [ 897.962928] binder: undelivered TRANSACTION_ERROR: 29201 03:40:35 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{}]}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f00000000c0)="5369da6961326ba6479af2f108a36c1106fa1d9223e6d3cf7461d3a9457eb5628a631fcc9393464ed4cf28f4033ac095512b1f2f4c99dab599df91416fceb2bf921897018d", 0x45, 0x4, &(0x7f00000001c0)=@ipx={0x4, 0x3, 0x4, "811448316ed2", 0xfd}, 0x80) 03:40:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:35 executing program 5: socket$unix(0x1, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700aaaaaaaaaa0e0180c2000000aaaaaaaaaa00000000e2ffffa906aaaaaabbaaaaaaaaaabbaaaaaaaaaabb788d019e3fe2fbd9b6396e"]) r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000440)={0xffffffff}, 0x8, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000100001080000000000000085008e68e9e46958b44845d236b112af8b0724a9f3f3ac43fcc7d49216024b74f1aac3e1f259c72a9a39ad1376265b086a55ab6343712bdcf8958905293e48bb006a0623a01bd90b20ce80d1cf62fe50bc4c52af24b85222206c4e0004ab8f2b82a34706098df550c842cce1a8734d6a72c1ee0a4b89a9bf53f3d4e97565467b69697ab7c55b522f1ad5cf37fe8d4c2943ef23b5fa8832353e77cefd613f6da6a6", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x0, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x39b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) mount(&(0x7f0000000300)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x6df359922970ab71, &(0x7f00000003c0)='cgroupvboxnet0self}trustedeth0cpuset-.#\x00') [ 898.090223] binder: 14723:14732 got transaction with invalid offset (40, min 40 max 104) or object. 03:40:35 executing program 4: r0 = gettid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x726b14797a834ceb, 0x0, 0xffff, 0x1, 0xfffffffff3e87be7, 0x8, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000200)) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x1) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, r1, &(0x7f0000000280)='./file0\x00', 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x839b733f5a329e74) umount2(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) [ 898.161321] binder: 14723:14732 transaction failed 29201/-22, size 104-24 line 3379 03:40:35 executing program 4: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40)='TIPC\x00') ftruncate(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="17604b63929d2d7f8ab5ae31635a0cda", 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x88c87e5da45b9696, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x0, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x19, 0x300, 0x70bd2c, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x2b, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c060}, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x15c) sendfile(0xffffffffffffffff, r6, &(0x7f0000000040), 0x8000fffffffe) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000180)=0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 03:40:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/34], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 898.389106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 898.389265] binder: undelivered TRANSACTION_ERROR: 29201 03:40:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x80582) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0xa, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) 03:40:36 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 898.506400] binder: 14758:14759 got transaction with invalid offset (40, min 40 max 104) or object. [ 898.544305] binder: 14758:14759 transaction failed 29201/-22, size 104-24 line 3379 03:40:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/34], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 898.579500] binder: undelivered TRANSACTION_ERROR: 29201 03:40:36 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x100, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x84007) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00ory'], 0x7) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r9 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpuacct.stat\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r9, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r10, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r12, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r13, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRESDEC=r1, @ANYRES64=r8, @ANYRES16, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRESOCT=r11, @ANYRES64=r0, @ANYRESDEC=r12, @ANYRESDEC, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="b70f3340c21a35980dc03bb89393c7046cf555fe6d356b4e965a054ce2e6bd039b669c9ac6a11324fd0797bd71af9fa7a8348e04afda990ad891b88ef6bdd4b133c910236af4a5e7339484dfa5afe5383ce044932299331eb883a2d47dc4b9805543508ae6b96fe2eaf8d509520e357eb0404b110cd1da1e76ad4fd0d2628169cd778088f402bdb7cab8478f188782abbdb9120ff656d5b4a8f927f42bc71bad69eb2cd9e688f6c8c2facb1286fcfbc20a0fa5c1ed3ad87706e98a0453bd3854147fc3a52bdf53fbf9f6e12f8de3bafdb8dabb7d457ade01f3509b473efb31ea54c5ef53ea02feb1", @ANYRES64=r13], @ANYRESOCT=r6, @ANYRESOCT=0x0], @ANYRESOCT=r10], 0x6c) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x668}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r14 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r14, 0x0, 0xa808) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 03:40:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/40], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 898.664003] binder: 14767:14768 got transaction with invalid offset (40, min 40 max 104) or object. [ 898.685822] binder: 14767:14768 transaction failed 29201/-22, size 104-24 line 3379 [ 898.705445] binder: undelivered TRANSACTION_ERROR: 29201 [ 898.815554] binder: 14770:14772 got transaction with invalid offset (40, min 40 max 104) or object. [ 898.845605] binder: 14770:14772 transaction failed 29201/-22, size 104-24 line 3379 03:40:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/40], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3b8, &(0x7f0000000200)=[{&(0x7f00000000c0)="25bca274769e620aa734fa0095e0d0a18db43915e3a702a9d8aea872943afd874e2f98b579a7186270146d0e02c06cffa8c67cd7dcc6760253ef0b2a20a602210318f8104a27ea57b012d31c34951dc119dac04eab9c68842086234a45fbe202000000000029", 0x66, 0x400}], 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) r1 = dup2(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000000)=[{}], 0x0, [{}, {}, {}]}, 0xa8) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f0000000240)=""/227, &(0x7f0000000040)=0xe3) [ 898.877975] binder: undelivered TRANSACTION_ERROR: 29201 [ 898.917736] binder: 14773:14775 got transaction with invalid offset (40, min 40 max 104) or object. 03:40:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000"/40], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 898.927549] binder: 14773:14775 transaction failed 29201/-22, size 104-24 line 3379 [ 898.946763] binder: undelivered TRANSACTION_ERROR: 29201 03:40:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 898.998217] binder: 14778:14779 got transaction with invalid offset (40, min 40 max 104) or object. [ 899.020953] binder: 14778:14779 transaction failed 29201/-22, size 104-24 line 3379 [ 899.039581] binder: undelivered TRANSACTION_ERROR: 29201 [ 899.087878] binder: 14782:14786 got transaction with invalid offset (40, min 40 max 104) or object. 03:40:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0/file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in6=@empty}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x0, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='G\x00', 0x25, 0x0, 0x0, 0x0, 0xb, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x9}, 0x10}, 0x70) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r5], @ANYRESDEC, @ANYRESHEX, @ANYPTR]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f59c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe9dd0cd8af29c41ab6d7eace1cdde67620b02208401772ca8b6642680c1e7e438dbf26d47a550e3483c017587052a184a7e33429d287559880d251204d36465ae7cfc0e4b62185f9728e9b02fed", @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="afad51bebc17593c0e344b98c1fecb8c1f401a39bf9bb1e419a3bf6507ec338bab8b23c25013f7f0f66a1090e92086a990b0f82126a214b5fa53e395b46870314700bcaed5572b6bafce135d26c4c98f00"], @ANYRES16=r4, @ANYPTR=&(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32, @ANYRES32], @ANYRES16, @ANYRESOCT, @ANYRES32], @ANYPTR], 0x109) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000680)=0xc) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r8, 0x0) r9 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r11 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r11, 0x0) socket$netlink(0x10, 0x3, 0x13) [ 899.194373] binder: 14782:14786 transaction failed 29201/-22, size 104-24 line 3379 [ 899.242856] binder: undelivered TRANSACTION_ERROR: 29201 03:40:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 899.401146] binder: 14798:14799 got transaction with invalid offset (40, min 40 max 104) or object. [ 899.442645] binder: 14798:14799 transaction failed 29201/-22, size 104-24 line 3379 [ 899.459953] binder: undelivered TRANSACTION_ERROR: 29201 03:40:38 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0, 0x0, 0x0, 0xfffffffffffffdd7}}], 0x1, 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=@deltaction={0x328, 0x31, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0xa0, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x15, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x19, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1a, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x15, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x1e, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xa, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @TCA_ACT_TAB={0xbc, 0x1, [{0x14, 0xf, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x15, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x20, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x18, 0xd, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xd, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x2108}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff39}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0x35}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0000}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0x685}}, {0x18, 0x11, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x44080004}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) r3 = fcntl$getown(r1, 0x9) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000600)='net/fib_trie\x00') preadv(r5, &(0x7f00000017c0), 0x199, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x7, 'sit0\x00', 0x2}, 0x18) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f0000000300)=0x54) 03:40:38 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:38 executing program 4: socket$packet(0x11, 0x2, 0x300) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7) perf_event_open(&(0x7f000001d000)={0x3, 0xfffffffffffffd2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x20010, 0x0, 0x2000, 0x7, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000140)='big_key\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendto$inet(r2, &(0x7f0000000280)="6c38e766f40bb6e273d6a66883957d0338810ed75a81695d24829b172b29d04fbe541a511be018bc8ac694fe7cb1ea0b0058f109984afc53a0b1471e4b3983b55df819efc44836887c9fcc61bead05a8718b21c559ac20", 0x57, 0x4, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x8ef8ff821a0da9dc, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}]) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x0) io_setup(0x400, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) r9 = dup2(r8, r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r10 = getuid() mount$fuse(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000480)='fuse\x00', 0x4000, &(0x7f0000000580)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0xf00}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffde2}}, {@max_read={'max_read'}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fsmagic={'fsmagic', 0x3d, 0xe15b}}, {@smackfsdef={'smackfsdef', 0x3d, 'big_key\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000040)) io_submit(r6, 0x0, 0x0) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000300)) recvfrom(r5, &(0x7f0000000400)=""/87, 0x57, 0x2000, 0x0, 0x0) io_cancel(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x1}, &(0x7f00000001c0)) 03:40:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 901.407207] binder: 15046:15049 got transaction with invalid offset (40, min 40 max 104) or object. [ 901.429691] binder: 15046:15049 transaction failed 29201/-22, size 104-24 line 3379 [ 901.461650] binder: undelivered TRANSACTION_ERROR: 29201 [ 902.143665] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 03:40:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) getgid() openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0) 03:40:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:39 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3ceb95438f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES16], 0x0, 0x46}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x34}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x5b, 0x1, r14}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000140001000000eaffffff000002000000", @ANYRES32=r14, @ANYBLOB="08000200e00000011400030069703665727370616e30000000000000"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) accept4$packet(r17, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14, 0xc0000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e4, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x5, 0x0, 0x9, 0xfffffffb}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000500)="22b6c71b330c8a3e47865211f77fe64ebcab2fb8a641060f0f22deb0") ptrace$cont(0x7, r0, 0x0, 0x0) 03:40:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) madvise(&(0x7f00005df000/0x4000)=nil, 0x4000, 0x2) sendfile(r7, r8, &(0x7f0000000100), 0x4) ioctl$TCGETX(r4, 0x5432, &(0x7f00000000c0)) 03:40:39 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r7 = dup(r6) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 902.197325] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 03:40:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 902.242615] binder: 15152:15157 got transaction with invalid offset (0, min 80 max 104) or object. [ 902.256373] binder: 15152:15157 transaction failed 29201/-22, size 104-24 line 3379 [ 902.267081] binder: undelivered TRANSACTION_ERROR: 29201 [ 902.391663] binder: 15165:15173 got transaction with invalid offset (0, min 80 max 104) or object. [ 902.456608] binder: 15165:15173 transaction failed 29201/-22, size 104-24 line 3379 03:40:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) madvise(&(0x7f00005df000/0x4000)=nil, 0x4000, 0x2) sendfile(r7, r8, &(0x7f0000000100), 0x4) ioctl$TCGETX(r4, 0x5432, &(0x7f00000000c0)) [ 902.513911] binder: undelivered TRANSACTION_ERROR: 29201 [ 902.524748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:40 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x27) r1 = getpgrp(r0) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) setpgid(r1, r3) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = creat(0x0, 0x8) fsetxattr(r4, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182) r6 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = dup2(r6, r6) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendfile(r7, r5, 0x0, 0x2400003e) 03:40:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 902.732314] binder: 15187:15189 got transaction with invalid offset (0, min 80 max 104) or object. [ 902.759326] binder: 15187:15189 transaction failed 29201/-22, size 104-24 line 3379 03:40:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) madvise(&(0x7f00005df000/0x4000)=nil, 0x4000, 0x2) sendfile(r7, r8, &(0x7f0000000100), 0x4) ioctl$TCGETX(r4, 0x5432, &(0x7f00000000c0)) 03:40:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 902.783993] binder: undelivered TRANSACTION_ERROR: 29201 03:40:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 902.847149] binder: 15196:15198 unknown command 536870912 [ 902.852984] binder: 15196:15198 ioctl c0306201 200002c0 returned -22 03:40:40 executing program 1: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x41042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) fadvise64(r1, 0xfffffffffffffffe, 0x0, 0x4) close(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000200), &(0x7f0000000180)=0x26e) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) fchdir(r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000002c0)={0x7, 0x9, 0xffff, 0x0, 0x4}) [ 902.887704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) madvise(&(0x7f00005df000/0x4000)=nil, 0x4000, 0x2) sendfile(r7, r8, &(0x7f0000000100), 0x4) ioctl$TCGETX(r4, 0x5432, &(0x7f00000000c0)) [ 902.931774] binder: 15204:15206 unknown command 536870912 [ 902.943986] binder: 15204:15206 ioctl c0306201 200002c0 returned -22 03:40:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) madvise(&(0x7f00005df000/0x4000)=nil, 0x4000, 0x2) sendfile(r7, r8, &(0x7f0000000100), 0x4) 03:40:41 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 903.429752] binder: 15225:15227 unknown command 536870912 [ 903.436014] binder: 15225:15227 ioctl c0306201 200002c0 returned -22 03:40:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 903.471512] binder: 15231:15233 unknown command 536870912 [ 903.481727] binder: 15231:15233 ioctl c0306201 200002c0 returned -22 [ 903.525307] binder: 15237:15238 unknown command 536870912 [ 903.535242] binder: 15237:15238 ioctl c0306201 200002c0 returned -22 03:40:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) madvise(&(0x7f00005df000/0x4000)=nil, 0x4000, 0x2) 03:40:41 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x227}, {0x0}, {&(0x7f0000000180)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR], 0x0, 0x130}, 0x20) tkill(r0, 0x80000008) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:40:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:41 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='user\x00s\xe9\'\xb1\xd6)l\xd1Y\xe0\xe6\x00\x10\x8aI0\x90\xc7\v6\x8f\x1b\xdc>\x91\xe3\xc1\x84\xd2nk\xe4\xf1\xc8\x99\x8b>\xc7XBF\xf3\x8c\x01\xa4\n\x8ak]\x86n\xd3\x92\x9d\x1aE', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x3, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'syzkaller1\x00', 0x3}, 0x18) sendto$inet(r0, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) r2 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r2, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) getegid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32]], 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa6e58b9bf4c9c8ea, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfffffe4b) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfffffe4b) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:40:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2a, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000400000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 903.793565] binder: 15247:15250 unknown command 536870912 [ 903.810201] binder: 15247:15250 ioctl c0306201 200002c0 returned -22 03:40:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) 03:40:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2a, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000400000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 903.871494] binder: 15258:15261 got transaction with invalid data ptr [ 903.881454] binder: 15258:15261 transaction failed 29201/-14, size 8192-0 line 3316 [ 903.900378] binder: undelivered TRANSACTION_ERROR: 29201 [ 904.009429] binder: 15275:15281 got transaction with invalid data ptr [ 904.025391] binder: 15275:15281 transaction failed 29201/-14, size 8192-0 line 3316 [ 904.043596] binder: undelivered TRANSACTION_ERROR: 29201 03:40:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2a, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000400000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 904.252416] binder: 15286:15288 got transaction with invalid data ptr [ 904.259270] binder: 15286:15288 transaction failed 29201/-14, size 8192-0 line 3316 [ 904.270662] binder: undelivered TRANSACTION_ERROR: 29201 03:40:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2a, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000400000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x140, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x841}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcf5}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe8}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf80b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5fa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x8001) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x184, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd1d3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @local, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xc57, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf31}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x76b}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x401, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @local, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000145}, 0x404006c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x7) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x800000, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000100)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'sy`'}, &(0x7f0000000a80), 0xfffffffffffffffd) r6 = gettid() tkill(r6, 0x30) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r7, 0x1, 0x9, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r7, r8, 0x0, 0x80000003) inotify_init1(0x0) 03:40:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sched_setscheduler(r1, 0xee6e1df2bd97db99, &(0x7f0000000240)=0xff) 03:40:42 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2a, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000400000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:42 executing program 1: io_setup(0x3b24, 0x0) r0 = eventfd2(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000001c0)) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x3, 0x2}}, 0x80, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) open(0x0, 0x141042, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000280)={{0x0, @broadcast, 0x4e23, 0x0, '\x86\x87\x80\x00\x04\x00', 0x32, 0x0, 0x5c}, {@multicast1, 0x4e22, 0x4, 0x7fffffff, 0x8, 0x4}}, 0x44) dup3(0xffffffffffffffff, r3, 0x80000) unshare(0x60000000) r4 = dup(r0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x4) read$FUSE(r4, &(0x7f0000000280), 0x1000) [ 904.440182] binder: 15296:15300 got transaction with invalid data ptr [ 904.447921] binder: 15296:15300 transaction failed 29201/-14, size 8192-0 line 3316 [ 904.468244] binder: undelivered TRANSACTION_ERROR: 29201 [ 904.468561] binder: 15297:15301 got transaction with invalid data ptr 03:40:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x37, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000040000000000000000000000000000680000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) [ 904.468595] binder: 15297:15301 transaction failed 29201/-14, size 8192-0 line 3316 03:40:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x37, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000040000000000000000000000000000680000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 904.702452] binder: undelivered TRANSACTION_ERROR: 29201 [ 904.712044] binder_alloc: 15315: binder_alloc_buf size 18014401730707560 failed, no address space 03:40:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) [ 904.712051] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 904.712071] binder: 15315:15323 transaction failed 29201/-28, size 9007199254741096-9007202475966464 line 3284 [ 904.790541] binder: BINDER_SET_CONTEXT_MGR already set [ 904.790549] binder: 15330:15331 ioctl 40046207 0 returned -16 [ 904.839552] binder_alloc: 15315: binder_alloc_buf, no vma [ 904.839593] binder: 15330:15335 transaction failed 29189/-3, size 9007199254741096-9007202475966464 line 3284 [ 904.936035] binder: undelivered TRANSACTION_ERROR: 29189 [ 904.981830] binder: undelivered TRANSACTION_ERROR: 29201 03:40:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x37, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000040000000000000000000000000000680000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2a, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000400000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) [ 905.087135] binder_alloc: 15345: binder_alloc_buf size 18014401730707560 failed, no address space [ 905.100291] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 905.106233] binder: 15348:15350 got transaction with invalid data ptr [ 905.106261] binder: 15348:15350 transaction failed 29201/-14, size 8192-0 line 3316 [ 905.106527] binder: undelivered TRANSACTION_ERROR: 29201 03:40:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3e, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 905.131783] binder: 15345:15346 transaction failed 29201/-28, size 9007199254741096-9007202475966464 line 3284 [ 905.146315] binder: undelivered TRANSACTION_ERROR: 29201 [ 905.199346] binder_alloc: 15357: binder_alloc_buf size 35184372088960 failed, no address space [ 905.262822] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 905.307951] binder: 15357:15358 transaction failed 29201/-28, size 104-35184372088856 line 3284 [ 905.345318] binder: undelivered TRANSACTION_ERROR: 29201 03:40:43 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) socket$inet_tcp(0x2, 0x1, 0x0) 03:40:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) fcntl$addseals(r0, 0x409, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x15c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @remote, 0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xcf37, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x15c}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300)=r8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = dup2(r4, r2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000280)={0x0, @empty, 0x4e23, 0x4, 'rr\x00', 0x21, 0x5, 0x51}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r11 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r12, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x0, 0x64da}}}, ["", ""]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="d5959f0a1f3ccf3a706195d064803cc7aa1bbbdab742fa8b95c6ed435a98be6c15ccd2e218b74bf9ee7d1e367a6f0bf82c7da1a12a660d36b4b620f0644bf2989e50769b3a9999cddb67523f6af3919600b3362b89256619eae2390e3fe7a22038afb67618782f4f2404d907df66d132d3b55df49b850e7fd2dfbe612d8db0fdb7f24551e5278c2caf622685c6254b07d1228ab15a7a3ca6dad3", @ANYRES16=r12, @ANYBLOB="09042dbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r13, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xacc4e2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 03:40:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3e, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:43 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x0, 0x0, "9d4e241504134c5f00b0a2ef0a4457e2bd35d1486204b4fb5b4dbaad4a1bb50aa7333f3e7cd1a65e2d0c27f138ef9967959b78fa948a7d9028431da16bffc9f6b8ed076a8afed89fff0a72e5c3d25020"}, 0xd8) r1 = gettid() r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x0, 0x64da}}}, ["", ""]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x20, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x100, 0x52, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x30000000}, 0x200008c6) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x131f64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r7, 0x0, 0x14, &(0x7f0000000040)='(-systemsecurity,^&\x00', 0x0}, 0x30) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0xc) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x7, 0xd9f, 0x1}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f0000000000)=0x2c8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000004c0)={@rand_addr="61452763889917ee7538e7ef42af2180", 0x6, 0x2, 0x3, 0x7, 0x0, 0x1ff}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec", 0x4b, 0xc, 0x0, 0x0) write$binfmt_misc(r9, &(0x7f0000001340)={'syz1', "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"}, 0x1004) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='cdg\x00', 0x4) 03:40:43 executing program 1: unshare(0x2000200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x27) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00') setns(r0, 0x0) [ 905.742672] binder_alloc: 15368: binder_alloc_buf size 35184372088960 failed, no address space [ 905.761958] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 905.781313] binder: 15368:15375 transaction failed 29201/-28, size 104-35184372088856 line 3284 03:40:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3e, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 905.807581] binder: undelivered TRANSACTION_ERROR: 29201 [ 905.865398] EXT4-fs (sda1): re-mounted. Opts: [ 905.881622] binder_alloc: 15389: binder_alloc_buf size 35184372088960 failed, no address space [ 905.903247] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:40:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000200)={0x5f61, 0xa1, 0x401, 0x0, 0x0, 0x84, 0x8, 0x6, 0x8, 0x0, 0x5, 0xb8}) 03:40:43 executing program 1: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f333bdce8be3c583fc908835130fd758ea833a109816bc6695d3a98fdbc591b9a94e66c60026329e9ba158552ce99f5536d95510ef54b7731ad2dd95b7b18eb6b8186a76e64c33d3b28be04ed0b61117a3bb71a0607243ca4031965396d36cdf8d8cf6e2e7ddcaf85e3bb30dbbe15ff585e465e165b2227cdb27c625989ab0f2cd6c76de9cd234b5da579a353c764e03fb6b1c383e515411bb4", @ANYRES16=r1, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="84cdeddb0da86d8b221f57dfda726511297eb372f0641a5457f8281dce955d7cb6092e892ad9335d018f170d0f06720326c67265bc2e6487460634aa3aa41eee3c95c4006b2650e8b7af4734c6d1af4a90b59624743e0b65fe6d35cee46611d5e668b3ac523b30dcc1e797327f272bff81d773af66ba93c0fb5f6df1ee187af51d5eab3d40d70952c1c07c2e4dce42f02457f261fcfaf1749b3cefcdd8c9ab74b924b67a9517536d2ce9d5007dba3b967d78cbfb2cfbf29d4cc43b4f8a58548dd6678ea34c442799e26daded0e94f51592c4b2", @ANYRES64=r3], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYRESDEC=0x0, @ANYRES64=r0], @ANYRES64=0x0, @ANYPTR, @ANYRESHEX=0x0, @ANYRESDEC]], 0xac) close(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@broadcast, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000e40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005d40), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x43e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x74, r7, 0x901, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xaf21}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000095}, 0x4000000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getpid() socket(0x5, 0x0, 0x81) [ 905.933567] binder: 15389:15391 transaction failed 29201/-28, size 104-35184372088856 line 3284 03:40:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x41, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 905.977016] binder: undelivered TRANSACTION_ERROR: 29201 03:40:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) [ 906.045489] binder: 15406:15407 got transaction with invalid data ptr [ 906.070045] binder: 15406:15407 transaction failed 29201/-14, size 104-24 line 3316 [ 906.137784] binder: undelivered TRANSACTION_ERROR: 29201 03:40:49 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="264e0afb60eac56a9d49fb530cfa81c779bd3ca417ef58d3f4a84196193932ca79670309af0e38dd7d4be68f09f8dca8b9fbeea53f1831807d47b29b36c1a60fa62006ffa065e394bddc5ae4c99461df7df0a8b1a05864f8005653f7b15db2e890f6825e2e035d7cbd5054755037f017de6c4bdc9cecebf1e2b5fd201ad3e046c456169daef4ebc5e9f6e0ecd8a5f7ab1077869d5051fdb6a7850e4556b8955fa399b7c75af79cd3eb5c3be3cf3d6690b960ac01fc0a430f47e3f757028dfd685d752d9b281fca0983c5bb0f9ff7dadbe0814b4982836db4b79d7a3ddc98db947a06033be869e23b6aaef7abb07df88b8043740d4fb502e28e01caeb70f74e46c06763cc6df1066418aadec3a14db04a4e762d4014b6d1fbbc17ba67eef22a0c0afe8f22d3294800c22ad318d579939d6dbc21ac3ce4a9e0b0a6c4b4d9f3d78fd7371eb6c8584b6a3edda4ffc7d207c0e48b9ab50e8eb1767053ff7da7ddea2a607b04b325e5da56b228031db1d786e6c56f8ecfeb70b772bc477f395ca9c3ea431f5a6db62b380264a6854ace538722153bc3d0f7a0970c321636fe31b2afe04a1daa7db859786f49f3eedc881f08ab9d1df63f6f441f1124b8d689ed56416c62434dabebd3d6aa6693fd97f2f55eb5c8e9c5c197e66bd71c6a9fab087575ae92490eb36ca97ded15e0bcc9a0002eab8eb38f48c378fd02239aedd7419c2a5b98c9a357ea58663252675bafa9a867952b0c2137ad6cb679732fe0fffe29a9b2168580f60f02113b69975b0e01c56ea3a5ac9c03e078080387b352949d48d587f042cbf0108398cf7d5ae314b1c8f7f69c215650fea03f1eec99de5f0fcedf2d0fef87faa0d4f84ec06ba60b7829a464e89d201ba37db8cefff4bf1c56e3a2ff4ec9793ddd234e35bda3d7883239517de531c49a86e7abb5491741bc0b74632d431b3a6335da3555e88cfbff9292922dd0f3cf4ad61d5278c69cea9f393a0798a21f7b2542cdc1dd62792e26c1de6e20d8ae20e997d7c4b95f63b3176bd23b220bdf8674b682ac54cdfd567750ff21852518e75e046a60247323261382355fd144457bea405f4ce95e5f7dbc15a82de3bc45caa0612d68ad154abe5d3ca610c50b58a749567775393e2f3e7ff7d804893461cf027a7cb7c8d8e4d438a7dd59e9a9a8e8846cc2b472b27e5f021195d356ca644f1ba6136527d14746540c000fb75d00eec341050558c9ca5d7fadbf182da33c2f9cb171d0b4667bd395fea235af6277bff344eb7e7af8d20c9495e98110bc6f75b6228703fedc8157b17c0ac929b504e78cf2d152ea92ee17098e133548b9ded149f1e651a6a8e809a2dd7dbdf3a8d5a7f530b07405a1c9b99c77c020cd0830ef6695fa3f7e24e1b28bd084c8b140331cd614cfd9295fe5ae826bf2f4515eceaf7d154d8fde6b03fb882a00df6ca3cf96a0b87ddaa9186100ae328ae0fdee3b85eb2f607170a235e86b1256158f2709f0b57338d8cf4112e1b1539b5bd9aed11a3e30c14f92a4deda47f56c8696d342143cacf769cca994ae7538d588e79d39f1abfd6ac5d80c9f55a09f3bf16c1f6ebb39730c45b88f2cf7effc73963ac47e379b30f87f7887a9ca5ba856722eb324333f9fc2ad394cc189d45a6c45da5bff7a9f6c4def052e4a66a9dc6a707152875f8539ba578058c09609797300664b0b54e62c32f03e84714e26d76e40453740d9721eea3511124ff382cb81e1a590c9f14a72e87f73f961e50f8019c06e97816ecc89e330fd21fc6ae5c42202aee304cda2bec0852341a1a1b9f7ce1f386d9832e4584ba3786b66038e1abc2db05f721a6dbd0bf5a045030139e83a23821d6a60c7b8f03dd3e9d05caa498177ed3d47f3888c38f23833f42a4d838fbe67b93445d1c1dc161d8ffb552b4716f2abafbaa119a60d1cddf0cfa830ab98a7cd2d1824310b4a5324378a5b6a48cd1fadb1ea0e1d67dbba5a024e8a34960d38a1936bc88e13a632bda8c629c134ace0a7908327adbb568b851d20f931b2b456ef834483e76221bfa1848d4d773eb0c13bd6a2a206989ee128c89e14a30a892b5d663acf96ec328ab909e1f0fbe5f09ce48267dc8ae4ee9e9b8de5e5f2240130441d4fbd3536f163774606f57bf901297cdd0c3890548de20c7f79ade6ef8d4cb7b2ca91bf7410aa181158aa30cc2c16d9163ee223caa9f14c607508e00bd8afd68507674a1e32119669ff9f79fa09082bb30cd0f6c2f86f61b59c5b2d2e1133b8215a1d07586661511de176953f78e01c3568b15b1e50ba81208b83802b2782957b465a599680b6343ef07edabb8b959609b20353917dbaf55920f56ec15e5d46b7a2a081563fabfb6de4ffdecff2e7e672aeaaf8506239d69c820d1e2dbb43b3eaa5bfd3a52522341acc9531063a9cf32974f0815127f9cc40d92eedb32f1de0a991dc1612dd567055c08e1117a0c3efdc9ed5008f6bab1163d33d9951581f5009b5a67b4c9128ea5c16ba405f6adc8c4397ee2a8325f792c2adb0d2e669727c043d92714aab0e3bcc1682275aeff398c207b1bef2654f2e895f7e829f0d724e19efb1000d00bb039c54f7d462ed7d3fa07651da339da60bf74f0e2093ba789fad21d95adaf2f5905e20811f4f31bf16bceefcdcc7dd89a2f3bf9b6d645fb04db5674c0aa6c2c925e724199e3c59d7e20895b318658c21fc38402a6715de0eb2006a7abc43cf50a4c6b5ca3fef394c9a8daa2a2db94878def09831836d8d59a01bb87f6bd4667fc9d1f2ad54341f66f26d8bbf66e1c1021304c3fc40caae08ca0b4da6fbcba44b31579c4477bad2ddcecbb8af43f2cd3858bedff4241e4f41575ba42ce9a6c12953d78c94714531ffafd3306362d2d817460b56486cf5b55960d0c77f504b42c77b200f25ee83a7a5481ea7432b0f2cd4d7d9e1b98db0864d59d2929e9df07c1f59107a5a64723bf2f4b5f67996efac9b48e981471bd692319a8f5dac88cc9714ed11edca0821bc3756ace5b12de8bcff75090b0671ac9ce872e14dae71ec72f69afb9ef0689a7b38c68c978b17b3970e2a9bf0042576ec305de970e0d24a76238afbd8ba24701d0ac2bed0613cb5b331064021e2f95022f16df5abb282931b9a96bf672e70fb4da98e09cd139ebc8fe7a0545472d97bb7b5e239c7e556e797f64104839db8cc5f44127d0fa03878869aa4524c0a06d5171895716c3a06839dc8a63cbebdc3160636b405059c7c4be097c5d6e5aac22c89e4e95592040888f50c3212a1884fa791a983d4c049d078450f08544efcd81ea0884edafabe5609669d299768f2d02d747629f8a7922d099b8e822c4d13acbc918bfbaa5b71c6281797f85fa3c2a685b21f75327e872fadc329d79ac1c0b07294393b933e56fcd9f6f7cb8b8c326161a034ab79930ba0d63ca17ffa792090750cc951b63d9899176f9baa7f92c56712f42bd0d43a4b146ff1811bd90af84ddfe9bdb7e3972b3b2fab438f26c141322a1039ae5cf1877a601dbe8d565ad592d0ac9b5ff655d7b96085b5cfc56ef2ae335399bd77ece04ae208942f822eeab397db12447cf7cce407c92a605a1d8bfa3f21b2a63f9c9af44efb7bb93e6e412b5170a7526c847070e3cba968b7843adfe2937c527414f8e5ca8a0811f50fe252fdaf5bb5d07bbc1475c37667a499c6b7abfc6f54078a3eb02341bf5b088c8c11206fcbd1cd259039ee32ef660ec1be59debb415f2b0dbd449e3f5da34ea710b75bdf12ef3cb1cfd372753f49e6c0b0445817dd58e3d7696629adcdd1ad4419e2e8aefa063d1830fc1df595b2f955de92cb68017e4830d48746b3b7842cc6ad9bfa448ebb2d81c317ab84de9309a4121a0a163f699d95c513f72e204d9a2d32eece13821afb0b6274ed56b8b92b46c26f0d087327f7826d8b516eb050bfca93699a63b1822d58be2ac106928f073c535bd1a19ed115dd34819738cf6a823d16dc1d318fa751f21f2e0fe9923b206cdf3c78fbfeb01f7f232d00cb6cfebd295db6979775b51a5a6adf7cc1cc0c9493c7afb241c2d8c471b3359b1068c9b3af9f9ccec391e0c04190c24eece8fc19c64fa3175723d1d769a2dc1986f7c54bb984ebe2c3a496f12f164639ab727045d6f6b7480563e7b086824718827d9498e398cfe5e066b852a12e72cdc6d665399f1547565ed7f2aed0463997ab77c2ff0c019a245764abd9baf6fc9fdeab1727ee6c334e19b9c139b5b170dbd45b7854ca5585af4352d3a7f4929f0aeffaabdacd8e938e02befcad07ab39b18ed6b2334bd6387cd65a29658f1b85faec182fe28531a65dc63385bd796c2e1c42216c9aff8932448e5981694019632ddbc8f52cc37041ed56dfeb99d96d7f4bce77e895f5feafe8135af506f73983b3b59a316cafd890093055eda2faa54de711f04e3b7f475e8bc4853ed09156bbfec570c3e63faadebe816ad17d5b35dfbecaa5266a5bf1a113bea98f5648da85a8c3eeae498699667e5f1519abea15e1d142bd687f2728f367a4ba33636d9af70b8fe9222d5e9a44cc54356d43915251b48c21dff1c6b135b6222fa5173f09346c87118684be65df5665b690b897fe953bfc81f9be38a5c8136109f673088824e61a1d4239050ead9c8c9b36aa115bbb4cd8c1a7f0f4af76428809fc14de03c92e4740cf0711dea2a17e54a25939176238b27045f590202beaec826007809017b2fad52a10ac1a934984f7f6172e5410924d2962225fb13e556f71dbf6fb4e5ad60387a22f58650cb75b3b517773828af263055afb001973f3bbb38345612566537aa0f78b8edb18ff29959a1c0412eef4ce2ff300fd1cc7104d28bcc49c8945c95005c59349976a9d126fc90f7975da5115c1abd8a73c30fef3142f7316c992a29d4e51fc46d7da35297d7ea516a2350773589dd2ccfb69075d35f5aed453a03e9c883ba64169c88ddaf3070fba1c23bb634c5d3f08a948a2fafca8bfcfdd3741ae6dc6cfb5efeecd7648ba7cf550a0a663aeb626d1d4f38e0245eed7d8832881233dfb47053b06d41a7ab7cc5a189b74a60a40dc08ac02fa05292e5d4f35b640e3c9983362c46e44a4adbb16b8f16cec0d732af46532c9d69c579eebaacd5e008df9032fb1f34041136c1fe2a234ffe9acb5baee0591e2e21285a0e193f97c770b92e7df2da67639274071fcb28f41a975e63af714c120a659abffdb356840cabcc35cb7703e091eef39c196311bd41340389bbb92f8807ef70875c049fc288feb462e5bb038466053e1b7291864b1a393ec8ad143a4629fba684d0ffbd2a1fb78363edd7cabb9ea722fb250e4b4116be3c3f29798e27d87366a494fe940c4e6aa1296e3d86f28a7b714a892d5b0ae79fe16eceef8a9579387aaab2717ec5b309086db15c015a048c370887f2a2a38b4a3032fc1f83bf22804bf92f7d68f8422862c8eff41e80267b195e2c65be571b3c1dd88d0d92bd7cf4e9a20c49edcd7860a50ac2f0313ce5672d201b046661a36c235e9f8df2835c84a0f80fee66b63462a7cbdcccda8326037b5ded9f8f5312fe850887700589162bb8847f28cc9413b7f9ff7e711a80ba49d50c22d2f46fb8df31fe6bb69af937990ca2fbde48bf2d89be367f4209eb0dcb9497fe942d4ee8b9546422e74232c0114d626184e7eb82c438a7719ac5ba48b3555845222e9c66f2b6b373bf944bb07132ef34eda2a7d6270a9563b2f037f8ff6ff79c2c4c491daa755ea3d1f086d1cbce787be5c67534cc8501232c5d3de8011064fc2ca4df3ce882e58a8102a1dfe7eb91f", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x41, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) 03:40:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) fcntl$addseals(r0, 0x409, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x15c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @remote, 0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xcf37, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x15c}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300)=r8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = dup2(r4, r2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000280)={0x0, @empty, 0x4e23, 0x4, 'rr\x00', 0x21, 0x5, 0x51}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r11 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r12, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x0, 0x64da}}}, ["", ""]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="d5959f0a1f3ccf3a706195d064803cc7aa1bbbdab742fa8b95c6ed435a98be6c15ccd2e218b74bf9ee7d1e367a6f0bf82c7da1a12a660d36b4b620f0644bf2989e50769b3a9999cddb67523f6af3919600b3362b89256619eae2390e3fe7a22038afb67618782f4f2404d907df66d132d3b55df49b850e7fd2dfbe612d8db0fdb7f24551e5278c2caf622685c6254b07d1228ab15a7a3ca6dad3", @ANYRES16=r12, @ANYBLOB="09042dbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r13, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xacc4e2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 03:40:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000200)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000300)=0xc) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000340)=r4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x127, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='mem\x00\x00\x00\x00\x00\x00\x00\x80t\x01\x80V\x83B\xdcV\t^\xf0k\xc4\xe3\xd0\x1e\x8e%\xb4\xd7\xc1\xb8\xb8\x01p\xa0\xae[C\xd9#\x10\'s\xbd\x97\xfev+\x0f\xbe\x15\xac\x99\x9a\xf7\xc1\xfa\xf6\x95\xfb}r\r!0\ra\b\x8e\x9dRrz<\xe7\xd9h\xd6\xce\x83\xe5\xe4O\xf6\x93\n\x8c\x93-\xfd\xbeB\xe6o\xff\"\xde\xcdQn\xe3\xd7x<\xa3\xa3\x87\xa5\xfe\x00\x81\xcf\xc5\xef\xd4\xaa\xef^\x93\xe4wdt\xd8\x11y\xdb\x95\xfa\x9b\x1b\xbcsE\x9a\xabE.V\xb6\xa7\xf9;p@\xe4\xf6&', 0x7a05, 0x1700) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) io_setup(0x3, &(0x7f0000000100)) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r10 = creat(&(0x7f0000000180)='./file0\x00', 0x15a712fa0326ef17) ioctl$VT_DISALLOCATE(r7, 0x5608) fallocate(r9, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x4, r10}) ioctl$RNDADDTOENTCNT(r10, 0x40045201, &(0x7f0000000000)=0x7) 03:40:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x41, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) fcntl$addseals(r0, 0x409, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x15c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @remote, 0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xcf37, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x15c}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300)=r8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = dup2(r4, r2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000280)={0x0, @empty, 0x4e23, 0x4, 'rr\x00', 0x21, 0x5, 0x51}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r11 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r12, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x0, 0x64da}}}, ["", ""]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="d5959f0a1f3ccf3a706195d064803cc7aa1bbbdab742fa8b95c6ed435a98be6c15ccd2e218b74bf9ee7d1e367a6f0bf82c7da1a12a660d36b4b620f0644bf2989e50769b3a9999cddb67523f6af3919600b3362b89256619eae2390e3fe7a22038afb67618782f4f2404d907df66d132d3b55df49b850e7fd2dfbe612d8db0fdb7f24551e5278c2caf622685c6254b07d1228ab15a7a3ca6dad3", @ANYRES16=r12, @ANYBLOB="09042dbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r13, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xacc4e2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) [ 911.479678] binder: 15435:15439 got transaction with invalid data ptr [ 911.487829] binder: 15435:15439 transaction failed 29201/-14, size 104-24 line 3316 [ 911.496672] binder: undelivered TRANSACTION_ERROR: 29201 03:40:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x43, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000040000000000000000000000000000680000000000000018000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 911.535915] binder: 15449:15450 got transaction with invalid data ptr [ 911.550500] binder: 15449:15450 transaction failed 29201/-14, size 104-24 line 3316 [ 911.559451] binder: undelivered TRANSACTION_ERROR: 29201 03:40:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) ptrace$getenv(0x4201, r5, 0xffffffff00000000, &(0x7f00000002c0)) [ 911.811747] binder: 15467:15470 got transaction with invalid data ptr [ 911.857484] binder: 15467:15470 transaction failed 29201/-14, size 104-24 line 3316 03:40:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000436000/0x1000)=nil) 03:40:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x43, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000040000000000000000000000000000680000000000000018000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 911.910318] binder: undelivered TRANSACTION_ERROR: 29201 [ 911.977467] binder: 15479:15481 got transaction with invalid data ptr [ 911.990512] binder: 15479:15481 transaction failed 29201/-14, size 104-24 line 3316 [ 912.011952] binder: undelivered TRANSACTION_ERROR: 29201 03:40:54 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) fcntl$addseals(r0, 0x409, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x15c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @remote, 0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xcf37, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x15c}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300)=r8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = dup2(r4, r2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000280)={0x0, @empty, 0x4e23, 0x4, 'rr\x00', 0x21, 0x5, 0x51}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r11 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r12, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x0, 0x64da}}}, ["", ""]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="d5959f0a1f3ccf3a706195d064803cc7aa1bbbdab742fa8b95c6ed435a98be6c15ccd2e218b74bf9ee7d1e367a6f0bf82c7da1a12a660d36b4b620f0644bf2989e50769b3a9999cddb67523f6af3919600b3362b89256619eae2390e3fe7a22038afb67618782f4f2404d907df66d132d3b55df49b850e7fd2dfbe612d8db0fdb7f24551e5278c2caf622685c6254b07d1228ab15a7a3ca6dad3", @ANYRES16=r12, @ANYBLOB="09042dbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r13, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xacc4e2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 03:40:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x43, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000040000000000000000000000000000680000000000000018000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:40:54 executing program 1: ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x6b5ae3fe2d495fa6, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x73bc832d515f4001) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket(0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) poll(&(0x7f0000000100)=[{r0}, {0xffffffffffffffff, 0x188}, {}, {}, {r1}, {r1, 0x4604}], 0x6, 0x1) r2 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = dup2(r4, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x1) sendfile(r1, r2, 0x0, 0x20000102000007) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 03:40:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) 03:40:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:54 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) memfd_create(0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 916.664679] binder: 15499:15501 got transaction with invalid data ptr [ 916.671906] binder: 15499:15501 transaction failed 29201/-14, size 104-24 line 3316 [ 916.683618] binder: undelivered TRANSACTION_ERROR: 29201 03:40:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) 03:40:54 executing program 3: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240), 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) open(&(0x7f0000000400)='./file0\x00', 0x200000, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000040)={0x0, 0x2}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) [ 917.185029] FAT-fs (loop3): codepage cp437 not found 03:40:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'veth0\x00', 0x10000000201b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) close(r2) 03:40:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(0x0, 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb15322e2df00000000000000960f53691a655eb6999d32772cf2eebb1f6c9ad54ac45a333c28785d6382fa7776ea267d32109a5633657b52873b9924f15a5b587ec8eaab2abd683c8ff8640f46e160757c496c9f56d1eb5eae74c061953c0e988937dd812989a20a85626cbcaa423d66696158375aea157f2b6553116f695819574f5b4a179f2f8d6e26f2394e14012a", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:40:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) gettid() 03:40:55 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r0, r1) 03:40:55 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="264e0afb60eac56a9d49fb530cfa81c779bd3ca417ef58d3f4a84196193932ca79670309af0e38dd7d4be68f09f8dca8b9fbeea53f1831807d47b29b36c1a60fa62006ffa065e394bddc5ae4c99461df7df0a8b1a05864f8005653f7b15db2e890f6825e2e035d7cbd5054755037f017de6c4bdc9cecebf1e2b5fd201ad3e046c456169daef4ebc5e9f6e0ecd8a5f7ab1077869d5051fdb6a7850e4556b8955fa399b7c75af79cd3eb5c3be3cf3d6690b960ac01fc0a430f47e3f757028dfd685d752d9b281fca0983c5bb0f9ff7dadbe0814b4982836db4b79d7a3ddc98db947a06033be869e23b6aaef7abb07df88b8043740d4fb502e28e01caeb70f74e46c06763cc6df1066418aadec3a14db04a4e762d4014b6d1fbbc17ba67eef22a0c0afe8f22d3294800c22ad318d579939d6dbc21ac3ce4a9e0b0a6c4b4d9f3d78fd7371eb6c8584b6a3edda4ffc7d207c0e48b9ab50e8eb1767053ff7da7ddea2a607b04b325e5da56b228031db1d786e6c56f8ecfeb70b772bc477f395ca9c3ea431f5a6db62b380264a6854ace538722153bc3d0f7a0970c321636fe31b2afe04a1daa7db859786f49f3eedc881f08ab9d1df63f6f441f1124b8d689ed56416c62434dabebd3d6aa6693fd97f2f55eb5c8e9c5c197e66bd71c6a9fab087575ae92490eb36ca97ded15e0bcc9a0002eab8eb38f48c378fd02239aedd7419c2a5b98c9a357ea58663252675bafa9a867952b0c2137ad6cb679732fe0fffe29a9b2168580f60f02113b69975b0e01c56ea3a5ac9c03e078080387b352949d48d587f042cbf0108398cf7d5ae314b1c8f7f69c215650fea03f1eec99de5f0fcedf2d0fef87faa0d4f84ec06ba60b7829a464e89d201ba37db8cefff4bf1c56e3a2ff4ec9793ddd234e35bda3d7883239517de531c49a86e7abb5491741bc0b74632d431b3a6335da3555e88cfbff9292922dd0f3cf4ad61d5278c69cea9f393a0798a21f7b2542cdc1dd62792e26c1de6e20d8ae20e997d7c4b95f63b3176bd23b220bdf8674b682ac54cdfd567750ff21852518e75e046a60247323261382355fd144457bea405f4ce95e5f7dbc15a82de3bc45caa0612d68ad154abe5d3ca610c50b58a749567775393e2f3e7ff7d804893461cf027a7cb7c8d8e4d438a7dd59e9a9a8e8846cc2b472b27e5f021195d356ca644f1ba6136527d14746540c000fb75d00eec341050558c9ca5d7fadbf182da33c2f9cb171d0b4667bd395fea235af6277bff344eb7e7af8d20c9495e98110bc6f75b6228703fedc8157b17c0ac929b504e78cf2d152ea92ee17098e133548b9ded149f1e651a6a8e809a2dd7dbdf3a8d5a7f530b07405a1c9b99c77c020cd0830ef6695fa3f7e24e1b28bd084c8b140331cd614cfd9295fe5ae826bf2f4515eceaf7d154d8fde6b03fb882a00df6ca3cf96a0b87ddaa9186100ae328ae0fdee3b85eb2f607170a235e86b1256158f2709f0b57338d8cf4112e1b1539b5bd9aed11a3e30c14f92a4deda47f56c8696d342143cacf769cca994ae7538d588e79d39f1abfd6ac5d80c9f55a09f3bf16c1f6ebb39730c45b88f2cf7effc73963ac47e379b30f87f7887a9ca5ba856722eb324333f9fc2ad394cc189d45a6c45da5bff7a9f6c4def052e4a66a9dc6a707152875f8539ba578058c09609797300664b0b54e62c32f03e84714e26d76e40453740d9721eea3511124ff382cb81e1a590c9f14a72e87f73f961e50f8019c06e97816ecc89e330fd21fc6ae5c42202aee304cda2bec0852341a1a1b9f7ce1f386d9832e4584ba3786b66038e1abc2db05f721a6dbd0bf5a045030139e83a23821d6a60c7b8f03dd3e9d05caa498177ed3d47f3888c38f23833f42a4d838fbe67b93445d1c1dc161d8ffb552b4716f2abafbaa119a60d1cddf0cfa830ab98a7cd2d1824310b4a5324378a5b6a48cd1fadb1ea0e1d67dbba5a024e8a34960d38a1936bc88e13a632bda8c629c134ace0a7908327adbb568b851d20f931b2b456ef834483e76221bfa1848d4d773eb0c13bd6a2a206989ee128c89e14a30a892b5d663acf96ec328ab909e1f0fbe5f09ce48267dc8ae4ee9e9b8de5e5f2240130441d4fbd3536f163774606f57bf901297cdd0c3890548de20c7f79ade6ef8d4cb7b2ca91bf7410aa181158aa30cc2c16d9163ee223caa9f14c607508e00bd8afd68507674a1e32119669ff9f79fa09082bb30cd0f6c2f86f61b59c5b2d2e1133b8215a1d07586661511de176953f78e01c3568b15b1e50ba81208b83802b2782957b465a599680b6343ef07edabb8b959609b20353917dbaf55920f56ec15e5d46b7a2a081563fabfb6de4ffdecff2e7e672aeaaf8506239d69c820d1e2dbb43b3eaa5bfd3a52522341acc9531063a9cf32974f0815127f9cc40d92eedb32f1de0a991dc1612dd567055c08e1117a0c3efdc9ed5008f6bab1163d33d9951581f5009b5a67b4c9128ea5c16ba405f6adc8c4397ee2a8325f792c2adb0d2e669727c043d92714aab0e3bcc1682275aeff398c207b1bef2654f2e895f7e829f0d724e19efb1000d00bb039c54f7d462ed7d3fa07651da339da60bf74f0e2093ba789fad21d95adaf2f5905e20811f4f31bf16bceefcdcc7dd89a2f3bf9b6d645fb04db5674c0aa6c2c925e724199e3c59d7e20895b318658c21fc38402a6715de0eb2006a7abc43cf50a4c6b5ca3fef394c9a8daa2a2db94878def09831836d8d59a01bb87f6bd4667fc9d1f2ad54341f66f26d8bbf66e1c1021304c3fc40caae08ca0b4da6fbcba44b31579c4477bad2ddcecbb8af43f2cd3858bedff4241e4f41575ba42ce9a6c12953d78c94714531ffafd3306362d2d817460b56486cf5b55960d0c77f504b42c77b200f25ee83a7a5481ea7432b0f2cd4d7d9e1b98db0864d59d2929e9df07c1f59107a5a64723bf2f4b5f67996efac9b48e981471bd692319a8f5dac88cc9714ed11edca0821bc3756ace5b12de8bcff75090b0671ac9ce872e14dae71ec72f69afb9ef0689a7b38c68c978b17b3970e2a9bf0042576ec305de970e0d24a76238afbd8ba24701d0ac2bed0613cb5b331064021e2f95022f16df5abb282931b9a96bf672e70fb4da98e09cd139ebc8fe7a0545472d97bb7b5e239c7e556e797f64104839db8cc5f44127d0fa03878869aa4524c0a06d5171895716c3a06839dc8a63cbebdc3160636b405059c7c4be097c5d6e5aac22c89e4e95592040888f50c3212a1884fa791a983d4c049d078450f08544efcd81ea0884edafabe5609669d299768f2d02d747629f8a7922d099b8e822c4d13acbc918bfbaa5b71c6281797f85fa3c2a685b21f75327e872fadc329d79ac1c0b07294393b933e56fcd9f6f7cb8b8c326161a034ab79930ba0d63ca17ffa792090750cc951b63d9899176f9baa7f92c56712f42bd0d43a4b146ff1811bd90af84ddfe9bdb7e3972b3b2fab438f26c141322a1039ae5cf1877a601dbe8d565ad592d0ac9b5ff655d7b96085b5cfc56ef2ae335399bd77ece04ae208942f822eeab397db12447cf7cce407c92a605a1d8bfa3f21b2a63f9c9af44efb7bb93e6e412b5170a7526c847070e3cba968b7843adfe2937c527414f8e5ca8a0811f50fe252fdaf5bb5d07bbc1475c37667a499c6b7abfc6f54078a3eb02341bf5b088c8c11206fcbd1cd259039ee32ef660ec1be59debb415f2b0dbd449e3f5da34ea710b75bdf12ef3cb1cfd372753f49e6c0b0445817dd58e3d7696629adcdd1ad4419e2e8aefa063d1830fc1df595b2f955de92cb68017e4830d48746b3b7842cc6ad9bfa448ebb2d81c317ab84de9309a4121a0a163f699d95c513f72e204d9a2d32eece13821afb0b6274ed56b8b92b46c26f0d087327f7826d8b516eb050bfca93699a63b1822d58be2ac106928f073c535bd1a19ed115dd34819738cf6a823d16dc1d318fa751f21f2e0fe9923b206cdf3c78fbfeb01f7f232d00cb6cfebd295db6979775b51a5a6adf7cc1cc0c9493c7afb241c2d8c471b3359b1068c9b3af9f9ccec391e0c04190c24eece8fc19c64fa3175723d1d769a2dc1986f7c54bb984ebe2c3a496f12f164639ab727045d6f6b7480563e7b086824718827d9498e398cfe5e066b852a12e72cdc6d665399f1547565ed7f2aed0463997ab77c2ff0c019a245764abd9baf6fc9fdeab1727ee6c334e19b9c139b5b170dbd45b7854ca5585af4352d3a7f4929f0aeffaabdacd8e938e02befcad07ab39b18ed6b2334bd6387cd65a29658f1b85faec182fe28531a65dc63385bd796c2e1c42216c9aff8932448e5981694019632ddbc8f52cc37041ed56dfeb99d96d7f4bce77e895f5feafe8135af506f73983b3b59a316cafd890093055eda2faa54de711f04e3b7f475e8bc4853ed09156bbfec570c3e63faadebe816ad17d5b35dfbecaa5266a5bf1a113bea98f5648da85a8c3eeae498699667e5f1519abea15e1d142bd687f2728f367a4ba33636d9af70b8fe9222d5e9a44cc54356d43915251b48c21dff1c6b135b6222fa5173f09346c87118684be65df5665b690b897fe953bfc81f9be38a5c8136109f673088824e61a1d4239050ead9c8c9b36aa115bbb4cd8c1a7f0f4af76428809fc14de03c92e4740cf0711dea2a17e54a25939176238b27045f590202beaec826007809017b2fad52a10ac1a934984f7f6172e5410924d2962225fb13e556f71dbf6fb4e5ad60387a22f58650cb75b3b517773828af263055afb001973f3bbb38345612566537aa0f78b8edb18ff29959a1c0412eef4ce2ff300fd1cc7104d28bcc49c8945c95005c59349976a9d126fc90f7975da5115c1abd8a73c30fef3142f7316c992a29d4e51fc46d7da35297d7ea516a2350773589dd2ccfb69075d35f5aed453a03e9c883ba64169c88ddaf3070fba1c23bb634c5d3f08a948a2fafca8bfcfdd3741ae6dc6cfb5efeecd7648ba7cf550a0a663aeb626d1d4f38e0245eed7d8832881233dfb47053b06d41a7ab7cc5a189b74a60a40dc08ac02fa05292e5d4f35b640e3c9983362c46e44a4adbb16b8f16cec0d732af46532c9d69c579eebaacd5e008df9032fb1f34041136c1fe2a234ffe9acb5baee0591e2e21285a0e193f97c770b92e7df2da67639274071fcb28f41a975e63af714c120a659abffdb356840cabcc35cb7703e091eef39c196311bd41340389bbb92f8807ef70875c049fc288feb462e5bb038466053e1b7291864b1a393ec8ad143a4629fba684d0ffbd2a1fb78363edd7cabb9ea722fb250e4b4116be3c3f29798e27d87366a494fe940c4e6aa1296e3d86f28a7b714a892d5b0ae79fe16eceef8a9579387aaab2717ec5b309086db15c015a048c370887f2a2a38b4a3032fc1f83bf22804bf92f7d68f8422862c8eff41e80267b195e2c65be571b3c1dd88d0d92bd7cf4e9a20c49edcd7860a50ac2f0313ce5672d201b046661a36c235e9f8df2835c84a0f80fee66b63462a7cbdcccda8326037b5ded9f8f5312fe850887700589162bb8847f28cc9413b7f9ff7e711a80ba49d50c22d2f46fb8df31fe6bb69af937990ca2fbde48bf2d89be367f4209eb0dcb9497fe942d4ee8b9546422e74232c0114d626184e7eb82c438a7719ac5ba48b3555845222e9c66f2b6b373bf944bb07132ef34eda2a7d6270a9563b2f037f8ff6ff79c2c4c491daa755ea3d1f086d1cbce787be5c67534cc8501232c5d3de8011064fc2ca4df3ce882e58a8102a1dfe7eb91f", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001200)=[{{}, 0x4, 0x7, 0xb3a}, {{}, 0x11, 0x3f, 0x1}, {{r4, r5/1000+10000}, 0x1, 0xa626, 0xfffffff8}, {{0x77359400}, 0x16, 0xd3, 0x3a}, {{0x77359400}, 0x3, 0x3}], 0x78) r6 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r3, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:55 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x1}, 0x20) 03:40:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(0x0, 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:55 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&0xa\x03\x00\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffffffa) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 03:40:56 executing program 3: 03:40:56 executing program 3: 03:40:56 executing program 5: 03:40:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:40:56 executing program 3: 03:40:56 executing program 5: 03:40:56 executing program 3: 03:40:56 executing program 3: 03:40:56 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="264e0afb60eac56a9d49fb530cfa81c779bd3ca417ef58d3f4a84196193932ca79670309af0e38dd7d4be68f09f8dca8b9fbeea53f1831807d47b29b36c1a60fa62006ffa065e394bddc5ae4c99461df7df0a8b1a05864f8005653f7b15db2e890f6825e2e035d7cbd5054755037f017de6c4bdc9cecebf1e2b5fd201ad3e046c456169daef4ebc5e9f6e0ecd8a5f7ab1077869d5051fdb6a7850e4556b8955fa399b7c75af79cd3eb5c3be3cf3d6690b960ac01fc0a430f47e3f757028dfd685d752d9b281fca0983c5bb0f9ff7dadbe0814b4982836db4b79d7a3ddc98db947a06033be869e23b6aaef7abb07df88b8043740d4fb502e28e01caeb70f74e46c06763cc6df1066418aadec3a14db04a4e762d4014b6d1fbbc17ba67eef22a0c0afe8f22d3294800c22ad318d579939d6dbc21ac3ce4a9e0b0a6c4b4d9f3d78fd7371eb6c8584b6a3edda4ffc7d207c0e48b9ab50e8eb1767053ff7da7ddea2a607b04b325e5da56b228031db1d786e6c56f8ecfeb70b772bc477f395ca9c3ea431f5a6db62b380264a6854ace538722153bc3d0f7a0970c321636fe31b2afe04a1daa7db859786f49f3eedc881f08ab9d1df63f6f441f1124b8d689ed56416c62434dabebd3d6aa6693fd97f2f55eb5c8e9c5c197e66bd71c6a9fab087575ae92490eb36ca97ded15e0bcc9a0002eab8eb38f48c378fd02239aedd7419c2a5b98c9a357ea58663252675bafa9a867952b0c2137ad6cb679732fe0fffe29a9b2168580f60f02113b69975b0e01c56ea3a5ac9c03e078080387b352949d48d587f042cbf0108398cf7d5ae314b1c8f7f69c215650fea03f1eec99de5f0fcedf2d0fef87faa0d4f84ec06ba60b7829a464e89d201ba37db8cefff4bf1c56e3a2ff4ec9793ddd234e35bda3d7883239517de531c49a86e7abb5491741bc0b74632d431b3a6335da3555e88cfbff9292922dd0f3cf4ad61d5278c69cea9f393a0798a21f7b2542cdc1dd62792e26c1de6e20d8ae20e997d7c4b95f63b3176bd23b220bdf8674b682ac54cdfd567750ff21852518e75e046a60247323261382355fd144457bea405f4ce95e5f7dbc15a82de3bc45caa0612d68ad154abe5d3ca610c50b58a749567775393e2f3e7ff7d804893461cf027a7cb7c8d8e4d438a7dd59e9a9a8e8846cc2b472b27e5f021195d356ca644f1ba6136527d14746540c000fb75d00eec341050558c9ca5d7fadbf182da33c2f9cb171d0b4667bd395fea235af6277bff344eb7e7af8d20c9495e98110bc6f75b6228703fedc8157b17c0ac929b504e78cf2d152ea92ee17098e133548b9ded149f1e651a6a8e809a2dd7dbdf3a8d5a7f530b07405a1c9b99c77c020cd0830ef6695fa3f7e24e1b28bd084c8b140331cd614cfd9295fe5ae826bf2f4515eceaf7d154d8fde6b03fb882a00df6ca3cf96a0b87ddaa9186100ae328ae0fdee3b85eb2f607170a235e86b1256158f2709f0b57338d8cf4112e1b1539b5bd9aed11a3e30c14f92a4deda47f56c8696d342143cacf769cca994ae7538d588e79d39f1abfd6ac5d80c9f55a09f3bf16c1f6ebb39730c45b88f2cf7effc73963ac47e379b30f87f7887a9ca5ba856722eb324333f9fc2ad394cc189d45a6c45da5bff7a9f6c4def052e4a66a9dc6a707152875f8539ba578058c09609797300664b0b54e62c32f03e84714e26d76e40453740d9721eea3511124ff382cb81e1a590c9f14a72e87f73f961e50f8019c06e97816ecc89e330fd21fc6ae5c42202aee304cda2bec0852341a1a1b9f7ce1f386d9832e4584ba3786b66038e1abc2db05f721a6dbd0bf5a045030139e83a23821d6a60c7b8f03dd3e9d05caa498177ed3d47f3888c38f23833f42a4d838fbe67b93445d1c1dc161d8ffb552b4716f2abafbaa119a60d1cddf0cfa830ab98a7cd2d1824310b4a5324378a5b6a48cd1fadb1ea0e1d67dbba5a024e8a34960d38a1936bc88e13a632bda8c629c134ace0a7908327adbb568b851d20f931b2b456ef834483e76221bfa1848d4d773eb0c13bd6a2a206989ee128c89e14a30a892b5d663acf96ec328ab909e1f0fbe5f09ce48267dc8ae4ee9e9b8de5e5f2240130441d4fbd3536f163774606f57bf901297cdd0c3890548de20c7f79ade6ef8d4cb7b2ca91bf7410aa181158aa30cc2c16d9163ee223caa9f14c607508e00bd8afd68507674a1e32119669ff9f79fa09082bb30cd0f6c2f86f61b59c5b2d2e1133b8215a1d07586661511de176953f78e01c3568b15b1e50ba81208b83802b2782957b465a599680b6343ef07edabb8b959609b20353917dbaf55920f56ec15e5d46b7a2a081563fabfb6de4ffdecff2e7e672aeaaf8506239d69c820d1e2dbb43b3eaa5bfd3a52522341acc9531063a9cf32974f0815127f9cc40d92eedb32f1de0a991dc1612dd567055c08e1117a0c3efdc9ed5008f6bab1163d33d9951581f5009b5a67b4c9128ea5c16ba405f6adc8c4397ee2a8325f792c2adb0d2e669727c043d92714aab0e3bcc1682275aeff398c207b1bef2654f2e895f7e829f0d724e19efb1000d00bb039c54f7d462ed7d3fa07651da339da60bf74f0e2093ba789fad21d95adaf2f5905e20811f4f31bf16bceefcdcc7dd89a2f3bf9b6d645fb04db5674c0aa6c2c925e724199e3c59d7e20895b318658c21fc38402a6715de0eb2006a7abc43cf50a4c6b5ca3fef394c9a8daa2a2db94878def09831836d8d59a01bb87f6bd4667fc9d1f2ad54341f66f26d8bbf66e1c1021304c3fc40caae08ca0b4da6fbcba44b31579c4477bad2ddcecbb8af43f2cd3858bedff4241e4f41575ba42ce9a6c12953d78c94714531ffafd3306362d2d817460b56486cf5b55960d0c77f504b42c77b200f25ee83a7a5481ea7432b0f2cd4d7d9e1b98db0864d59d2929e9df07c1f59107a5a64723bf2f4b5f67996efac9b48e981471bd692319a8f5dac88cc9714ed11edca0821bc3756ace5b12de8bcff75090b0671ac9ce872e14dae71ec72f69afb9ef0689a7b38c68c978b17b3970e2a9bf0042576ec305de970e0d24a76238afbd8ba24701d0ac2bed0613cb5b331064021e2f95022f16df5abb282931b9a96bf672e70fb4da98e09cd139ebc8fe7a0545472d97bb7b5e239c7e556e797f64104839db8cc5f44127d0fa03878869aa4524c0a06d5171895716c3a06839dc8a63cbebdc3160636b405059c7c4be097c5d6e5aac22c89e4e95592040888f50c3212a1884fa791a983d4c049d078450f08544efcd81ea0884edafabe5609669d299768f2d02d747629f8a7922d099b8e822c4d13acbc918bfbaa5b71c6281797f85fa3c2a685b21f75327e872fadc329d79ac1c0b07294393b933e56fcd9f6f7cb8b8c326161a034ab79930ba0d63ca17ffa792090750cc951b63d9899176f9baa7f92c56712f42bd0d43a4b146ff1811bd90af84ddfe9bdb7e3972b3b2fab438f26c141322a1039ae5cf1877a601dbe8d565ad592d0ac9b5ff655d7b96085b5cfc56ef2ae335399bd77ece04ae208942f822eeab397db12447cf7cce407c92a605a1d8bfa3f21b2a63f9c9af44efb7bb93e6e412b5170a7526c847070e3cba968b7843adfe2937c527414f8e5ca8a0811f50fe252fdaf5bb5d07bbc1475c37667a499c6b7abfc6f54078a3eb02341bf5b088c8c11206fcbd1cd259039ee32ef660ec1be59debb415f2b0dbd449e3f5da34ea710b75bdf12ef3cb1cfd372753f49e6c0b0445817dd58e3d7696629adcdd1ad4419e2e8aefa063d1830fc1df595b2f955de92cb68017e4830d48746b3b7842cc6ad9bfa448ebb2d81c317ab84de9309a4121a0a163f699d95c513f72e204d9a2d32eece13821afb0b6274ed56b8b92b46c26f0d087327f7826d8b516eb050bfca93699a63b1822d58be2ac106928f073c535bd1a19ed115dd34819738cf6a823d16dc1d318fa751f21f2e0fe9923b206cdf3c78fbfeb01f7f232d00cb6cfebd295db6979775b51a5a6adf7cc1cc0c9493c7afb241c2d8c471b3359b1068c9b3af9f9ccec391e0c04190c24eece8fc19c64fa3175723d1d769a2dc1986f7c54bb984ebe2c3a496f12f164639ab727045d6f6b7480563e7b086824718827d9498e398cfe5e066b852a12e72cdc6d665399f1547565ed7f2aed0463997ab77c2ff0c019a245764abd9baf6fc9fdeab1727ee6c334e19b9c139b5b170dbd45b7854ca5585af4352d3a7f4929f0aeffaabdacd8e938e02befcad07ab39b18ed6b2334bd6387cd65a29658f1b85faec182fe28531a65dc63385bd796c2e1c42216c9aff8932448e5981694019632ddbc8f52cc37041ed56dfeb99d96d7f4bce77e895f5feafe8135af506f73983b3b59a316cafd890093055eda2faa54de711f04e3b7f475e8bc4853ed09156bbfec570c3e63faadebe816ad17d5b35dfbecaa5266a5bf1a113bea98f5648da85a8c3eeae498699667e5f1519abea15e1d142bd687f2728f367a4ba33636d9af70b8fe9222d5e9a44cc54356d43915251b48c21dff1c6b135b6222fa5173f09346c87118684be65df5665b690b897fe953bfc81f9be38a5c8136109f673088824e61a1d4239050ead9c8c9b36aa115bbb4cd8c1a7f0f4af76428809fc14de03c92e4740cf0711dea2a17e54a25939176238b27045f590202beaec826007809017b2fad52a10ac1a934984f7f6172e5410924d2962225fb13e556f71dbf6fb4e5ad60387a22f58650cb75b3b517773828af263055afb001973f3bbb38345612566537aa0f78b8edb18ff29959a1c0412eef4ce2ff300fd1cc7104d28bcc49c8945c95005c59349976a9d126fc90f7975da5115c1abd8a73c30fef3142f7316c992a29d4e51fc46d7da35297d7ea516a2350773589dd2ccfb69075d35f5aed453a03e9c883ba64169c88ddaf3070fba1c23bb634c5d3f08a948a2fafca8bfcfdd3741ae6dc6cfb5efeecd7648ba7cf550a0a663aeb626d1d4f38e0245eed7d8832881233dfb47053b06d41a7ab7cc5a189b74a60a40dc08ac02fa05292e5d4f35b640e3c9983362c46e44a4adbb16b8f16cec0d732af46532c9d69c579eebaacd5e008df9032fb1f34041136c1fe2a234ffe9acb5baee0591e2e21285a0e193f97c770b92e7df2da67639274071fcb28f41a975e63af714c120a659abffdb356840cabcc35cb7703e091eef39c196311bd41340389bbb92f8807ef70875c049fc288feb462e5bb038466053e1b7291864b1a393ec8ad143a4629fba684d0ffbd2a1fb78363edd7cabb9ea722fb250e4b4116be3c3f29798e27d87366a494fe940c4e6aa1296e3d86f28a7b714a892d5b0ae79fe16eceef8a9579387aaab2717ec5b309086db15c015a048c370887f2a2a38b4a3032fc1f83bf22804bf92f7d68f8422862c8eff41e80267b195e2c65be571b3c1dd88d0d92bd7cf4e9a20c49edcd7860a50ac2f0313ce5672d201b046661a36c235e9f8df2835c84a0f80fee66b63462a7cbdcccda8326037b5ded9f8f5312fe850887700589162bb8847f28cc9413b7f9ff7e711a80ba49d50c22d2f46fb8df31fe6bb69af937990ca2fbde48bf2d89be367f4209eb0dcb9497fe942d4ee8b9546422e74232c0114d626184e7eb82c438a7719ac5ba48b3555845222e9c66f2b6b373bf944bb07132ef34eda2a7d6270a9563b2f037f8ff6ff79c2c4c491daa755ea3d1f086d1cbce787be5c67534cc8501232c5d3de8011064fc2ca4df3ce882e58a8102a1dfe7eb91f", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:56 executing program 5: 03:40:56 executing program 3: 03:40:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(0x0, 0x3) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:56 executing program 1: 03:40:56 executing program 5: 03:40:56 executing program 3: 03:40:57 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) 03:40:57 executing program 5: 03:40:57 executing program 3: 03:40:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) 03:40:57 executing program 5: 03:40:57 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:57 executing program 3: 03:40:57 executing program 1: 03:40:57 executing program 5: 03:40:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:57 executing program 5: 03:40:57 executing program 3: 03:40:57 executing program 1: 03:40:57 executing program 5: 03:40:57 executing program 3: 03:40:58 executing program 1: 03:40:58 executing program 3: 03:40:58 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) clock_gettime(0x0, &(0x7f00000011c0)) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:58 executing program 5: 03:40:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 03:40:58 executing program 1: 03:40:58 executing program 3: 03:40:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:58 executing program 1: 03:40:58 executing program 5: 03:40:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0xfffffffffffffe10, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x1}, 0x50) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85eb}}}, 0x90) 03:40:58 executing program 5: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0x28) 03:40:58 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$sock_int(r0, 0x1, 0x400000000000009, &(0x7f00000003c0)=0x2, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80084) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) r2 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r2, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) dup(0xffffffffffffffff) 03:40:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:40:59 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:40:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xfffffe2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000100)=ANY=[]], 0x0, 0x0, 0x0}) 03:40:59 executing program 5: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000240)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) r1 = open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) dup3(r1, r2, 0x0) 03:40:59 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') setgroups(0x54b, &(0x7f0000000180)) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:40:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) 03:40:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:40:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="875951925d3fd25c0683ff7f0000007328"]], 0x0, 0x0, 0x0}) [ 922.075617] binder: 15727:15731 got transaction with invalid offset (0, min 0 max 104) or object. [ 922.086849] binder: 15727:15731 transaction failed 29201/-22, size 104-24 line 3379 [ 922.095596] binder: undelivered TRANSACTION_ERROR: 29201 03:40:59 executing program 3: times(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 922.131688] binder: 15740:15741 got transaction with invalid offset (6688478067717921159, min 0 max 104) or object. [ 922.150894] binder: 15740:15741 transaction failed 29201/-22, size 104-24 line 3379 03:40:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 922.186031] binder: undelivered TRANSACTION_ERROR: 29201 03:40:59 executing program 3: syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create(0xfff) pipe(&(0x7f0000000080)) epoll_create(0xfff) epoll_wait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000003c0)={0x6ba7, 0x49, "5da7af0bc57fb783de284d4f93fa904cae1a284dd5da0ec6465401b8efcb16a8262ffe575584d99ef26c317a346317189e06008a89e582791c940d45f4db1061bfa25579db44bdfda9"}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') syncfs(r0) [ 922.320022] binder_alloc: 15751: binder_alloc_buf size 274877956096 failed, no address space [ 922.373567] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 922.415393] binder: 15751:15753 transaction failed 29201/-28, size 137438953472-137439002624 line 3284 03:41:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x400) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 922.555238] binder: undelivered TRANSACTION_ERROR: 29201 [ 922.678504] binder: 15764:15766 got transaction with out-of-order buffer fixup [ 922.692575] binder: 15764:15766 transaction failed 29201/-22, size 104-24 line 3525 [ 922.704006] binder: undelivered TRANSACTION_ERROR: 29201 03:41:01 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:41:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x3f, 0xd6, &(0x7f00000000c0)="b3404e9a0020af425ab9ae2cde6c6215362eac9d910618be825904a57c88da14c0692818399f9573f60a9ec0b72a18f512745bc68c79ccae73730b27a4ae93a15bcfff7f4601c2a131e915effee9d4e42714470a0f53ecb4c110a7e7c38d2f5d8d6476a7a52c1792cb59e973782d7de97f3f5a5052eecbc1aff1de1119bbac1828c736dbf7848125b478a8d9e1bfc8ac6d7549669a7c8cb763e2f17d46a17da00d687a67852a3d08ab61e79ef4353ea006b907990ff382d3218f8b26874dbaec7348f1612f06329ae6b3460dd3b7048b0361a7ec100c"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) alarm(0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="405a575bc06a23dc00000097b702c21cd1036a"]], 0x0, 0x0, 0x0}) 03:41:01 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x182}, 0x1000}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='attr/fscreate\x00') socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x80000, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x19d) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a311b4775e164965e3be1f035780fd0823bdc3948dc82da09a2fe58021bd654c3d488cd1e58def01e329af6d660e798fd56aa94e4b3300354c424265a02977eb2342e443b06f9b8291bde55b960d0e57877eca897e5067bfc12474e20ec1a2e15428b609a49e2aabacfa2680b04b57213d201b362939bdb6052b97129fc138558f6762ab6f90a5b41078530559754860957dba6e260d30eb146c03e1d26a50659b26e"], 0x207) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc0045878, 0x0) write$P9_RSTAT(r3, 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) 03:41:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(0x0, 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:41:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 03:41:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x200, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x4, 0x2c}]}, 0x18}, 0x1, 0xf000, 0x0, 0x8008010}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = dup3(r1, r0, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:41:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TIOCLINUX4(r1, 0x541c, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() clone(0x3fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x10881, &(0x7f0000000540)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x21) wait4(0x0, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x1, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6erspan0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="1d0000000800000004000000000000000000000000000000000000000000000020010001000000000010000000000000ff03000000000000000000000000000006000000000000006d1c58d7bd314b45255f24daa4fd92768468b98e652d09a82f3ed7b0078c5f1060548fa68852df71b361af9d01d2590aa9dcc77ace75eb7fc6cf4264bfa2e7a87294518e62c586ae6e37354206cb9fdea814269a13cc9704961f20f922fd51a79f5a7e76d799b3134709f13ce651203345266bfdbc2334de25614e4577f91482ba2124b5161deb"]}) signalfd(r4, &(0x7f0000000180)={0x9e6}, 0x8) [ 923.560127] binder: 15776:15780 ioctl 40104593 200001c0 returned -22 [ 923.569997] binder: 15776:15780 got transaction with invalid offset (-2584104386781816256, min 0 max 104) or object. [ 923.581328] binder: 15776:15780 transaction failed 29201/-22, size 104-24 line 3379 03:41:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) [ 923.623310] binder: undelivered TRANSACTION_ERROR: 29201 03:41:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0x2d, &(0x7f0000000140)={&(0x7f0000000040)="c4a3116a980000000000460f0f14501cf2400f11f364f30fb7e38f69f09327640f38cc3145d874b800d9fdc482d1914c5e00f3ad", {}, 0x10000000, &(0x7f0000000100)="8fc8609506fac442f9bea856ffffff4022ef660f38333a66470f3adfec62c4c2d5baf1c4e2c50b024476000f4a2c418f88a0a3fdc2"}, &(0x7f0000000200)={&(0x7f0000000180)="41f5c4218566c63626d9d0660f71d3f88f8a40124f058177f5e9c4c17d5b67003e66450f2801f2e11067f2460f38f1c60f915300", {}, 0x0, &(0x7f00000001c0)="46dbe1c4c2552c9106000000d9ee3edac1c482b1ba07640f9ccef20f405c5d5566450fd58e0d000000450f380187f2000000dae9"}, 0x8, &(0x7f0000000240)) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)=0x8002000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r6 = socket$inet(0x2, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r6], 0xffffffffffffff1d, 0x0, 0x0}) 03:41:01 executing program 5: r0 = syz_open_dev$loop(0x0, 0x749, 0x40c800) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/181, 0xb5}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000013c0), &(0x7f0000001400)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000004740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000e8050000180100000000000018010000000000000000000018050000180500001805000018050000180500000400000083310d817794589ba76b2022cb0459383dab6fe6d601aae0669c919f781fbac8d1a099d72a8b770edd73475030026dd335cb154adbf9310e66c1aacae3035f91aa170070c0a891ceb7de853c054ba9cfdd9881191e9b8112a1c3775ad73e8e91d6320e766761a695d842291b8454ebeced7558c17d4334ae7ae5cce45f4bc6c73b506fed9e5fb7debe6e6ced8891", @ANYPTR=&(0x7f0000004040)=ANY=[@ANYBLOB="0040000000007d0000000000000000000000000000000000000000000000000000000000000000000100"/65], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000bf12000000000000280052454a4543540000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001001380200000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000000700000003010900000103000300b90005000800d09400800700ff07080002000180f9ffff070f0028015345434d41524b0000000000000000000000000000000000000000000000010000000100000073797374656d5f753a6f626a6563745f723a6c645f736f5f743a7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000001ff000000ff000000ff000000ffffffffff000000ff000000ff00000000000000626f6e643000000000000000000000006361696630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000800010510000000000000000000000000000000a001c80100000000000000000000000000000000000000000000000090007372680000000000000000000000000000000000000000000000000000016c00060008000000fe880000000000000000000000000101fe800000000000000000000000000022fe8000000000000000000000000000bbff00000000000000ffffffff000000000000000000ffff0000000000ffffff00ffffffffffffff0000000000ff00000030108000000000004800686268000000000000000000000000000000000000000000000000000000000000000401000003000800565dff03e0ff08000400ffff010006150400bb600300a60206000a00280053455400000000000000000000000000000000000000000000000000000101000005097a08c10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x648) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r9 = openat(r7, &(0x7f0000001540)='./file0\x00', 0x10040, 0x73) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$P9_RFSYNC(r9, &(0x7f00000018c0)={0x7, 0x33, 0x1}, 0x7) openat$cgroup_subtree(r4, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(r2, &(0x7f0000002d00)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/171, 0xab}, {&(0x7f0000001480)=""/56, 0x38}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001440)=""/42, 0x2a}], 0x9, &(0x7f0000001640)=""/35, 0x23}, 0x8}, {{&(0x7f0000001680), 0x80, &(0x7f0000001b00)=[{&(0x7f0000001700)=""/172, 0xac}, {&(0x7f00000017c0)=""/195, 0xc3}, {&(0x7f00000018c0)}, {&(0x7f0000001900)=""/34, 0x22}, {&(0x7f0000001940)=""/76, 0x4c}, {&(0x7f00000019c0)=""/61, 0x3d}, {&(0x7f0000001a00)=""/23, 0x17}, {&(0x7f0000001a40)=""/133, 0x85}], 0x8, &(0x7f0000001b80)=""/7, 0x7}, 0x2}, {{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001c40)}, 0xfffff000}, {{&(0x7f0000001c80)=@caif=@rfm, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/134, 0x86}], 0x1, &(0x7f0000001e00)=""/136, 0x88}, 0x2}, {{&(0x7f0000001ec0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001f40)=""/65, 0x41}, {&(0x7f0000001fc0)=""/202, 0xca}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/59, 0x3b}, {&(0x7f0000002100)=""/122, 0x7a}, {&(0x7f0000002180)=""/115, 0x73}, {&(0x7f0000002200)=""/123, 0x7b}, {&(0x7f0000002280)=""/61, 0x3d}, {&(0x7f00000022c0)=""/163, 0xa3}], 0x9, &(0x7f0000002440)=""/77, 0x4d}, 0x9}, {{&(0x7f00000024c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002540)=""/12, 0xc}, {&(0x7f0000002580)=""/208, 0xd0}, {&(0x7f0000002680)=""/178, 0xb2}, {&(0x7f0000002740)=""/128, 0x80}, {&(0x7f00000027c0)=""/53, 0x35}, {&(0x7f0000002800)=""/71, 0x47}, {&(0x7f0000002880)=""/175, 0xaf}, {&(0x7f0000002940)=""/75, 0x4b}], 0x8}, 0x7f}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/105, 0x69}], 0x2, &(0x7f0000002c00)=""/222, 0xde}, 0x120000}], 0x7, 0x62, 0x0) [ 923.892436] binder: 15806:15812 unknown command -1 [ 923.934150] binder: 15806:15812 ioctl c0306201 200002c0 returned -22 03:41:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x17, 0x5c, &(0x7f0000000100)="984ade3faa4c5c196a3546a83318cad3aa5d0235c2bab037a14891e51f7cd256bfaeb20ed7ab223c53d729708d5d16871f2a4f889e5f035f8c9ae8e6ae71409e5b6d0b3afc8adba2b8af9361c12a7e91e0c0b65bfb0730f19511f685"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:41:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffead, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX4(r1, 0x541c, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x73bc832d515f4001) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000004}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/deop#\x00', 0x9, 0x140082) r3 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000180)) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x20000102000007) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 924.112123] binder: 15817:15819 got transaction with invalid parent offset or type [ 924.131794] binder: 15817:15819 transaction failed 29201/-22, size 104-24 line 3525 [ 924.152294] binder: undelivered TRANSACTION_ERROR: 29201 03:41:02 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:41:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = dup3(r0, r1, 0x80000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x2000000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000040000000000000000000000002b490000fa85413c000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000040)='\x00', 0x24180, 0x4) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000180)) 03:41:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffead, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX4(r1, 0x541c, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x73bc832d515f4001) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000004}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/deop#\x00', 0x9, 0x140082) r3 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000180)) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x20000102000007) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:41:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(0x0, 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 924.435681] binder: 15830:15832 ioctl 2400 3 returned -22 [ 924.452131] binder_alloc: 15830: binder_alloc_buf, no vma [ 924.467245] binder: 15830:15832 transaction failed 29189/-3, size 66252118294528-1572864 line 3284 03:41:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x2}], 0x5a, 0x0, &(0x7f0000000100)="94a09bc5e4505e85a8497776191981071c0223f28c6069233e32929f7eab4caa835fa3b464c8b3c3a690368a5b8942882809089f56bff3680b6dfb0603ba6e71eab848f24ccb1bc75699b1c5190174a4f0e6ecd1b29e8deeda64"}) 03:41:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffead, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX4(r1, 0x541c, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x73bc832d515f4001) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000004}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/deop#\x00', 0x9, 0x140082) r3 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000180)) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x20000102000007) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 924.500896] binder: undelivered TRANSACTION_ERROR: 29189 03:41:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) [ 924.568572] binder: 15842:15848 got transaction with out-of-order buffer fixup [ 924.678078] binder: 15842:15848 transaction failed 29201/-22, size 104-24 line 3525 [ 924.755957] binder: undelivered TRANSACTION_ERROR: 29201 03:41:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$cont(0x4, r1, 0x6, 0x47) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000043fb7bb41df9026bdc47a18bb6f2656aaec7a4bb8d7ef6ba500638e8b398ddc48608db79c79f51203e8d16b538a60aeeb685e5efe14dc96fb096f09c60da79f9ddb8f40e94fa25427809a815183c1b278b610bc36b5c5f25115379351d583876d8cccff5eb67fbb2c4a529c172aaa1bd24f962faf3470ee2427de1b668f2a39", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a747000000000000000000000000000000000000000d6f6cc020b154f1fd8707800000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:41:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$lock(r1, 0x3, &(0x7f0000000000)={0x2, 0x3, 0x9, 0x8000000000000, r2}) ptrace(0x10, r0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000a00)={@empty, 0x0}, &(0x7f0000000a40)=0x14) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r8, 0x29, 0x3b, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) accept4$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x3fc, 0x80400) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r14}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x810140}, 0xc, &(0x7f0000001b80)={&(0x7f0000001400)={0x3c4, r3, 0x0, 0x0, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1ec, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x6, 0x0, 0x8, 0xfffffffa}, {0x0, 0x66, 0x8}, {0x8, 0xff, 0x9e}, {0x6, 0x80, 0xff, 0x9}, {0x1ff, 0x5, 0xa3, 0x3}, {0x800, 0x1, 0xd, 0x2}, {0x9, 0x1, 0x22, 0x2}, {0x1000, 0x1, 0x0, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r14}, {0x1b4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x19, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x80}, 0x4004842) r15 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r15, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2dda2eb02ab57e6}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=r3, @ANYBLOB="340026bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0], 0x230}, 0x1, 0x0, 0x0, 0x4}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 03:41:02 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x4028, 0x0) unshare(0x40000000) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x3}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000001c0), 0x2, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB], 0xfd6b}, 0x800) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000000)={0x0, 0xfb, 0x54, 0xe523787aaaf83061, 0x0, "a837cd2d124ebf8e0c872700", "840f0570f631d79d042e8920020000002a3e157e274309362ebbc87991731855005be7c625c312a002e5e85fe0eb2bd9765c835278c7f896492ce956c8e41e"}, 0x54, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext={0x1}, 0x0, 0x0, 0x4000, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0xdf, 0x8001, 0x7fff, 0x0, 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) 03:41:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff132da7c7ff22f39e515789380c7a203b22cb347cd7ac496201ada1a781f86dd55dfbab2c9cd9b71caeb14fc902a8cbd3c3a715f49379dc811c8b9ab476585112"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) 03:41:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1f) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @local, 0x6}, 0x1c) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a74700000000000040000000000000000ff030000000000000000f9de513ff7831cbac689fa062c49de0000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 925.314904] binder: 15887:15888 got transaction with too large buffer [ 925.331437] binder: 15887:15888 transaction failed 29201/-22, size 104-24 line 3493 [ 925.340487] binder: undelivered TRANSACTION_ERROR: 29201 03:41:03 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000001280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000012c0)=0x1c, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)="264e0afb60eac56a9d49fb530cfa81c779bd3ca417ef58d3f4a84196193932ca79670309af0e38dd7d4be68f09f8dca8b9fbeea53f1831807d47b29b36c1a60fa62006ffa065e394bddc5ae4c99461df7df0a8b1a05864f8005653f7b15db2e890f6825e2e035d7cbd5054755037f017de6c4bdc9cecebf1e2b5fd201ad3e046c456169daef4ebc5e9f6e0ecd8a5f7ab1077869d5051fdb6a7850e4556b8955fa399b7c75af79cd3eb5c3be3cf3d6690b960ac01fc0a430f47e3f757028dfd685d752d9b281fca0983c5bb0f9ff7dadbe0814b4982836db4b79d7a3ddc98db947a06033be869e23b6aaef7abb07df88b8043740d4fb502e28e01caeb70f74e46c06763cc6df1066418aadec3a14db04a4e762d4014b6d1fbbc17ba67eef22a0c0afe8f22d3294800c22ad318d579939d6dbc21ac3ce4a9e0b0a6c4b4d9f3d78fd7371eb6c8584b6a3edda4ffc7d207c0e48b9ab50e8eb1767053ff7da7ddea2a607b04b325e5da56b228031db1d786e6c56f8ecfeb70b772bc477f395ca9c3ea431f5a6db62b380264a6854ace538722153bc3d0f7a0970c321636fe31b2afe04a1daa7db859786f49f3eedc881f08ab9d1df63f6f441f1124b8d689ed56416c62434dabebd3d6aa6693fd97f2f55eb5c8e9c5c197e66bd71c6a9fab087575ae92490eb36ca97ded15e0bcc9a0002eab8eb38f48c378fd02239aedd7419c2a5b98c9a357ea58663252675bafa9a867952b0c2137ad6cb679732fe0fffe29a9b2168580f60f02113b69975b0e01c56ea3a5ac9c03e078080387b352949d48d587f042cbf0108398cf7d5ae314b1c8f7f69c215650fea03f1eec99de5f0fcedf2d0fef87faa0d4f84ec06ba60b7829a464e89d201ba37db8cefff4bf1c56e3a2ff4ec9793ddd234e35bda3d7883239517de531c49a86e7abb5491741bc0b74632d431b3a6335da3555e88cfbff9292922dd0f3cf4ad61d5278c69cea9f393a0798a21f7b2542cdc1dd62792e26c1de6e20d8ae20e997d7c4b95f63b3176bd23b220bdf8674b682ac54cdfd567750ff21852518e75e046a60247323261382355fd144457bea405f4ce95e5f7dbc15a82de3bc45caa0612d68ad154abe5d3ca610c50b58a749567775393e2f3e7ff7d804893461cf027a7cb7c8d8e4d438a7dd59e9a9a8e8846cc2b472b27e5f021195d356ca644f1ba6136527d14746540c000fb75d00eec341050558c9ca5d7fadbf182da33c2f9cb171d0b4667bd395fea235af6277bff344eb7e7af8d20c9495e98110bc6f75b6228703fedc8157b17c0ac929b504e78cf2d152ea92ee17098e133548b9ded149f1e651a6a8e809a2dd7dbdf3a8d5a7f530b07405a1c9b99c77c020cd0830ef6695fa3f7e24e1b28bd084c8b140331cd614cfd9295fe5ae826bf2f4515eceaf7d154d8fde6b03fb882a00df6ca3cf96a0b87ddaa9186100ae328ae0fdee3b85eb2f607170a235e86b1256158f2709f0b57338d8cf4112e1b1539b5bd9aed11a3e30c14f92a4deda47f56c8696d342143cacf769cca994ae7538d588e79d39f1abfd6ac5d80c9f55a09f3bf16c1f6ebb39730c45b88f2cf7effc73963ac47e379b30f87f7887a9ca5ba856722eb324333f9fc2ad394cc189d45a6c45da5bff7a9f6c4def052e4a66a9dc6a707152875f8539ba578058c09609797300664b0b54e62c32f03e84714e26d76e40453740d9721eea3511124ff382cb81e1a590c9f14a72e87f73f961e50f8019c06e97816ecc89e330fd21fc6ae5c42202aee304cda2bec0852341a1a1b9f7ce1f386d9832e4584ba3786b66038e1abc2db05f721a6dbd0bf5a045030139e83a23821d6a60c7b8f03dd3e9d05caa498177ed3d47f3888c38f23833f42a4d838fbe67b93445d1c1dc161d8ffb552b4716f2abafbaa119a60d1cddf0cfa830ab98a7cd2d1824310b4a5324378a5b6a48cd1fadb1ea0e1d67dbba5a024e8a34960d38a1936bc88e13a632bda8c629c134ace0a7908327adbb568b851d20f931b2b456ef834483e76221bfa1848d4d773eb0c13bd6a2a206989ee128c89e14a30a892b5d663acf96ec328ab909e1f0fbe5f09ce48267dc8ae4ee9e9b8de5e5f2240130441d4fbd3536f163774606f57bf901297cdd0c3890548de20c7f79ade6ef8d4cb7b2ca91bf7410aa181158aa30cc2c16d9163ee223caa9f14c607508e00bd8afd68507674a1e32119669ff9f79fa09082bb30cd0f6c2f86f61b59c5b2d2e1133b8215a1d07586661511de176953f78e01c3568b15b1e50ba81208b83802b2782957b465a599680b6343ef07edabb8b959609b20353917dbaf55920f56ec15e5d46b7a2a081563fabfb6de4ffdecff2e7e672aeaaf8506239d69c820d1e2dbb43b3eaa5bfd3a52522341acc9531063a9cf32974f0815127f9cc40d92eedb32f1de0a991dc1612dd567055c08e1117a0c3efdc9ed5008f6bab1163d33d9951581f5009b5a67b4c9128ea5c16ba405f6adc8c4397ee2a8325f792c2adb0d2e669727c043d92714aab0e3bcc1682275aeff398c207b1bef2654f2e895f7e829f0d724e19efb1000d00bb039c54f7d462ed7d3fa07651da339da60bf74f0e2093ba789fad21d95adaf2f5905e20811f4f31bf16bceefcdcc7dd89a2f3bf9b6d645fb04db5674c0aa6c2c925e724199e3c59d7e20895b318658c21fc38402a6715de0eb2006a7abc43cf50a4c6b5ca3fef394c9a8daa2a2db94878def09831836d8d59a01bb87f6bd4667fc9d1f2ad54341f66f26d8bbf66e1c1021304c3fc40caae08ca0b4da6fbcba44b31579c4477bad2ddcecbb8af43f2cd3858bedff4241e4f41575ba42ce9a6c12953d78c94714531ffafd3306362d2d817460b56486cf5b55960d0c77f504b42c77b200f25ee83a7a5481ea7432b0f2cd4d7d9e1b98db0864d59d2929e9df07c1f59107a5a64723bf2f4b5f67996efac9b48e981471bd692319a8f5dac88cc9714ed11edca0821bc3756ace5b12de8bcff75090b0671ac9ce872e14dae71ec72f69afb9ef0689a7b38c68c978b17b3970e2a9bf0042576ec305de970e0d24a76238afbd8ba24701d0ac2bed0613cb5b331064021e2f95022f16df5abb282931b9a96bf672e70fb4da98e09cd139ebc8fe7a0545472d97bb7b5e239c7e556e797f64104839db8cc5f44127d0fa03878869aa4524c0a06d5171895716c3a06839dc8a63cbebdc3160636b405059c7c4be097c5d6e5aac22c89e4e95592040888f50c3212a1884fa791a983d4c049d078450f08544efcd81ea0884edafabe5609669d299768f2d02d747629f8a7922d099b8e822c4d13acbc918bfbaa5b71c6281797f85fa3c2a685b21f75327e872fadc329d79ac1c0b07294393b933e56fcd9f6f7cb8b8c326161a034ab79930ba0d63ca17ffa792090750cc951b63d9899176f9baa7f92c56712f42bd0d43a4b146ff1811bd90af84ddfe9bdb7e3972b3b2fab438f26c141322a1039ae5cf1877a601dbe8d565ad592d0ac9b5ff655d7b96085b5cfc56ef2ae335399bd77ece04ae208942f822eeab397db12447cf7cce407c92a605a1d8bfa3f21b2a63f9c9af44efb7bb93e6e412b5170a7526c847070e3cba968b7843adfe2937c527414f8e5ca8a0811f50fe252fdaf5bb5d07bbc1475c37667a499c6b7abfc6f54078a3eb02341bf5b088c8c11206fcbd1cd259039ee32ef660ec1be59debb415f2b0dbd449e3f5da34ea710b75bdf12ef3cb1cfd372753f49e6c0b0445817dd58e3d7696629adcdd1ad4419e2e8aefa063d1830fc1df595b2f955de92cb68017e4830d48746b3b7842cc6ad9bfa448ebb2d81c317ab84de9309a4121a0a163f699d95c513f72e204d9a2d32eece13821afb0b6274ed56b8b92b46c26f0d087327f7826d8b516eb050bfca93699a63b1822d58be2ac106928f073c535bd1a19ed115dd34819738cf6a823d16dc1d318fa751f21f2e0fe9923b206cdf3c78fbfeb01f7f232d00cb6cfebd295db6979775b51a5a6adf7cc1cc0c9493c7afb241c2d8c471b3359b1068c9b3af9f9ccec391e0c04190c24eece8fc19c64fa3175723d1d769a2dc1986f7c54bb984ebe2c3a496f12f164639ab727045d6f6b7480563e7b086824718827d9498e398cfe5e066b852a12e72cdc6d665399f1547565ed7f2aed0463997ab77c2ff0c019a245764abd9baf6fc9fdeab1727ee6c334e19b9c139b5b170dbd45b7854ca5585af4352d3a7f4929f0aeffaabdacd8e938e02befcad07ab39b18ed6b2334bd6387cd65a29658f1b85faec182fe28531a65dc63385bd796c2e1c42216c9aff8932448e5981694019632ddbc8f52cc37041ed56dfeb99d96d7f4bce77e895f5feafe8135af506f73983b3b59a316cafd890093055eda2faa54de711f04e3b7f475e8bc4853ed09156bbfec570c3e63faadebe816ad17d5b35dfbecaa5266a5bf1a113bea98f5648da85a8c3eeae498699667e5f1519abea15e1d142bd687f2728f367a4ba33636d9af70b8fe9222d5e9a44cc54356d43915251b48c21dff1c6b135b6222fa5173f09346c87118684be65df5665b690b897fe953bfc81f9be38a5c8136109f673088824e61a1d4239050ead9c8c9b36aa115bbb4cd8c1a7f0f4af76428809fc14de03c92e4740cf0711dea2a17e54a25939176238b27045f590202beaec826007809017b2fad52a10ac1a934984f7f6172e5410924d2962225fb13e556f71dbf6fb4e5ad60387a22f58650cb75b3b517773828af263055afb001973f3bbb38345612566537aa0f78b8edb18ff29959a1c0412eef4ce2ff300fd1cc7104d28bcc49c8945c95005c59349976a9d126fc90f7975da5115c1abd8a73c30fef3142f7316c992a29d4e51fc46d7da35297d7ea516a2350773589dd2ccfb69075d35f5aed453a03e9c883ba64169c88ddaf3070fba1c23bb634c5d3f08a948a2fafca8bfcfdd3741ae6dc6cfb5efeecd7648ba7cf550a0a663aeb626d1d4f38e0245eed7d8832881233dfb47053b06d41a7ab7cc5a189b74a60a40dc08ac02fa05292e5d4f35b640e3c9983362c46e44a4adbb16b8f16cec0d732af46532c9d69c579eebaacd5e008df9032fb1f34041136c1fe2a234ffe9acb5baee0591e2e21285a0e193f97c770b92e7df2da67639274071fcb28f41a975e63af714c120a659abffdb356840cabcc35cb7703e091eef39c196311bd41340389bbb92f8807ef70875c049fc288feb462e5bb038466053e1b7291864b1a393ec8ad143a4629fba684d0ffbd2a1fb78363edd7cabb9ea722fb250e4b4116be3c3f29798e27d87366a494fe940c4e6aa1296e3d86f28a7b714a892d5b0ae79fe16eceef8a9579387aaab2717ec5b309086db15c015a048c370887f2a2a38b4a3032fc1f83bf22804bf92f7d68f8422862c8eff41e80267b195e2c65be571b3c1dd88d0d92bd7cf4e9a20c49edcd7860a50ac2f0313ce5672d201b046661a36c235e9f8df2835c84a0f80fee66b63462a7cbdcccda8326037b5ded9f8f5312fe850887700589162bb8847f28cc9413b7f9ff7e711a80ba49d50c22d2f46fb8df31fe6bb69af937990ca2fbde48bf2d89be367f4209eb0dcb9497fe942d4ee8b9546422e74232c0114d626184e7eb82c438a7719ac5ba48b3555845222e9c66f2b6b373bf944bb07132ef34eda2a7d6270a9563b2f037f8ff6ff79c2c4c491daa755ea3d1f086d1cbce787be5c67534cc8501232c5d3de8011064fc2ca4df3ce882e58a8102a1dfe7eb91f", 0x1000}], 0x1) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 03:41:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(0x0, 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) 03:41:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e21, @local}}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r5], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0b008000e10028"]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = dup2(r7, r6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000440), 0x131f64) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) 03:41:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) r5 = open(0x0, 0x0, 0x0) fchdir(r5) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 925.444908] binder: 15895:15897 got transaction with invalid offset (11259965444456459, min 0 max 104) or object. [ 925.456293] binder: 15895:15897 transaction failed 29201/-22, size 104-24 line 3379 03:41:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x10000000004, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) 03:41:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000008128"]], 0x0, 0x0, 0x0}) [ 926.094590] binder: undelivered TRANSACTION_ERROR: 29201 [ 926.131954] binder: 15924:15925 got transaction with invalid offset (44534515892224, min 0 max 104) or object. 03:41:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="8500000000000000000081ad3e44431cccbb3fbe03000000000000060000000000000003852a7470ff00"/56], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 926.146938] binder: 15924:15925 transaction failed 29201/-22, size 104-24 line 3379 [ 926.156924] binder: undelivered TRANSACTION_ERROR: 29201 03:41:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8058863) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000004000000000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470ff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(']], 0x0, 0x0, 0x0}) [ 926.203937] binder: 15927:15929 got transaction with invalid offset (0, min 0 max 104) or object. [ 926.214741] binder: 15927:15929 transaction failed 29201/-22, size 104-24 line 3379 [ 926.223833] binder: undelivered TRANSACTION_ERROR: 29201 03:41:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r4, 0x409, 0x8) [ 926.285503] ------------[ cut here ]------------ [ 926.290294] kernel BUG at drivers/android/binder_alloc.c:1108! [ 926.296267] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 926.301672] Modules linked in: [ 926.304977] CPU: 1 PID: 15934 Comm: syz-executor.1 Not tainted 4.9.194+ #0 [ 926.311977] task: 000000006cdb58a7 task.stack: 00000000e865667e [ 926.318011] RIP: 0010:[] [<00000000152e5e35>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 926.327666] RSP: 0018:ffff8801b26774a8 EFLAGS: 00010212 [ 926.333090] RAX: 0000000000040000 RBX: 0000000020ffc000 RCX: ffffc90004d69000 [ 926.340421] RDX: 000000000000047b RSI: ffffffff8223a8fb RDI: ffff8801d2344158 [ 926.347684] RBP: ffff8801b2677528 R08: ffff8801b26775a8 R09: 0000000000000008 [ 926.355021] R10: ffffed00364cef12 R11: ffff8801b2677897 R12: 0000000000000078 [ 926.362270] R13: 00000000000000e8 R14: 0000000000000008 R15: ffff8801b26775a8 [ 926.369519] FS: 00007fa62c23d700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 926.377759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.383746] CR2: 0000001b31123000 CR3: 00000001c8c90000 CR4: 00000000001606b0 [ 926.391088] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 926.398364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 926.405637] Stack: [ 926.407777] ffffffff81249811 ffff8801b2677568 0000000000000246 00000000200000c0 [ 926.415833] ffff8801d297c028 ffff8801d2344758 00ff8801b2677870 ffff8801d2344700 [ 926.423881] ffffffff814fdcb6 ffff8801ca255400 00000000000000e8 ffff8801b26775a8 [ 926.431927] Call Trace: [ 926.434510] [<00000000fb863baa>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 926.441260] [<000000009715936c>] ? memcpy+0x46/0x50 [ 926.446360] [<00000000b29bc4b5>] binder_alloc_copy_from_buffer+0x37/0x42 [ 926.453281] [<00000000d5fd805e>] binder_validate_ptr+0xc5/0x1b0 [ 926.459419] [<00000000aab5a3fa>] ? binder_get_object+0x1b0/0x1b0 [ 926.465645] [<00000000aaf44d25>] ? binder_alloc_copy_user_to_buffer+0x2c1/0x440 [ 926.473260] [<00000000bcabfd9e>] ? binder_get_object+0x12f/0x1b0 [ 926.479486] [<0000000073a8ba99>] binder_transaction+0x3895/0x5890 [ 926.485801] [<00000000a5fe4362>] ? binder_inc_ref_for_node+0xba0/0xba0 [ 926.492548] [<000000009780f2a8>] ? perf_trace_lock_acquire+0x530/0x530 [ 926.499305] [<00000000cf45d0ea>] ? depot_save_stack+0x13c/0x4a0 [ 926.505443] [<0000000091e4c5ec>] ? __might_fault+0x114/0x1d0 [ 926.511330] [<00000000fb863baa>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 926.518129] [<0000000091e4c5ec>] ? __might_fault+0x114/0x1d0 [ 926.523992] [<000000008ef32d04>] binder_thread_write+0x730/0x20e0 [ 926.530293] [<00000000786f30c7>] ? debug_smp_processor_id+0x1c/0x20 [ 926.536771] [<00000000a89a1f0c>] ? perf_trace_lock+0x11e/0x540 [ 926.542808] [<0000000060638e6e>] ? binder_transaction+0x5890/0x5890 [ 926.549366] [<0000000091e4c5ec>] ? __might_fault+0x114/0x1d0 [ 926.555228] [<00000000fb863baa>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 926.561955] [<000000003292a34b>] binder_ioctl+0xecd/0x1720 [ 926.567661] [<00000000db051db4>] ? rtnl_unlock+0xe/0x10 [ 926.573095] [<00000000ec842001>] ? binder_poll+0x240/0x240 [ 926.578813] [<00000000a896671d>] ? __lock_acquire+0x5e0/0x4390 [ 926.584851] [<00000000fc61e779>] ? check_preemption_disabled+0x3c/0x200 [ 926.591672] [<000000002056cb00>] ? __might_sleep+0x95/0x1a0 [ 926.597446] [<00000000ec842001>] ? binder_poll+0x240/0x240 [ 926.603132] [<0000000011d50c6d>] do_vfs_ioctl+0xb87/0x11d0 [ 926.608876] [<00000000c04ef409>] ? selinux_file_ioctl+0x103/0x550 [ 926.615171] [<00000000981de47e>] ? ioctl_preallocate+0x210/0x210 [ 926.621380] [<0000000099d34b5b>] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 926.628805] [<00000000932eba7b>] ? __fget+0x208/0x370 [ 926.634069] [<00000000f2c8acf0>] ? __fget+0x22f/0x370 [ 926.639320] [<000000000f0b0790>] ? __fget+0x47/0x370 [ 926.644487] [<000000007e03c7ca>] ? security_file_ioctl+0x8f/0xc0 [ 926.650693] [<00000000d4037503>] SyS_ioctl+0x8f/0xc0 [ 926.655860] [<0000000013477b3b>] ? do_vfs_ioctl+0x11d0/0x11d0 [ 926.661808] [<00000000a9dac842>] do_syscall_64+0x1ad/0x5c0 [ 926.667630] [<00000000d1d22dee>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 926.674526] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 7e 0e ff 4d 39 e6 76 07 e8 05 7e 0e ff <0f> 0b e8 fe 7d 0e ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 ed [ 926.701686] RIP [<00000000152e5e35>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 926.708983] RSP [ 926.714777] ---[ end trace d85e1e485f627d0b ]--- [ 926.719958] Kernel panic - not syncing: Fatal exception [ 926.725977] Kernel Offset: disabled [ 926.729586] Rebooting in 86400 seconds..